, 0x703, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) (async) 21:24:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0xffffa888, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0681afe5bb002f"]) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000180603071f00000a00000000000000000000000800060000000000040008800000000000"], 0x28}}, 0x0) 21:24:57 executing program 0: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x34}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x40800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:24:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfe, 0x5b}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0xc00, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x20000054) r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xa) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0681afe5bb002f"]) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x34}}, 0x0) 21:24:57 executing program 0: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x34}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x40800) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:24:57 executing program 3: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0681afe5bb002f"]) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x34}}, 0x0) 21:24:57 executing program 2: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000080) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x4a}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x8010) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x482000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x40049409, 0x3) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480401, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000180)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 21:24:57 executing program 3: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0681afe5bb002f"]) 21:24:57 executing program 0: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x34}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x40800) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x34}}, 0x0) 21:24:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x7000000, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:24:57 executing program 3: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0681afe5bb002f"]) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000000150000000a0000000400000000000200080006000000000004000080"], 0x28}}, 0x0) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x40000) 21:24:57 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x40049409, 0x3) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{0x77359400}, 0xd, 0x4, 0x4}, 0x10) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x40000) (async) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000000150000000a0000000400000000000200080006000000000004000080"], 0x28}}, 0x0) 21:24:57 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x111080, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x40049409, 0x3) 21:24:57 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x40000) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000000150000000a0000000400000000000200080006000000000004000080"], 0x28}}, 0x0) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0b0000001c01030700000000000000870a0000000000fe0000000000"], 0x1c}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', r2, 0x40, 0x1, 0x8, 0xffff, {{0x20, 0x4, 0x0, 0x6, 0x80, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x20, 0x5e, 0x0, 0x6, [0x5, 0xe48, 0x4155, 0x0, 0x9, 0xfff, 0x1]}, @ssrr={0x89, 0x27, 0xfa, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0x1b, 0xcf, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x6c, 0x0, 0x3, [0x1]}]}}}}}) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x6, 0x4, {{0x24, 0x4, 0x1, 0x1d, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0xdc, 0x0, 0x1, [0x7, 0x0, 0x2, 0x6c8626ab, 0x1be]}, @noop, @ssrr={0x89, 0x23, 0x43, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @private=0xa010102, @broadcast, @private=0xa010102, @multicast2, @empty]}, @generic={0x83, 0xd, "4bdfe13653aa39b8f5e70d"}, @rr={0x7, 0xf, 0xa2, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @remote]}, @ssrr={0x89, 0x23, 0xd, [@empty, @loopback, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, @loopback, @broadcast]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newroute={0x48, 0x18, 0x703, 0x0, 0x0, {0xa, 0x94, 0x0, 0x0, 0xfd}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x4, 0x7, r1}}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x48}}, 0x0) r2 = getpid() r3 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000000c0)) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1a) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000040)) sched_rr_get_interval(r2, &(0x7f0000000000)) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[]) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0b0000001c01030700000000000000870a0000000000fe0000000000"], 0x1c}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', r2, 0x40, 0x1, 0x8, 0xffff, {{0x20, 0x4, 0x0, 0x6, 0x80, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x20, 0x5e, 0x0, 0x6, [0x5, 0xe48, 0x4155, 0x0, 0x9, 0xfff, 0x1]}, @ssrr={0x89, 0x27, 0xfa, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0x1b, 0xcf, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x6c, 0x0, 0x3, [0x1]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0b0000001c01030700000000000000870a0000000000fe0000000000"], 0x1c}}, 0x0) (async) socket$inet(0x2, 0x3, 0x7f) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', r2, 0x40, 0x1, 0x8, 0xffff, {{0x20, 0x4, 0x0, 0x6, 0x80, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x20, 0x5e, 0x0, 0x6, [0x5, 0xe48, 0x4155, 0x0, 0x9, 0xfff, 0x1]}, @ssrr={0x89, 0x27, 0xfa, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0x1b, 0xcf, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x6c, 0x0, 0x3, [0x1]}]}}}}}) (async) 21:24:57 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x111080, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x40049409, 0x3) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[]) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x6, 0x4, {{0x24, 0x4, 0x1, 0x1d, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0xdc, 0x0, 0x1, [0x7, 0x0, 0x2, 0x6c8626ab, 0x1be]}, @noop, @ssrr={0x89, 0x23, 0x43, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @private=0xa010102, @broadcast, @private=0xa010102, @multicast2, @empty]}, @generic={0x83, 0xd, "4bdfe13653aa39b8f5e70d"}, @rr={0x7, 0xf, 0xa2, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @remote]}, @ssrr={0x89, 0x23, 0xd, [@empty, @loopback, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, @loopback, @broadcast]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newroute={0x48, 0x18, 0x703, 0x0, 0x0, {0xa, 0x94, 0x0, 0x0, 0xfd}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x4, 0x7, r1}}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x48}}, 0x0) r2 = getpid() r3 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000000c0)) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1a) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000040)) sched_rr_get_interval(r2, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x6, 0x4, {{0x24, 0x4, 0x1, 0x1d, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0xdc, 0x0, 0x1, [0x7, 0x0, 0x2, 0x6c8626ab, 0x1be]}, @noop, @ssrr={0x89, 0x23, 0x43, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @private=0xa010102, @broadcast, @private=0xa010102, @multicast2, @empty]}, @generic={0x83, 0xd, "4bdfe13653aa39b8f5e70d"}, @rr={0x7, 0xf, 0xa2, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @remote]}, @ssrr={0x89, 0x23, 0xd, [@empty, @loopback, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, @loopback, @broadcast]}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newroute={0x48, 0x18, 0x703, 0x0, 0x0, {0xa, 0x94, 0x0, 0x0, 0xfd}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x4, 0x7, r1}}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x48}}, 0x0) (async) getpid() (async) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) (async) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000000c0)) (async) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1a) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) (async) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000040)) (async) sched_rr_get_interval(r2, &(0x7f0000000000)) (async) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0b0000001c01030700000000000000870a0000000000fe0000000000"], 0x1c}}, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', r2, 0x40, 0x1, 0x8, 0xffff, {{0x20, 0x4, 0x0, 0x6, 0x80, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x20, 0x5e, 0x0, 0x6, [0x5, 0xe48, 0x4155, 0x0, 0x9, 0xfff, 0x1]}, @ssrr={0x89, 0x27, 0xfa, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0x1b, 0xcf, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x6c, 0x0, 0x3, [0x1]}]}}}}}) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[]) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x6, 0x4, {{0x24, 0x4, 0x1, 0x1d, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0xdc, 0x0, 0x1, [0x7, 0x0, 0x2, 0x6c8626ab, 0x1be]}, @noop, @ssrr={0x89, 0x23, 0x43, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @private=0xa010102, @broadcast, @private=0xa010102, @multicast2, @empty]}, @generic={0x83, 0xd, "4bdfe13653aa39b8f5e70d"}, @rr={0x7, 0xf, 0xa2, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @remote]}, @ssrr={0x89, 0x23, 0xd, [@empty, @loopback, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, @loopback, @broadcast]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newroute={0x48, 0x18, 0x703, 0x0, 0x0, {0xa, 0x94, 0x0, 0x0, 0xfd}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x4, 0x7, r1}}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x48}}, 0x0) r2 = getpid() r3 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000000c0)) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1a) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000040)) sched_rr_get_interval(r2, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x6, 0x4, {{0x24, 0x4, 0x1, 0x1d, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0xdc, 0x0, 0x1, [0x7, 0x0, 0x2, 0x6c8626ab, 0x1be]}, @noop, @ssrr={0x89, 0x23, 0x43, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @private=0xa010102, @broadcast, @private=0xa010102, @multicast2, @empty]}, @generic={0x83, 0xd, "4bdfe13653aa39b8f5e70d"}, @rr={0x7, 0xf, 0xa2, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @remote]}, @ssrr={0x89, 0x23, 0xd, [@empty, @loopback, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, @loopback, @broadcast]}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newroute={0x48, 0x18, 0x703, 0x0, 0x0, {0xa, 0x94, 0x0, 0x0, 0xfd}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x4, 0x7, r1}}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x48}}, 0x0) (async) getpid() (async) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) (async) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000000c0)) (async) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1a) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) (async) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000040)) (async) sched_rr_get_interval(r2, &(0x7f0000000000)) (async) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0x7f, 0x7fff}) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x16) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0xa8, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4f}, [@RTA_MARK={0x8, 0x10, 0x101}, @RTA_PRIORITY={0x8, 0x6, 0x6b7c6944}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_METRICS={0x2d, 0x8, 0x0, 0x1, "6fb1528e4e7f2cf37e35ad3321a1136179e52228d005fda3bc44ea1bc23a80d5cef888196786b5f409"}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x7f}}, @RTA_PREF={0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x1000, 0x4, 0x80}}, @RTA_MARK={0x8, 0x10, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200000d4}, 0x2000c814) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB]) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0x7f, 0x7fff}) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x16) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x16) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0xa8, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4f}, [@RTA_MARK={0x8, 0x10, 0x101}, @RTA_PRIORITY={0x8, 0x6, 0x6b7c6944}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_METRICS={0x2d, 0x8, 0x0, 0x1, "6fb1528e4e7f2cf37e35ad3321a1136179e52228d005fda3bc44ea1bc23a80d5cef888196786b5f409"}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x7f}}, @RTA_PREF={0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x1000, 0x4, 0x80}}, @RTA_MARK={0x8, 0x10, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200000d4}, 0x2000c814) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB]) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @broadcast}, &(0x7f0000000280)=0xc) socketpair(0x25, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x2c}}, 0x4000) 21:24:57 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x111080, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x40049409, 0x3) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB]) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0x7f, 0x7fff}) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x16) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0xa8, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4f}, [@RTA_MARK={0x8, 0x10, 0x101}, @RTA_PRIORITY={0x8, 0x6, 0x6b7c6944}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_METRICS={0x2d, 0x8, 0x0, 0x1, "6fb1528e4e7f2cf37e35ad3321a1136179e52228d005fda3bc44ea1bc23a80d5cef888196786b5f409"}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x7f}}, @RTA_PREF={0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x1000, 0x4, 0x80}}, @RTA_MARK={0x8, 0x10, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200000d4}, 0x2000c814) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @broadcast}, &(0x7f0000000280)=0xc) (async, rerun: 64) socketpair(0x25, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x2c}}, 0x4000) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0681afe5"]) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x253c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2508, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x41}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x24e0, 0x4, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_PATTERN={0xd4, 0x2, "8335716482870c8ba83c85c5258dc94a2e74b45b8124ce3579b3e225aedf65579ce962d1b052c07d3d97b1606cfeba1e794e3ce1c970c2c0520c2687776f59fe387d3f692b7d505c60bcc2bf675e3eae9eeeb85c9a3c56663dd3f78b60523e9271f3ceb4415a41af54631e7e8ed2fba366c9e4f8507f9d7adfb424258303f2d641db21a316c94300d60e6b7576b7aa9fe929df7884dd54144dfa8a1e9dd7b240e8b076ab421d220e562268a8faa699cdcfa6978625d21d70f8328e511f4e6f2d83a4d31238cc5fb3808acba7804e3e43"}]}, {0x12d8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x99, 0x2, "a03488750533450e90d5907be9dbb1e22630aa4f7d73dddef31ccd1e8b0e5d43d953c6fb179827e6ab6bba3659b3d0daecc677afc6d4b5b7a485e750e776bba5124f1e1fc1975e1185ddbdd34ecc226673fa686940c649e4fa2e769b702c84e6938878921e3da1edcba7f9e6e5e5e8a4a81faf6ca83d2be78a76edaedadcca8f21d005f9d3ed436a217128b0fcec3faad8b9f3f392"}, @NL80211_PKTPAT_PATTERN={0xc, 0x2, "d54d47f1e62e4fec"}, @NL80211_PKTPAT_PATTERN={0xbc, 0x2, "77688d34b5354ef27839656aa8ad6ed2b44ba34008e72d9ed89802890f5776479f19d23bbaf1e3b2c82701aa48933603a50fa0d8f2cb68853666e81bff999a6e01f51087ce5fc773f843cebc56aafa0062eb27caf4bd217b0793d57dd2fd10ab2f6cba52bfc9a2967a8cd0dd1e842267c96e3dd82430a9cb234702e8dcf7051c66217e9ffbfa8b9b01886b5ba6c5596ed612ae60056dbb2a76566666f3a220de4b9f4d2d7ebcd8bd6e79758bb71c0d4fad68452820d9ff84"}, @NL80211_PKTPAT_MASK={0xeb, 0x1, "a830a1f2df2d0a5886f86ca4213e5e33d66843221fd4fc9d71f21411573c2c729c4c0dfef93a83195055465dcf430261f8c5a295f6e576a022cf8699594a2f2fc2ba99ebc9538bdea2469a4da6cef86935a582e82a4d86c15cd569e79264a226edd7fd329b00a1c4a9ec0636d6b028fd0fd3e1dc7038798de96e131a66941b3b61ea44ff514f2d56eae71409628b81c97d93bf81928b678384ecf6fb36a5fd31cb9e172c2e27a0032896f2be3d7466fcdc88300dc1ce9fb954c034513f10c6cefbcdaae6914b2e479851c5c9e0cfb7838f8c41393fee982d88dcbb4ff799df4a996ca7a37162e0"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x77, 0x1, "610e64485cb0be0b04834609b75b18ef695842ef035f50460727b89fe643f2f7d0d740ed0f2cf5798e31d358845df67a8810326044523966442ce8fa0ab7efbed60202eea903a17f565e63be75fd7bac277ee0f3a5f678205b94139986f013cd051becd81cef8966bc967dcf356f2c15cb296c"}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x103, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}]}]}]}]}, 0x253c}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = getpid() r6 = getpid() sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r7}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="06"]) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @broadcast}, &(0x7f0000000280)=0xc) socketpair(0x25, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x2c}}, 0x4000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x2c}}, 0x4000) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="06"]) 21:24:57 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x111080, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0xe4, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0xbe, 0x8, 0x0, 0x1, "3148b787029f997e5ee6f5b4182b4b0967b67f3211199da52540693a4450e12fd11b3c5f098e4fbe7a0ad2012e95019197c30cb86036fa48c64deb5aef8de60c3408129caca7ac738b3f238a492e30dcc9fe39ab101abaaec06be7b30684d09f25c6a4c4331e9c88f4901bf66e9ebd030915254df008d771d67e89b23fc68abefe17cd160ceff0d342134c5046bbab4c4f24a3a10d898eac878ea9ac0a43edc2ead7f58b87b02c6a0819f93ff26c44729dc41b3e08e289ec3c17"}]}, 0xe4}}, 0x4000000) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x253c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2508, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x41}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x24e0, 0x4, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_PATTERN={0xd4, 0x2, "8335716482870c8ba83c85c5258dc94a2e74b45b8124ce3579b3e225aedf65579ce962d1b052c07d3d97b1606cfeba1e794e3ce1c970c2c0520c2687776f59fe387d3f692b7d505c60bcc2bf675e3eae9eeeb85c9a3c56663dd3f78b60523e9271f3ceb4415a41af54631e7e8ed2fba366c9e4f8507f9d7adfb424258303f2d641db21a316c94300d60e6b7576b7aa9fe929df7884dd54144dfa8a1e9dd7b240e8b076ab421d220e562268a8faa699cdcfa6978625d21d70f8328e511f4e6f2d83a4d31238cc5fb3808acba7804e3e43"}]}, {0x12d8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x99, 0x2, "a03488750533450e90d5907be9dbb1e22630aa4f7d73dddef31ccd1e8b0e5d43d953c6fb179827e6ab6bba3659b3d0daecc677afc6d4b5b7a485e750e776bba5124f1e1fc1975e1185ddbdd34ecc226673fa686940c649e4fa2e769b702c84e6938878921e3da1edcba7f9e6e5e5e8a4a81faf6ca83d2be78a76edaedadcca8f21d005f9d3ed436a217128b0fcec3faad8b9f3f392"}, @NL80211_PKTPAT_PATTERN={0xc, 0x2, "d54d47f1e62e4fec"}, @NL80211_PKTPAT_PATTERN={0xbc, 0x2, "77688d34b5354ef27839656aa8ad6ed2b44ba34008e72d9ed89802890f5776479f19d23bbaf1e3b2c82701aa48933603a50fa0d8f2cb68853666e81bff999a6e01f51087ce5fc773f843cebc56aafa0062eb27caf4bd217b0793d57dd2fd10ab2f6cba52bfc9a2967a8cd0dd1e842267c96e3dd82430a9cb234702e8dcf7051c66217e9ffbfa8b9b01886b5ba6c5596ed612ae60056dbb2a76566666f3a220de4b9f4d2d7ebcd8bd6e79758bb71c0d4fad68452820d9ff84"}, @NL80211_PKTPAT_MASK={0xeb, 0x1, "a830a1f2df2d0a5886f86ca4213e5e33d66843221fd4fc9d71f21411573c2c729c4c0dfef93a83195055465dcf430261f8c5a295f6e576a022cf8699594a2f2fc2ba99ebc9538bdea2469a4da6cef86935a582e82a4d86c15cd569e79264a226edd7fd329b00a1c4a9ec0636d6b028fd0fd3e1dc7038798de96e131a66941b3b61ea44ff514f2d56eae71409628b81c97d93bf81928b678384ecf6fb36a5fd31cb9e172c2e27a0032896f2be3d7466fcdc88300dc1ce9fb954c034513f10c6cefbcdaae6914b2e479851c5c9e0cfb7838f8c41393fee982d88dcbb4ff799df4a996ca7a37162e0"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x77, 0x1, "610e64485cb0be0b04834609b75b18ef695842ef035f50460727b89fe643f2f7d0d740ed0f2cf5798e31d358845df67a8810326044523966442ce8fa0ab7efbed60202eea903a17f565e63be75fd7bac277ee0f3a5f678205b94139986f013cd051becd81cef8966bc967dcf356f2c15cb296c"}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x103, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}]}]}]}]}, 0x253c}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = getpid() (async) r6 = getpid() sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r7}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="06"]) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x253c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2508, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x41}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x24e0, 0x4, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "23b7d876ffd1ff07f7eb735d2a2abb9884d01d0e292276ed12d5ae9fce760ac7e10cbcf2430398d034430d74b3de4d4d884cd0f63af235127c3d7ea7a65d08f776405511c9534fe27a9c5df6c8bed9a250ace9d2a8af29890dacb2cb0f5637f047125837d9cda047f625c78399f0dcfa3ef825a24eca511acca0c42f09208b6ae1a5610ccee1f6f45d97122d07bec0f97b26663d5b3161b023a4eb563a9701ca0b3554e32a8e663b78a9e19ed2c049588d1c544c8d9481691484072663ea9b2282f4342e2962e7a6b99afdf5a5709cb0aa378e49629182a52ad36d3fbea2a1ba01a3778a1f5fc6e956d09e56c6a47b5a37f0ff891b8e9a6f66e6ea22eb3cfdf14da83555a57031ea058d528fdccee454b61422bb2e427b3c5c80d9c3b3259ae3eda2669ced7651328143abf547e63168612741d71346f4c43dfa0160420e22c5c98426b167f588d14290da15581eac44e802a1b3e70396f16abb14ca210287f67dfd1346ba592159691b080ea9e8a673c00d3b32baf72d408f454083bba4a585d885cc735c8bf2d11787f67bbb1176c81891a112cd4190fa7d7bfef94a0b28d6c7b7bd8b7eb5dc443fe262a701de06225e017c75229190eac55c0461db3bde6a20ad276fb861b1f405cd1c591c5aca96a193c034397c317e7065e984308d0496a02f4e99a8808f495db960ed4eda65dea1810a4939e798517b92506d0ffc03962c8a89c7c8388a86f1011d4e5d4fa9856e5906e9d5ea3336e0bdd365c37e4200e8cf41ae0bb257872292c20bb754ec89749d1c4b7ea1c0fcac52ed89bd1c02e8c25c5856a7987fab82258bc00d16592649dc138569d17d673e94f981ee3548cffcc079a084e60b8edcde183ff5dd9a0bc69a0c3c683146342e18bad784b3af877f7cff7e3553c761849db9f36109f12ed2a87c0666929e6f0f962e9dd8c408ed086da26b651d240a96db71c6b724ad7883b189653aa73eeaf1f2ad71fd38cf4e34b6395643c2d9860f8cdf9e52b8351d63465076390a7b7d94c9fd2579a8c5ab3c039f8e1630718e158293f142f18680bd066caaca0a30b2ed480f9b844fa47014f66435d7a02211fb5d31232e595490b380d6165b4aa29e0af8288039f8722c7aa388304bbc91edd1deb378d65f2fed387619a33f8e57825b90d181ad590eed2dec283baa448b17cd4aa8b32d38763ad8c1e574e54208e6926c4777fd0b07a6ce7e31b9f59bbb83f49023d650d28afee31e7ca7e30023680eb5a2cb648fc088ae2c36f9b3b963c878d90e02bdb61b11afc15313c42918045c85fdfc0284cebab2f859e3fcef63e000e9ab87bb8509f1f0a921896ffc0e8fc6aba593c83f1b2a7596f744be5c01a806f9005659a4ab8f5c6fe8f44d700268cc4f109a43f73e0da32fbaad012bdb92058b45b836f070de3cdd166cd0a62aef0a137cddfc6bc74e377a92eb5fa74f709450f0117a8b710372906c87c7678ae86d00bf0d5e0dc3753edbef8f770c3ea76c265244db038f14bf3ad8c1ad7d3b0152ba63e405dbf6cf1c870fc124cfd7b43cbc7d205b1338b06e37366123429606aa1db8b8af30cfa2c46289aeac6fc8f9e8b0bba4c7a7917600d56807a329d29c41c7f5e75592d372ce25cd88593b8746fad1c1592050193526ca77b59b74b60f1a6563cb1ebf9ede6d0817faab43d59a29e8450b135caa1897c67ec3b47a56a274f96b99bc045405b1694aa5707a8bea6edeea9a71634ae1c481d3607505912fc0c1d0850a092c2b0c5bed1e4714d28706864371a3342610b61f35213f9f9bea2834281e7c3fde784bde487b89f5b1c1ca7cda3402a9e34affc1e0cd939e92406242c1ee4a49d9a6b9abe7af49a1ee99744d9f11c5942a26bb8e512999f38ad371694bcbeda1afcb185ec8eef11e0b5184e5aca6d58c5bb3d58832dacc5481c5fd4c57026f00844ca7d36d0d0145539164db41e71104c082239b78e5f84f0ed2f21031f49d39d30b1a8805b3c33416a37af540cc46847f0be9e7c90c16b1bee2d6cc526fb32f3e46214e0622fa268b835ac319900395f9779f537cfc3cb32a6807715f43161b027997c97f745f70fd4a3298d0bb6b470338242e112ea594e399a010aa4f2932ecf90efb7b861ad9ce0909cfc38e3b261adbec5f6fb2485f192f0c038245f672efd9090f023210a2809bd4d4bbe3a38530ce226c68b7789884776d6f10a2731dd459e0f7059f299447983963991b92f5d93516a29f34204c09bae984e7e20903a2cd55763b53557586905eb62182bc5d7feba82ecb99951c0d166500c3a9119cda922e687491811bc51616ed5dd28de103f6dd135a35758b2ec19123e89ff4d579ff5e132af0f137f67af944550cf82c4e9245f24ab230ff36695eddd946a73d539b92f8a9eedcee66fa9e54ecae82ebe0ad7e57af2a64902d35a1137cc9c1d337bed92902296c05ad1218c31626eaa792034effd0239d320c3f12287f254e3fb9d15ef1b66b692ddadd6a6269cba0436712c486b016fad0e9e96f6c9ae14eda0488e4045a1bf51efa4317520e96a2a08b879f88d3b6ac6745f5953f6d78e8f78ae2376d12d8320383f25657098106beff99dbb4577ba4bbc308590ae9a425bf21e59103c1e749f2d30f412cf68b172f1458ec8b987bf3f05faec487d49dc29ad5cbcaf1aa558e46ddd7933f34c653f5e7da530e350730135b2859d8dca71c6787bda2c4c2a4d66424a30e3135ae341efc358daf3cc3e37c0a67e3451042aea7f866f10ee13cd13c50ba4f0a83aed202f02924c4d375435db46346f6565cae07378780eb65b070b8229210e2fa8ecd81565b59520efb787ad89f2249b7b460bdb2ac8c54b39458b4d5873453f4c6a9cd4aa3b927fecd1c2710b1aabdd11cfade898960cba8ab3c855444ac89fd9e774852a4dc600097cf1f8602b4779525b1a41a22501ffc3327aab2778e65fbd9bfeb30af11489bb86c159d230201a733b3f2b70d94563a715473c5cdd71c9925ca409b0d4501b609466221e013c472ecfd07081d68eebea81d738b3483806b7723f369f83733a923ed13be4a47a3e2a7e4274ec8d159ad5f9b77ab958bf3f36f9df59c9d5f41f8e2f1e01f0e28f6133eb1d6eb52acc90292386a0c691e05c8cc9f2d93a094bda77658de53b5ba13b4954bad951f91985654900874ca51a4c8e33db2fe149adb20db3b9e7ab4b5f982ef634681b46e8443ff326ef5d1e47756b0e0ae4ff89fd707e4938e1d34650e999c03fc69dd9c6216dabc8221ae05976b5408db8c07e10ff50c3b6abbf5572952be71ae062ccdde896d9d7c329ec5cb9e7fcd44a8692220439a6533e9c5a00e8a491879bc8ea0c7b304e547f308866ccc47761b047c93456c35413e5c343a71fee700cfc87f11a01cab2841a63932225a148d898ea8a63ca56a0f63692173f1f8536faed6a0654a0cdc26710514a25125e865e3c0297c28d4521a5f7f059f7597192ebedb2ea1202842d5c5f0603a1e812a6ec62fd7de4444f6829818d0f0f2a28a6775f95e923f1335bc36b6e6f4efd9078a3287e92dc79f8768ec30cea22e4be54ac56fa0d95d80f740604188e5eba7b70d607b0e63ab48277c3dd6d817f4ba0457d91541068013d821e4486c3fe9bd6c9ef4268ea16fd8593870e667a55cf31a5c3f620cf347bf65c55dfcccd852b71f40c709607fdbd901e7751c54e77c7ffe3c80f034bed6b49b4f3aba1e1895d53417631c76b69f95d02bf5f99ec65789c72600a464473bf0a9bb968209bd3710752f5274a4df1237ebcbae435bb0c7470cb9a8abdec8a36fcc15c1dbf8866ecbb83e9f5de7e9010378f2c49408164a84d9db1df1557fb69929c5df2c5622399a6259c9cc212f572a6fa5f7a50324ad0b7f3177e498c69cec61690ecc9c515c6ac67dd06e31913c6201487b81fd8ad797be2ed8fb5842db263bfe1481bcc1969de9dae763cee2d24071d75f6e697ef829598ef9b328d7663d819189a6f4dddfc15a32eb79a9feadf76cb77599037ff37e08193413b827f8c36961ad3b380b6e4031cc5a54fde81423fb033f12b2c55b411b66c17b78e5c2db0c70dd4600cc3e2c60ad8c78900cc5bb48296c6f202cb132d9318040b8d9cc7951534da4ff3531ac91a2b20786743c482c14768bda320ff68124367f4283697fd468fe4c08264e4615506111ceff0b3dd400fe867b0611b8e432fb2efeaf9d06e8c0e5cd1b75e291fbf4e099859bececdb67211467c821209a322248ddc14c0352b14b30d8257ec19908c01f8ad46c07fcc5d32f408d49afda745371d37b9d1889724e8f244eafc0fda2ef027781172d419a7e19213159b0cba8b61605ef0a141537c7bfa98800239820bdd1916c1b5cc019aa5a97e7806928cf2b490ce911e3b4a36d5b8ef259fa083ba11d417fc77f2c55927bde6657538bf73bfa2d5a680b635c44c8f79d6d124e7be2cfdf242dea584947b65ef587428439c2ce7f11209edd2c71d9ae09e91ed0ce570fe228b125b2c239b5495b294b08d105bffacd34a10e8a1042642ce92f36492e97fe1e5d6b674a85523485a64d83954196cfa5b3a78d0fbb1d9f11dc45cf474f72e49d446d32deb9849373feaab8fb9944e1c08c96a771ea2ad29fd89750eda6c728f0f938cf00f4a6e0a06d8b7b41b49ee82d43391dbea0cbb6af5802ee7ad13b5ad57e160b4d0757a66ed3889b1a9344812e1a40f321c7d53c5accbb099474d7465d197ab90dddcbe456947f550f0456972e597dc6cfe646abf45246e7f93d5cdb494b122c2f256be665891729e137f9601ca6027e40d64e3d7403412d725b09dcff9ad9e2c2cbae47f0c7c7a1472e0aa74662ae7ce1f03c943db6e1756fb36ccc2d088c5652c67559a187f23705e20f37dbec1b865ffe72c0b89b5a17632602a70ef030a54e9cc208bf6e0595f7c5a77cc1fa6adb4491851f73b206fb100dd1a39560fcd0fa7edb4a5043b5765088084bb01796c07f83b8b9c51f904d6b031fb91d09b8aa1dfdc45de1955abb866ce84a916fcea0cd4dfdcd2fe782dbdd53839df46b18391c451bd2c7683c34eaa8d0eaf7db67d7f11b22cc8900cf7c7bb418e06e1af6a814352e9e5d7b67ee2bdd519893606c2c053db5f063182d88152f8e2a043655429aff27d4f4a42dbb3b6a11d87962d4857abe49b9952586b918e3ae7a774ae89cfd59f8809725cfe9e48960f9e714b010a982753648135fe75f18c076c3a323c8263b882414a7dfb0a1b9c055de10bc30c3ae5467b39b8f2ed822238ffe5a187019dbdcd8180b2652535d545c0f19538cea17936076d2bd8177c7a5cba9ac52b423fbef7ba6b53640bdde8de2c3343d2942d32ce4336f1483cd5f6a30fcd5ca58fa34cd14e2102861522afeecedbf1743ba6061f14711cba4ea1d6b07a8fcd71825208282737d6a181c742228519bf828f539e42dae0c3784835c8c6d2f640d469175ae95cb33b8cb15c095d96c04c168923f07cd77f4cb5494f3054191cb306d20ac1e555eee936f3cb417bb6e3d5313e266b6d72cf693a78c76c4e657906d228cd265b88d1dc0a14d5d65dd95b83d0963d396524d532e635dbbd0bd1262cdbeed7566cbcbc8696eebb5b0eecf4069f2ae6de67c765b8ed9eefd9409a0f13ceb552f94b9f1cac57165d282403501d95847681951dc593999ad5d3a54f7e9fc1658985e83273d7304b0816feb2d572834a55f8f2c32882ba6f32aabbaeb4f8a8fefb72dce6b26a61965dd97451c185c29576cf585af3d288b8754d20cdd1d6566df7d68215f4ca6c369929a2c"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_PATTERN={0xd4, 0x2, "8335716482870c8ba83c85c5258dc94a2e74b45b8124ce3579b3e225aedf65579ce962d1b052c07d3d97b1606cfeba1e794e3ce1c970c2c0520c2687776f59fe387d3f692b7d505c60bcc2bf675e3eae9eeeb85c9a3c56663dd3f78b60523e9271f3ceb4415a41af54631e7e8ed2fba366c9e4f8507f9d7adfb424258303f2d641db21a316c94300d60e6b7576b7aa9fe929df7884dd54144dfa8a1e9dd7b240e8b076ab421d220e562268a8faa699cdcfa6978625d21d70f8328e511f4e6f2d83a4d31238cc5fb3808acba7804e3e43"}]}, {0x12d8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x99, 0x2, "a03488750533450e90d5907be9dbb1e22630aa4f7d73dddef31ccd1e8b0e5d43d953c6fb179827e6ab6bba3659b3d0daecc677afc6d4b5b7a485e750e776bba5124f1e1fc1975e1185ddbdd34ecc226673fa686940c649e4fa2e769b702c84e6938878921e3da1edcba7f9e6e5e5e8a4a81faf6ca83d2be78a76edaedadcca8f21d005f9d3ed436a217128b0fcec3faad8b9f3f392"}, @NL80211_PKTPAT_PATTERN={0xc, 0x2, "d54d47f1e62e4fec"}, @NL80211_PKTPAT_PATTERN={0xbc, 0x2, "77688d34b5354ef27839656aa8ad6ed2b44ba34008e72d9ed89802890f5776479f19d23bbaf1e3b2c82701aa48933603a50fa0d8f2cb68853666e81bff999a6e01f51087ce5fc773f843cebc56aafa0062eb27caf4bd217b0793d57dd2fd10ab2f6cba52bfc9a2967a8cd0dd1e842267c96e3dd82430a9cb234702e8dcf7051c66217e9ffbfa8b9b01886b5ba6c5596ed612ae60056dbb2a76566666f3a220de4b9f4d2d7ebcd8bd6e79758bb71c0d4fad68452820d9ff84"}, @NL80211_PKTPAT_MASK={0xeb, 0x1, "a830a1f2df2d0a5886f86ca4213e5e33d66843221fd4fc9d71f21411573c2c729c4c0dfef93a83195055465dcf430261f8c5a295f6e576a022cf8699594a2f2fc2ba99ebc9538bdea2469a4da6cef86935a582e82a4d86c15cd569e79264a226edd7fd329b00a1c4a9ec0636d6b028fd0fd3e1dc7038798de96e131a66941b3b61ea44ff514f2d56eae71409628b81c97d93bf81928b678384ecf6fb36a5fd31cb9e172c2e27a0032896f2be3d7466fcdc88300dc1ce9fb954c034513f10c6cefbcdaae6914b2e479851c5c9e0cfb7838f8c41393fee982d88dcbb4ff799df4a996ca7a37162e0"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x77, 0x1, "610e64485cb0be0b04834609b75b18ef695842ef035f50460727b89fe643f2f7d0d740ed0f2cf5798e31d358845df67a8810326044523966442ce8fa0ab7efbed60202eea903a17f565e63be75fd7bac277ee0f3a5f678205b94139986f013cd051becd81cef8966bc967dcf356f2c15cb296c"}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x103, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}]}]}]}]}, 0x253c}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = getpid() (async) r6 = getpid() sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r7}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0xe4, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0xbe, 0x8, 0x0, 0x1, "3148b787029f997e5ee6f5b4182b4b0967b67f3211199da52540693a4450e12fd11b3c5f098e4fbe7a0ad2012e95019197c30cb86036fa48c64deb5aef8de60c3408129caca7ac738b3f238a492e30dcc9fe39ab101abaaec06be7b30684d09f25c6a4c4331e9c88f4901bf66e9ebd030915254df008d771d67e89b23fc68abefe17cd160ceff0d342134c5046bbab4c4f24a3a10d898eac878ea9ac0a43edc2ead7f58b87b02c6a0819f93ff26c44729dc41b3e08e289ec3c17"}]}, 0xe4}}, 0x4000000) 21:24:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0681af"]) 21:24:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0xe4, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0xbe, 0x8, 0x0, 0x1, "3148b787029f997e5ee6f5b4182b4b0967b67f3211199da52540693a4450e12fd11b3c5f098e4fbe7a0ad2012e95019197c30cb86036fa48c64deb5aef8de60c3408129caca7ac738b3f238a492e30dcc9fe39ab101abaaec06be7b30684d09f25c6a4c4331e9c88f4901bf66e9ebd030915254df008d771d67e89b23fc68abefe17cd160ceff0d342134c5046bbab4c4f24a3a10d898eac878ea9ac0a43edc2ead7f58b87b02c6a0819f93ff26c44729dc41b3e08e289ec3c17"}]}, 0xe4}}, 0x4000000) 21:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01430700000000000000000a0000000000000000000000943241562f419884dc53598cc57f92b1730fad5b5ec3015dffa597"], 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = getpid() r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1e0001000000009000000000000000000000000000000000000000000000007f000001000000000000000000000000ac1414bb000000000000000000000000e0000002000000000000000000000000e0000002000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff76ffff00"/160]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r9, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0xa, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0xc004) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7d931fc456"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x88d1) 21:24:58 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0681"]) 21:24:58 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x111080, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01430700000000000000000a0000000000000000000000943241562f419884dc53598cc57f92b1730fad5b5ec3015dffa597"], 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r3 = getpid() (async) r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1e0001000000009000000000000000000000000000000000000000000000007f000001000000000000000000000000ac1414bb000000000000000000000000e0000002000000000000000000000000e0000002000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff76ffff00"/160]}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r9, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0xa, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0xc004) (async) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7d931fc456"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x88d1) 21:24:58 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x420, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) 21:24:58 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="06"]) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01430700000000000000000a0000000000000000000000943241562f419884dc53598cc57f92b1730fad5b5ec3015dffa597"], 0x1c}}, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r3 = getpid() (async) r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1e0001000000009000000000000000000000000000000000000000000000007f000001000000000000000000000000ac1414bb000000000000000000000000e0000002000000000000000000000000e0000002000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff76ffff00"/160]}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r9, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0xa, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0xc004) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7d931fc456"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x88d1) 21:24:58 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="06"]) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001401030700002000000400000a00"/28], 0x1c}}, 0x0) 21:24:58 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x420, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x420, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) 21:24:58 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="06"]) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001401030700002000000400000a00"/28], 0x1c}}, 0x0) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x420, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) 21:24:58 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001401030700002000000400000a00"/28], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001401030700002000000400000a00"/28], 0x1c}}, 0x0) (async) 21:24:58 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x420, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x420, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) (async) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000007f0000200c009900000000100000000014005500c9576379fe3d033e6b1f4a436b05b950"], 0x34}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x9b8, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x6e}}}}, [@NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x37}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3f}]}, @NL80211_ATTR_NAN_FUNC={0x2c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2b4, 0xe, 0x0, 0x1, [{0x45, 0x0, "626d3b3d623d6e412b8ccc03e1a284def3fd92206c12fb7158df8c23de4a1d30ddbf3f18c3f9275618893af274349584b5cba67f83bc5681bc94d833fa822785d5"}, {0xaa, 0x0, "1a5f8fa672731c60a9d20423c3f1fa94067a79e452b6a3fb432cf276c05e1dd5e1c9f405e14f9799e00dfed66b1b547a425f195a970b29e57861c3be8d781f4c625547a52d1a4d9375667b2c5c7904d78e33fef148b838931f5595de8adaac388adefebf350b4f15f1baa58503335c07467c17467fec3ff03574d54f53960f7aaa9d5efb3c4e862ea0a553d76f9edc3c9937d2580aa330382e15d5bbad30fb3c33df68227b6f"}, {0xf8, 0x0, "cd6f1565d5320c57becd41639d6ab579319eca333669426b70d07e4cd1a6c31be1ef9f713f65a143dc104c330dab5ba22bd219da1d63b8d9edc7f3f70ffbc10e90ba697702f0c2c6fcc138a5b82da88bf38e5770b0572a54f70150289b0b0ba58e03a9690ccd5b72fff74899c56fd3979d2555cb2a34ed09d2e009e58d5c17400269114bc3ac72602b6653cf5434949943ce302b33b9a75fdd1ed3610483e035d088d41e88f2d31de1037f1707bbc28691a84155036e7f87b43a5119dc9fc7eb26cf1adbd1ffc543a462954b877a7759f101f63f4e4365a435691f906b967faaecb28e22754102a341a678ef96ec894b35a5fcf5"}, {0xa0, 0x0, "fe4344ccc74d1b13f31993860c4b70f835bca681d862d5237aed32c2e686e8c47bf61af9629fb6db26a1ee437d78a24c0235afa054570cf4d7c187f4ea148fa4839ec0116df26ed474e5b18712c523da5059dad369250223a592e91b197c2069330c40c725c94c42e46c80921f9705724f9d240edc6e78e0cc65e7d84ef8e73e02d9eb1ea362d02abd9267c69c8dcc95f5be5302be3ad77f1a2d0b73"}, {0x21, 0x0, "da8764d9e95f40c251ec81b4753b3811185688895918f783117a39e782"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xb6}]}, @NL80211_ATTR_NAN_FUNC={0x63c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1dc, 0xd, 0x0, 0x1, [{0x41, 0x0, "ab84ecefbc9af3cb24f3fa2f2c94784ec40c557182ae5dc03b41930509cd5a3d3765d2da84cb89a7d15bf30b65fd67b5a7aeaad483471bb3525436d763"}, {0xf2, 0x0, "9f521e640b0ba50484d1973b7ee7d856d7f4793efecc67b0bae74f6d38ef0972351c98e1db74df9b88634f45a82e7c92b3fe202bbc6d9947b4d6ef2742ad1b056f22e5677ae89e4aa64e6c705df371380a681c27713beeab97aaab7d9ffbeb0c17a2ead48b07d5f09c6fcad1f84f67803da54c7a91d4f78b36e6967a468ea34398afcb7f767a9389edce4fc4cccb91e8912ffb35e0c1bdd3c392b50d64dded97330244ac086d3c883ab362932fe71ba1ed1e4894598171d9eee54f95715d0b9e4dcd0a4886bb44e3506aa8744994a6bcd0b09c2efb1e3178c34e63c02ebb1cf537892a290d3bde0fa29788ea022a"}, {0x4}, {0x54, 0x0, "72fbc72783f95ee904ad4202ced0eda36e13772a0d82fbc0ca7151e4a7af6d3b500b4c0f946fe9cf962538dfe334358741267dcf1824a29894ab5d9b851c1a578a1f50d991ded47888c71be235596cdd"}, {0x46, 0x0, "56a03599f52e30d7731d5bf02727ce45816d5f6bcd4ea20f35b6e4c6910c4b337a218dfa5b1f6277d70a0b9f3cc322ddec262907318f61093558964b485488e81a02"}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xeb}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x438, 0xd, 0x0, 0x1, [{0x4c, 0x0, "90d00c10b38188c66d407b97834ac40d88b2659b1b9e06136a97151cb003375228e24bc8aed4c743c9612a963c0c0027284d206e7e6ee2b93da064464df6652a21e202f9aed887bc"}, {0xc3, 0x0, "cb3134d4870dcd7b01bf5f2b2b66a83bcbefcb1c0968b807e8b0870c45afcca3676a7c9fc55d597c3f4019d3969f1e75c88c4bf4d70c508974731877e74256770e63f01db88f398d7e4c0b0f379687ada2b4efa3fb69e8453f87b75a3a3b7d78a22d8762a6b61ed84453e40b4d6e77e671cc16ff443b3ded56a9933cfbd65672936eef826c50597fda28285d4bcea27d0d6d3a6f9635041f72aada883c79419a713ccf30946738277b8ceed4bab344f58c73bf08577a44b3d9fc0299ade387"}, {0x1d, 0x0, "881f7490f126d440ff157323ba315a87ce4109dfb44dd293e0"}, {0xd5, 0x0, "8617f4aeddb04003c378aa22e769ff9fb5348d2a0e06b2702665450ea1cf87aac8be50ca1e9a9bf7cf509ad14352aeb081c946e5186cc8cfc9a8b2e6aa8b8b35983f659d0f75d7984cb60763e14466b6cd3dcd817a4eb3c86b42e1d27e2e17601535f601d35d0cce41716051eda6ea092a18a1b1ed22912c8f0edd07842a1bb62b19b17e65a80fb1d89c01e9a9b8c8ad7996f7169fed6f6a8cc3ee81a4fe289849e51769ddd68102072ec218f0aefdb3bfc9134a25d207a2440a92a43b80098f0b77b2edd539b868d90a60b0979c8a9864"}, {0x9b, 0x0, "9248db90e4f06929bc1d800a3cd29bd2ae341c641185ed920b960d9af775469e9822b63649356e096e0285e370e84491d4d40f633631dd96085e08fbdde41e0182ed4d3bcff417b17d8a58348e34eb681e77920117c1cc7c7cd03b98ca607da022626410cc32558e16bb38342fe200b773dc3961bdce97adc2de5e7b8b2e4ce33d1a62ade09d9fee448ede1b5e3b00e8306d050ba7281f"}, {0xfc, 0x0, "38f0aface4c90f9143d911b8d81fdeb2256e2ceee1f157bb7486434f1ae7d235826a854d5896bd1d4ccd8c1123444d3ff35092de2d883e22630df66d8b738c21f267f2514a9a79ee711890fe12eed077584cd7a41f13b17ba11a52dd35f83207e19b3215c070c21346dd2839c912fb0b5394ee1aeb775328ff5bd7dbf5d21cc54579c0f27b4271183b68f78101fb1879eb51f421c6c0800205ecb37c76a9711c197408b73cae5c4cdc77cb4ed3d78f9c62160c998e70c208ee13eaa4243c92b0aed3e8c56520113fe49e2c25c5f5e9c3b83ff16fc7f7a264263f550fc07143077538c1b404456f1a736674357f49f5532968de8de700930c"}, {0x91, 0x0, "fac26c456c42b25856d34b1a49f7a71f5c00d2c2578a4ba3b41aaa62872cbf6959e824973edbf5bdaa9909a11f11ce85b32638d291df5ce6a54cc5812d12f3c8f1821ac06d9e46a698cb20f4e13b0ecea1a88223c5c4ff1f8c0bd9405ebf7a083d067129466e68d0af218f8325456e936112e485474442c7990cc4fdf096f0e643a8f222f3825d85773b42aaa3"}]}]}, @NL80211_ATTR_NAN_FUNC={0x58, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x34, 0xb, "2b16f534c0c52bc41123fcc40acb12a7406cbc0b8221230aefadc11f15b9bcfc731456e7377506b238ad9fe16901a6f8"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "824aa597fa82"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x20}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}]}, 0x9b8}, 0x1, 0x0, 0x0, 0x4004040}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x420, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000007f0000200c009900000000100000000014005500c9576379fe3d033e6b1f4a436b05b950"], 0x34}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x9b8, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x6e}}}}, [@NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x37}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3f}]}, @NL80211_ATTR_NAN_FUNC={0x2c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2b4, 0xe, 0x0, 0x1, [{0x45, 0x0, "626d3b3d623d6e412b8ccc03e1a284def3fd92206c12fb7158df8c23de4a1d30ddbf3f18c3f9275618893af274349584b5cba67f83bc5681bc94d833fa822785d5"}, {0xaa, 0x0, "1a5f8fa672731c60a9d20423c3f1fa94067a79e452b6a3fb432cf276c05e1dd5e1c9f405e14f9799e00dfed66b1b547a425f195a970b29e57861c3be8d781f4c625547a52d1a4d9375667b2c5c7904d78e33fef148b838931f5595de8adaac388adefebf350b4f15f1baa58503335c07467c17467fec3ff03574d54f53960f7aaa9d5efb3c4e862ea0a553d76f9edc3c9937d2580aa330382e15d5bbad30fb3c33df68227b6f"}, {0xf8, 0x0, "cd6f1565d5320c57becd41639d6ab579319eca333669426b70d07e4cd1a6c31be1ef9f713f65a143dc104c330dab5ba22bd219da1d63b8d9edc7f3f70ffbc10e90ba697702f0c2c6fcc138a5b82da88bf38e5770b0572a54f70150289b0b0ba58e03a9690ccd5b72fff74899c56fd3979d2555cb2a34ed09d2e009e58d5c17400269114bc3ac72602b6653cf5434949943ce302b33b9a75fdd1ed3610483e035d088d41e88f2d31de1037f1707bbc28691a84155036e7f87b43a5119dc9fc7eb26cf1adbd1ffc543a462954b877a7759f101f63f4e4365a435691f906b967faaecb28e22754102a341a678ef96ec894b35a5fcf5"}, {0xa0, 0x0, "fe4344ccc74d1b13f31993860c4b70f835bca681d862d5237aed32c2e686e8c47bf61af9629fb6db26a1ee437d78a24c0235afa054570cf4d7c187f4ea148fa4839ec0116df26ed474e5b18712c523da5059dad369250223a592e91b197c2069330c40c725c94c42e46c80921f9705724f9d240edc6e78e0cc65e7d84ef8e73e02d9eb1ea362d02abd9267c69c8dcc95f5be5302be3ad77f1a2d0b73"}, {0x21, 0x0, "da8764d9e95f40c251ec81b4753b3811185688895918f783117a39e782"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xb6}]}, @NL80211_ATTR_NAN_FUNC={0x63c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1dc, 0xd, 0x0, 0x1, [{0x41, 0x0, "ab84ecefbc9af3cb24f3fa2f2c94784ec40c557182ae5dc03b41930509cd5a3d3765d2da84cb89a7d15bf30b65fd67b5a7aeaad483471bb3525436d763"}, {0xf2, 0x0, "9f521e640b0ba50484d1973b7ee7d856d7f4793efecc67b0bae74f6d38ef0972351c98e1db74df9b88634f45a82e7c92b3fe202bbc6d9947b4d6ef2742ad1b056f22e5677ae89e4aa64e6c705df371380a681c27713beeab97aaab7d9ffbeb0c17a2ead48b07d5f09c6fcad1f84f67803da54c7a91d4f78b36e6967a468ea34398afcb7f767a9389edce4fc4cccb91e8912ffb35e0c1bdd3c392b50d64dded97330244ac086d3c883ab362932fe71ba1ed1e4894598171d9eee54f95715d0b9e4dcd0a4886bb44e3506aa8744994a6bcd0b09c2efb1e3178c34e63c02ebb1cf537892a290d3bde0fa29788ea022a"}, {0x4}, {0x54, 0x0, "72fbc72783f95ee904ad4202ced0eda36e13772a0d82fbc0ca7151e4a7af6d3b500b4c0f946fe9cf962538dfe334358741267dcf1824a29894ab5d9b851c1a578a1f50d991ded47888c71be235596cdd"}, {0x46, 0x0, "56a03599f52e30d7731d5bf02727ce45816d5f6bcd4ea20f35b6e4c6910c4b337a218dfa5b1f6277d70a0b9f3cc322ddec262907318f61093558964b485488e81a02"}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xeb}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x438, 0xd, 0x0, 0x1, [{0x4c, 0x0, "90d00c10b38188c66d407b97834ac40d88b2659b1b9e06136a97151cb003375228e24bc8aed4c743c9612a963c0c0027284d206e7e6ee2b93da064464df6652a21e202f9aed887bc"}, {0xc3, 0x0, "cb3134d4870dcd7b01bf5f2b2b66a83bcbefcb1c0968b807e8b0870c45afcca3676a7c9fc55d597c3f4019d3969f1e75c88c4bf4d70c508974731877e74256770e63f01db88f398d7e4c0b0f379687ada2b4efa3fb69e8453f87b75a3a3b7d78a22d8762a6b61ed84453e40b4d6e77e671cc16ff443b3ded56a9933cfbd65672936eef826c50597fda28285d4bcea27d0d6d3a6f9635041f72aada883c79419a713ccf30946738277b8ceed4bab344f58c73bf08577a44b3d9fc0299ade387"}, {0x1d, 0x0, "881f7490f126d440ff157323ba315a87ce4109dfb44dd293e0"}, {0xd5, 0x0, "8617f4aeddb04003c378aa22e769ff9fb5348d2a0e06b2702665450ea1cf87aac8be50ca1e9a9bf7cf509ad14352aeb081c946e5186cc8cfc9a8b2e6aa8b8b35983f659d0f75d7984cb60763e14466b6cd3dcd817a4eb3c86b42e1d27e2e17601535f601d35d0cce41716051eda6ea092a18a1b1ed22912c8f0edd07842a1bb62b19b17e65a80fb1d89c01e9a9b8c8ad7996f7169fed6f6a8cc3ee81a4fe289849e51769ddd68102072ec218f0aefdb3bfc9134a25d207a2440a92a43b80098f0b77b2edd539b868d90a60b0979c8a9864"}, {0x9b, 0x0, "9248db90e4f06929bc1d800a3cd29bd2ae341c641185ed920b960d9af775469e9822b63649356e096e0285e370e84491d4d40f633631dd96085e08fbdde41e0182ed4d3bcff417b17d8a58348e34eb681e77920117c1cc7c7cd03b98ca607da022626410cc32558e16bb38342fe200b773dc3961bdce97adc2de5e7b8b2e4ce33d1a62ade09d9fee448ede1b5e3b00e8306d050ba7281f"}, {0xfc, 0x0, "38f0aface4c90f9143d911b8d81fdeb2256e2ceee1f157bb7486434f1ae7d235826a854d5896bd1d4ccd8c1123444d3ff35092de2d883e22630df66d8b738c21f267f2514a9a79ee711890fe12eed077584cd7a41f13b17ba11a52dd35f83207e19b3215c070c21346dd2839c912fb0b5394ee1aeb775328ff5bd7dbf5d21cc54579c0f27b4271183b68f78101fb1879eb51f421c6c0800205ecb37c76a9711c197408b73cae5c4cdc77cb4ed3d78f9c62160c998e70c208ee13eaa4243c92b0aed3e8c56520113fe49e2c25c5f5e9c3b83ff16fc7f7a264263f550fc07143077538c1b404456f1a736674357f49f5532968de8de700930c"}, {0x91, 0x0, "fac26c456c42b25856d34b1a49f7a71f5c00d2c2578a4ba3b41aaa62872cbf6959e824973edbf5bdaa9909a11f11ce85b32638d291df5ce6a54cc5812d12f3c8f1821ac06d9e46a698cb20f4e13b0ecea1a88223c5c4ff1f8c0bd9405ebf7a083d067129466e68d0af218f8325456e936112e485474442c7990cc4fdf096f0e643a8f222f3825d85773b42aaa3"}]}]}, @NL80211_ATTR_NAN_FUNC={0x58, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x34, 0xb, "2b16f534c0c52bc41123fcc40acb12a7406cbc0b8221230aefadc11f15b9bcfc731456e7377506b238ad9fe16901a6f8"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "824aa597fa82"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x20}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}]}, 0x9b8}, 0x1, 0x0, 0x0, 0x4004040}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800030700000000000000000a0000000080b1a423048c000000000000080006001000000004000880"], 0x28}}, 0x0) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x420, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) 21:24:58 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 21:24:58 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000007f0000200c009900000000100000000014005500c9576379fe3d033e6b1f4a436b05b950"], 0x34}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x9b8, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x6e}}}}, [@NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x37}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3f}]}, @NL80211_ATTR_NAN_FUNC={0x2c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2b4, 0xe, 0x0, 0x1, [{0x45, 0x0, "626d3b3d623d6e412b8ccc03e1a284def3fd92206c12fb7158df8c23de4a1d30ddbf3f18c3f9275618893af274349584b5cba67f83bc5681bc94d833fa822785d5"}, {0xaa, 0x0, "1a5f8fa672731c60a9d20423c3f1fa94067a79e452b6a3fb432cf276c05e1dd5e1c9f405e14f9799e00dfed66b1b547a425f195a970b29e57861c3be8d781f4c625547a52d1a4d9375667b2c5c7904d78e33fef148b838931f5595de8adaac388adefebf350b4f15f1baa58503335c07467c17467fec3ff03574d54f53960f7aaa9d5efb3c4e862ea0a553d76f9edc3c9937d2580aa330382e15d5bbad30fb3c33df68227b6f"}, {0xf8, 0x0, "cd6f1565d5320c57becd41639d6ab579319eca333669426b70d07e4cd1a6c31be1ef9f713f65a143dc104c330dab5ba22bd219da1d63b8d9edc7f3f70ffbc10e90ba697702f0c2c6fcc138a5b82da88bf38e5770b0572a54f70150289b0b0ba58e03a9690ccd5b72fff74899c56fd3979d2555cb2a34ed09d2e009e58d5c17400269114bc3ac72602b6653cf5434949943ce302b33b9a75fdd1ed3610483e035d088d41e88f2d31de1037f1707bbc28691a84155036e7f87b43a5119dc9fc7eb26cf1adbd1ffc543a462954b877a7759f101f63f4e4365a435691f906b967faaecb28e22754102a341a678ef96ec894b35a5fcf5"}, {0xa0, 0x0, "fe4344ccc74d1b13f31993860c4b70f835bca681d862d5237aed32c2e686e8c47bf61af9629fb6db26a1ee437d78a24c0235afa054570cf4d7c187f4ea148fa4839ec0116df26ed474e5b18712c523da5059dad369250223a592e91b197c2069330c40c725c94c42e46c80921f9705724f9d240edc6e78e0cc65e7d84ef8e73e02d9eb1ea362d02abd9267c69c8dcc95f5be5302be3ad77f1a2d0b73"}, {0x21, 0x0, "da8764d9e95f40c251ec81b4753b3811185688895918f783117a39e782"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xb6}]}, @NL80211_ATTR_NAN_FUNC={0x63c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1dc, 0xd, 0x0, 0x1, [{0x41, 0x0, "ab84ecefbc9af3cb24f3fa2f2c94784ec40c557182ae5dc03b41930509cd5a3d3765d2da84cb89a7d15bf30b65fd67b5a7aeaad483471bb3525436d763"}, {0xf2, 0x0, "9f521e640b0ba50484d1973b7ee7d856d7f4793efecc67b0bae74f6d38ef0972351c98e1db74df9b88634f45a82e7c92b3fe202bbc6d9947b4d6ef2742ad1b056f22e5677ae89e4aa64e6c705df371380a681c27713beeab97aaab7d9ffbeb0c17a2ead48b07d5f09c6fcad1f84f67803da54c7a91d4f78b36e6967a468ea34398afcb7f767a9389edce4fc4cccb91e8912ffb35e0c1bdd3c392b50d64dded97330244ac086d3c883ab362932fe71ba1ed1e4894598171d9eee54f95715d0b9e4dcd0a4886bb44e3506aa8744994a6bcd0b09c2efb1e3178c34e63c02ebb1cf537892a290d3bde0fa29788ea022a"}, {0x4}, {0x54, 0x0, "72fbc72783f95ee904ad4202ced0eda36e13772a0d82fbc0ca7151e4a7af6d3b500b4c0f946fe9cf962538dfe334358741267dcf1824a29894ab5d9b851c1a578a1f50d991ded47888c71be235596cdd"}, {0x46, 0x0, "56a03599f52e30d7731d5bf02727ce45816d5f6bcd4ea20f35b6e4c6910c4b337a218dfa5b1f6277d70a0b9f3cc322ddec262907318f61093558964b485488e81a02"}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xeb}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x438, 0xd, 0x0, 0x1, [{0x4c, 0x0, "90d00c10b38188c66d407b97834ac40d88b2659b1b9e06136a97151cb003375228e24bc8aed4c743c9612a963c0c0027284d206e7e6ee2b93da064464df6652a21e202f9aed887bc"}, {0xc3, 0x0, "cb3134d4870dcd7b01bf5f2b2b66a83bcbefcb1c0968b807e8b0870c45afcca3676a7c9fc55d597c3f4019d3969f1e75c88c4bf4d70c508974731877e74256770e63f01db88f398d7e4c0b0f379687ada2b4efa3fb69e8453f87b75a3a3b7d78a22d8762a6b61ed84453e40b4d6e77e671cc16ff443b3ded56a9933cfbd65672936eef826c50597fda28285d4bcea27d0d6d3a6f9635041f72aada883c79419a713ccf30946738277b8ceed4bab344f58c73bf08577a44b3d9fc0299ade387"}, {0x1d, 0x0, "881f7490f126d440ff157323ba315a87ce4109dfb44dd293e0"}, {0xd5, 0x0, "8617f4aeddb04003c378aa22e769ff9fb5348d2a0e06b2702665450ea1cf87aac8be50ca1e9a9bf7cf509ad14352aeb081c946e5186cc8cfc9a8b2e6aa8b8b35983f659d0f75d7984cb60763e14466b6cd3dcd817a4eb3c86b42e1d27e2e17601535f601d35d0cce41716051eda6ea092a18a1b1ed22912c8f0edd07842a1bb62b19b17e65a80fb1d89c01e9a9b8c8ad7996f7169fed6f6a8cc3ee81a4fe289849e51769ddd68102072ec218f0aefdb3bfc9134a25d207a2440a92a43b80098f0b77b2edd539b868d90a60b0979c8a9864"}, {0x9b, 0x0, "9248db90e4f06929bc1d800a3cd29bd2ae341c641185ed920b960d9af775469e9822b63649356e096e0285e370e84491d4d40f633631dd96085e08fbdde41e0182ed4d3bcff417b17d8a58348e34eb681e77920117c1cc7c7cd03b98ca607da022626410cc32558e16bb38342fe200b773dc3961bdce97adc2de5e7b8b2e4ce33d1a62ade09d9fee448ede1b5e3b00e8306d050ba7281f"}, {0xfc, 0x0, "38f0aface4c90f9143d911b8d81fdeb2256e2ceee1f157bb7486434f1ae7d235826a854d5896bd1d4ccd8c1123444d3ff35092de2d883e22630df66d8b738c21f267f2514a9a79ee711890fe12eed077584cd7a41f13b17ba11a52dd35f83207e19b3215c070c21346dd2839c912fb0b5394ee1aeb775328ff5bd7dbf5d21cc54579c0f27b4271183b68f78101fb1879eb51f421c6c0800205ecb37c76a9711c197408b73cae5c4cdc77cb4ed3d78f9c62160c998e70c208ee13eaa4243c92b0aed3e8c56520113fe49e2c25c5f5e9c3b83ff16fc7f7a264263f550fc07143077538c1b404456f1a736674357f49f5532968de8de700930c"}, {0x91, 0x0, "fac26c456c42b25856d34b1a49f7a71f5c00d2c2578a4ba3b41aaa62872cbf6959e824973edbf5bdaa9909a11f11ce85b32638d291df5ce6a54cc5812d12f3c8f1821ac06d9e46a698cb20f4e13b0ecea1a88223c5c4ff1f8c0bd9405ebf7a083d067129466e68d0af218f8325456e936112e485474442c7990cc4fdf096f0e643a8f222f3825d85773b42aaa3"}]}]}, @NL80211_ATTR_NAN_FUNC={0x58, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x34, 0xb, "2b16f534c0c52bc41123fcc40acb12a7406cbc0b8221230aefadc11f15b9bcfc731456e7377506b238ad9fe16901a6f8"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "824aa597fa82"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x20}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}]}, 0x9b8}, 0x1, 0x0, 0x0, 0x4004040}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800030700000000000000000a0000000080b1a423048c000000000000080006001000000004000880"], 0x28}}, 0x0) (rerun: 32) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="73697430000000000000aaa614c85117e219000000000000", @ANYRES32=0x0, @ANYBLOB="00080008fffffff70000cd6a4e1700b80065000020299078ac1e0101ac1414bb8907d1000000008310232d6b6cacce002eb306554bd1828663000000010708de5d067bdb5d00030f0610b9b22fd6e249b39e91c7c9136860060cf51b9c11a4a2f0d36875000e77ccd7a95efef940cdb2df4906042d6f0606bc66f08b010f021cf6a3e9ce128577df3163d1000fc6397ad6a765f6a70dc8a5d101891329e0000001ac1414bbac14142ee0000002891720640101027f000001ffffffffac1414aaac1e0001"]}) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800030700000000000000000a0000000080b1a423048c000000000000080006001000000004000880"], 0x28}}, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="73697430000000000000aaa614c85117e219000000000000", @ANYRES32=0x0, @ANYBLOB="00080008fffffff70000cd6a4e1700b80065000020299078ac1e0101ac1414bb8907d1000000008310232d6b6cacce002eb306554bd1828663000000010708de5d067bdb5d00030f0610b9b22fd6e249b39e91c7c9136860060cf51b9c11a4a2f0d36875000e77ccd7a95efef940cdb2df4906042d6f0606bc66f08b010f021cf6a3e9ce128577df3163d1000fc6397ad6a765f6a70dc8a5d101891329e0000001ac1414bbac14142ee0000002891720640101027f000001ffffffffac1414aaac1e0001"]}) 21:24:58 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5ea}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x675}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x127f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x931}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x800) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @random="32347c62ff54"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004881}, 0x28000011) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:24:58 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="73697430000000000000aaa614c85117e219000000000000", @ANYRES32=0x0, @ANYBLOB="00080008fffffff70000cd6a4e1700b80065000020299078ac1e0101ac1414bb8907d1000000008310232d6b6cacce002eb306554bd1828663000000010708de5d067bdb5d00030f0610b9b22fd6e249b39e91c7c9136860060cf51b9c11a4a2f0d36875000e77ccd7a95efef940cdb2df4906042d6f0606bc66f08b010f021cf6a3e9ce128577df3163d1000fc6397ad6a765f6a70dc8a5d101891329e0000001ac1414bbac14142ee0000002891720640101027f000001ffffffffac1414aaac1e0001"]}) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @random="32347c62ff54"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004881}, 0x28000011) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12, 0x29}}}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) 21:24:58 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @random="32347c62ff54"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004881}, 0x28000011) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000180a030700000000000000000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001c01030700000000000067c400000000095be3e4eff4fa6585805fe413fff3b1325c0b4e61481cbadfdba285273bfc754b700d015a91f3ea47223d3e65d46a37271053786d09fe130e0000000000000000"], 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r3, 0x10, 0x1, @ib={0x1b, 0x400, 0x0, {"e73374610a9aaa3b9dbf6aeeac2ac77d"}, 0x1, 0x2, 0x89}}}, 0xa0) io_setup(0x1ff, &(0x7f0000000000)=0x0) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0]) io_getevents(r4, 0x100, 0x1, &(0x7f00000002c0)=[{}], &(0x7f0000000300)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000180a030700000000000000000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000180a030700000000000000000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) (async) 21:24:58 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001c01030700000000000067c400000000095be3e4eff4fa6585805fe413fff3b1325c0b4e61481cbadfdba285273bfc754b700d015a91f3ea47223d3e65d46a37271053786d09fe130e0000000000000000"], 0x1c}}, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r3, 0x10, 0x1, @ib={0x1b, 0x400, 0x0, {"e73374610a9aaa3b9dbf6aeeac2ac77d"}, 0x1, 0x2, 0x89}}}, 0xa0) (async) io_setup(0x1ff, &(0x7f0000000000)=0x0) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0]) (async) io_getevents(r4, 0x100, 0x1, &(0x7f00000002c0)=[{}], &(0x7f0000000300)={0x0, 0x989680}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000180a030700000000000000000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001c01030700000000000067c400000000095be3e4eff4fa6585805fe413fff3b1325c0b4e61481cbadfdba285273bfc754b700d015a91f3ea47223d3e65d46a37271053786d09fe130e0000000000000000"], 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r3, 0x10, 0x1, @ib={0x1b, 0x400, 0x0, {"e73374610a9aaa3b9dbf6aeeac2ac77d"}, 0x1, 0x2, 0x89}}}, 0xa0) (async) io_setup(0x1ff, &(0x7f0000000000)=0x0) (async) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0]) io_getevents(r4, 0x100, 0x1, &(0x7f00000002c0)=[{}], &(0x7f0000000300)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000180003070000000000fbffffff0000000000000300000000080006000000000004000880"], 0x28}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = getpid() r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000480)=0x9c, 0x8) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7fff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xd493}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0x9}, {0x6c, 0x1}, {0x9, 0x1}, {0x36, 0x1}, {0x18, 0x1}, {0x48, 0x1}, {0x60, 0x1}, {0x48}, {0x12}, {0x48}, {0x48}, {0x64, 0x1}, {0xc}, {0x1f, 0x1}, {0x36}, {0x2, 0x1}, {0x30}, {0x60}, {0x1, 0x1}, {0x22950990c273950c, 0x1}, {0x1b, 0x1}, {0x48}, {0x48, 0x1}, {0x6, 0x1}, {0x60}, {0xd}, {0x36}, {0x0, 0x1}, {0x60, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004880}, 0x40000) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0200000000000000000000000000000a00"/28], 0x1c}}, 0x0) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0200000000000000000000000000000a00"/28], 0x1c}}, 0x0) 21:24:58 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000180003070000000000fbffffff0000000000000300000000080006000000000004000880"], 0x28}}, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r2 = getpid() (async) r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000480)=0x9c, 0x8) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7fff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xd493}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0x9}, {0x6c, 0x1}, {0x9, 0x1}, {0x36, 0x1}, {0x18, 0x1}, {0x48, 0x1}, {0x60, 0x1}, {0x48}, {0x12}, {0x48}, {0x48}, {0x64, 0x1}, {0xc}, {0x1f, 0x1}, {0x36}, {0x2, 0x1}, {0x30}, {0x60}, {0x1, 0x1}, {0x22950990c273950c, 0x1}, {0x1b, 0x1}, {0x48}, {0x48, 0x1}, {0x6, 0x1}, {0x60}, {0xd}, {0x36}, {0x0, 0x1}, {0x60, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004880}, 0x40000) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0200000000000000000000000000000a00"/28], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0200000000000000000000000000000a00"/28], 0x1c}}, 0x0) (async) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110008202abd7000fbdbdf25003c76fee01d154f4c000000", @ANYRES32=0x0, @ANYBLOB="fc0326f94639"], 0x20}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x96}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x200}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x400000}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x400a4}, 0x0) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:58 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110008202abd7000fbdbdf25003c76fee01d154f4c000000", @ANYRES32=0x0, @ANYBLOB="fc0326f94639"], 0x20}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x96}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x200}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x400000}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x400a4}, 0x0) 21:24:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110008202abd7000fbdbdf25003c76fee01d154f4c000000", @ANYRES32=0x0, @ANYBLOB="fc0326f94639"], 0x20}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x96}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x200}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x400000}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x400a4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110008202abd7000fbdbdf25003c76fee01d154f4c000000", @ANYRES32=0x0, @ANYBLOB="fc0326f94639"], 0x20}}, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x96}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x200}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x400000}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x400a4}, 0x0) (async) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000180003070000000000fbffffff0000000000000300000000080006000000000004000880"], 0x28}}, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = getpid() (async) r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000480)=0x9c, 0x8) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7fff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xd493}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0x9}, {0x6c, 0x1}, {0x9, 0x1}, {0x36, 0x1}, {0x18, 0x1}, {0x48, 0x1}, {0x60, 0x1}, {0x48}, {0x12}, {0x48}, {0x48}, {0x64, 0x1}, {0xc}, {0x1f, 0x1}, {0x36}, {0x2, 0x1}, {0x30}, {0x60}, {0x1, 0x1}, {0x22950990c273950c, 0x1}, {0x1b, 0x1}, {0x48}, {0x48, 0x1}, {0x6, 0x1}, {0x60}, {0xd}, {0x36}, {0x0, 0x1}, {0x60, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004880}, 0x40000) 21:24:58 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 3: socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a000000000000214936ea6291acb46e930e005c430000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xdc, 0x55}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004011}, 0x4048040) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a000000000000214936ea6291acb46e930e005c430000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xdc, 0x55}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004011}, 0x4048040) 21:24:58 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:58 executing program 1: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x98, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x8}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x1, 0x974, {{0x11, 0x4, 0x2, 0x2e, 0x44, 0x64, 0x0, 0xfc, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x18, 0x8, 0x0, 0x0, [0x7, 0x6, 0xf29, 0x3, 0x0]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xa9, 0x1, 0x8, [{@private=0xa010100, 0x414d63b3}]}]}}}}}) r3 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)=@updsa={0x3bc, 0x1a, 0x100, 0x70bd28, 0x25dfdbfb, {{@in6=@private0, @in6=@private2, 0x4e24, 0x2, 0x4e23, 0x1ff, 0x2, 0xa0, 0x80, 0x0, r2, r3}, {@in=@remote, 0x4d6, 0x6c}, @in=@local, {0x7f, 0x4, 0x81, 0x7fffffffffffffff, 0x101, 0x5, 0x7, 0xbc4}, {0x20, 0xffff, 0xc4, 0x7}, {0x81, 0x6, 0x1}, 0x70bd2b, 0x3504, 0xa, 0x3, 0x7f, 0x40}, [@tmpl={0xc4, 0x5, [{{@in=@private=0xa010102, 0x4d4, 0x3c}, 0xa, @in=@local, 0x3502, 0x0, 0x0, 0x5, 0x3, 0x9, 0x401}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, 0xa, @in6=@private2, 0x34ff, 0x1, 0x1, 0x2, 0x16, 0xfff, 0x3}, {{@in6=@remote, 0x4d2, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x3502, 0x3, 0x1, 0x0, 0x1, 0x3, 0xc8ee}]}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@mcast2, 0x0, 0xa}}, @sec_ctx={0x3e, 0x8, {0x3a, 0x8, 0x1, 0x40, 0x32, "6b72865fb97f8d907987068386ed582156f2ba965182c9283104bd0e20cb1e8cde844490a93967d01dfe8c44b729f1a90418"}}, @algo_auth={0x13f, 0x1, {{'sha512-neon\x00'}, 0x7b8, "b524a4de7ecc610b78099e0948f583f757f2a8b99521732b7174cc27b3cd4ca02fb3002daf1de3e3316168422137a7a258ee071acb3e147449760b00c6e0abaddfabe507826305ecef2db67a84718802a8793476138410bb3a64694f9d3d9b2b4e1092b06b1d5f2827cd70b05fbbebbde5e047801d6c282ce55fa53ab1bd7ae61c33f8089b38a3f05b88d7cadb651ca52d813bd495e967a86dbcb8f200ea3b1ae6c745917d834ad46865bcfa78facca2e55c42786a8c20b78221ed30c8a8fd2496c9b5a7c178f206f0dd7d74995e3fe4fdd6ab8bf5f17b5dc98a43d7ba545fbea7312dff7a024f4758d1e48a3a4d0c36291423bf188266"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @srcaddr={0x14, 0xd, @in=@multicast1}, @address_filter={0x28, 0x1a, {@in6=@local, @in6=@rand_addr=' \x01\x00', 0xa, 0x2, 0x1f}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9a5f}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4000090}, 0x4) 21:24:58 executing program 3: socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a000000000000214936ea6291acb46e930e005c430000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xdc, 0x55}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004011}, 0x4048040) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a000000000000214936ea6291acb46e930e005c430000"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xdc, 0x55}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004011}, 0x4048040) (async) 21:24:58 executing program 3: socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 1: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x98, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x8}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x1, 0x974, {{0x11, 0x4, 0x2, 0x2e, 0x44, 0x64, 0x0, 0xfc, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x18, 0x8, 0x0, 0x0, [0x7, 0x6, 0xf29, 0x3, 0x0]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xa9, 0x1, 0x8, [{@private=0xa010100, 0x414d63b3}]}]}}}}}) (async) r3 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)=@updsa={0x3bc, 0x1a, 0x100, 0x70bd28, 0x25dfdbfb, {{@in6=@private0, @in6=@private2, 0x4e24, 0x2, 0x4e23, 0x1ff, 0x2, 0xa0, 0x80, 0x0, r2, r3}, {@in=@remote, 0x4d6, 0x6c}, @in=@local, {0x7f, 0x4, 0x81, 0x7fffffffffffffff, 0x101, 0x5, 0x7, 0xbc4}, {0x20, 0xffff, 0xc4, 0x7}, {0x81, 0x6, 0x1}, 0x70bd2b, 0x3504, 0xa, 0x3, 0x7f, 0x40}, [@tmpl={0xc4, 0x5, [{{@in=@private=0xa010102, 0x4d4, 0x3c}, 0xa, @in=@local, 0x3502, 0x0, 0x0, 0x5, 0x3, 0x9, 0x401}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, 0xa, @in6=@private2, 0x34ff, 0x1, 0x1, 0x2, 0x16, 0xfff, 0x3}, {{@in6=@remote, 0x4d2, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x3502, 0x3, 0x1, 0x0, 0x1, 0x3, 0xc8ee}]}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@mcast2, 0x0, 0xa}}, @sec_ctx={0x3e, 0x8, {0x3a, 0x8, 0x1, 0x40, 0x32, "6b72865fb97f8d907987068386ed582156f2ba965182c9283104bd0e20cb1e8cde844490a93967d01dfe8c44b729f1a90418"}}, @algo_auth={0x13f, 0x1, {{'sha512-neon\x00'}, 0x7b8, "b524a4de7ecc610b78099e0948f583f757f2a8b99521732b7174cc27b3cd4ca02fb3002daf1de3e3316168422137a7a258ee071acb3e147449760b00c6e0abaddfabe507826305ecef2db67a84718802a8793476138410bb3a64694f9d3d9b2b4e1092b06b1d5f2827cd70b05fbbebbde5e047801d6c282ce55fa53ab1bd7ae61c33f8089b38a3f05b88d7cadb651ca52d813bd495e967a86dbcb8f200ea3b1ae6c745917d834ad46865bcfa78facca2e55c42786a8c20b78221ed30c8a8fd2496c9b5a7c178f206f0dd7d74995e3fe4fdd6ab8bf5f17b5dc98a43d7ba545fbea7312dff7a024f4758d1e48a3a4d0c36291423bf188266"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @srcaddr={0x14, 0xd, @in=@multicast1}, @address_filter={0x28, 0x1a, {@in6=@local, @in6=@rand_addr=' \x01\x00', 0xa, 0x2, 0x1f}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9a5f}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4000090}, 0x4) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c8572fe8b2d010000001c01030700000000000000000a000000000858af712982e31d2f819528a08c58d43597fd94983d8fbffc7dd9fee00db5d856d78ee2728131aa521048b31da8c8dd0f1de0238ae8a355e3903d568d66998b54c4241afb1ce053feef6c672615cf3fab40ce6afb8f405686f25023bd13a9617cb4c6d3ce000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21:24:58 executing program 1: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x98, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x8}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x1, 0x974, {{0x11, 0x4, 0x2, 0x2e, 0x44, 0x64, 0x0, 0xfc, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x18, 0x8, 0x0, 0x0, [0x7, 0x6, 0xf29, 0x3, 0x0]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xa9, 0x1, 0x8, [{@private=0xa010100, 0x414d63b3}]}]}}}}}) r3 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)=@updsa={0x3bc, 0x1a, 0x100, 0x70bd28, 0x25dfdbfb, {{@in6=@private0, @in6=@private2, 0x4e24, 0x2, 0x4e23, 0x1ff, 0x2, 0xa0, 0x80, 0x0, r2, r3}, {@in=@remote, 0x4d6, 0x6c}, @in=@local, {0x7f, 0x4, 0x81, 0x7fffffffffffffff, 0x101, 0x5, 0x7, 0xbc4}, {0x20, 0xffff, 0xc4, 0x7}, {0x81, 0x6, 0x1}, 0x70bd2b, 0x3504, 0xa, 0x3, 0x7f, 0x40}, [@tmpl={0xc4, 0x5, [{{@in=@private=0xa010102, 0x4d4, 0x3c}, 0xa, @in=@local, 0x3502, 0x0, 0x0, 0x5, 0x3, 0x9, 0x401}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, 0xa, @in6=@private2, 0x34ff, 0x1, 0x1, 0x2, 0x16, 0xfff, 0x3}, {{@in6=@remote, 0x4d2, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x3502, 0x3, 0x1, 0x0, 0x1, 0x3, 0xc8ee}]}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@mcast2, 0x0, 0xa}}, @sec_ctx={0x3e, 0x8, {0x3a, 0x8, 0x1, 0x40, 0x32, "6b72865fb97f8d907987068386ed582156f2ba965182c9283104bd0e20cb1e8cde844490a93967d01dfe8c44b729f1a90418"}}, @algo_auth={0x13f, 0x1, {{'sha512-neon\x00'}, 0x7b8, "b524a4de7ecc610b78099e0948f583f757f2a8b99521732b7174cc27b3cd4ca02fb3002daf1de3e3316168422137a7a258ee071acb3e147449760b00c6e0abaddfabe507826305ecef2db67a84718802a8793476138410bb3a64694f9d3d9b2b4e1092b06b1d5f2827cd70b05fbbebbde5e047801d6c282ce55fa53ab1bd7ae61c33f8089b38a3f05b88d7cadb651ca52d813bd495e967a86dbcb8f200ea3b1ae6c745917d834ad46865bcfa78facca2e55c42786a8c20b78221ed30c8a8fd2496c9b5a7c178f206f0dd7d74995e3fe4fdd6ab8bf5f17b5dc98a43d7ba545fbea7312dff7a024f4758d1e48a3a4d0c36291423bf188266"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @srcaddr={0x14, 0xd, @in=@multicast1}, @address_filter={0x28, 0x1a, {@in6=@local, @in6=@rand_addr=' \x01\x00', 0xa, 0x2, 0x1f}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9a5f}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4000090}, 0x4) 21:24:58 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, 0x0, 0x40080d4) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c8572fe8b2d010000001c01030700000000000000000a000000000858af712982e31d2f819528a08c58d43597fd94983d8fbffc7dd9fee00db5d856d78ee2728131aa521048b31da8c8dd0f1de0238ae8a355e3903d568d66998b54c4241afb1ce053feef6c672615cf3fab40ce6afb8f405686f25023bd13a9617cb4c6d3ce000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21:24:58 executing program 2: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:58 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, 0x0, 0x40080d4) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = getpid() r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x2000c000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000000000000008a0000000000000000000000080006000000000004006c80"], 0x28}}, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c8572fe8b2d010000001c01030700000000000000000a000000000858af712982e31d2f819528a08c58d43597fd94983d8fbffc7dd9fee00db5d856d78ee2728131aa521048b31da8c8dd0f1de0238ae8a355e3903d568d66998b54c4241afb1ce053feef6c672615cf3fab40ce6afb8f405686f25023bd13a9617cb4c6d3ce000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21:24:58 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, 0x0, 0x40080d4) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x200, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc8}}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x71}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x41) 21:24:58 executing program 2: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:58 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 2: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x200, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc8}}, 0x1c}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x4000000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x71}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x41) 21:24:58 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r2 = getpid() (async) r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x2000c000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000000000000008a0000000000000000000000080006000000000004006c80"], 0x28}}, 0x0) 21:24:58 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:59 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x200, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc8}}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x71}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x41) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x200, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc8}}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x4000000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x71}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x41) (async) 21:24:59 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:24:59 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080d4) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r2 = getpid() (async) r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x2000c000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000000000000008a0000000000000000000000080006000000000004006c80"], 0x28}}, 0x0) 21:24:59 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x40080d4) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:24:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:59 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:24:59 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x54}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000085) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r5 = getpid() r6 = openat$vcsa(0xffffff9c, &(0x7f0000000680), 0x408cc1, 0x0) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd4, r2, 0x204, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb17b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x233}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0x7f, 0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b1}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0x5, 0x1f, 0x3f, 0x0]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x635}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xea1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x373}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x203}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb17}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @val={0xc, 0x99, {0x3f, 0x3f}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc6, 0x4a}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x40040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x184, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="67cc21d97228dbeed581f639c5cc33460b58f1a64133"}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6c45cd9afe"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2f8cbc9e0931b22b461545b81"}, @NL80211_KEY_SEQ={0xc, 0x4, "191f603f379badcc"}]}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bcbc8959320f042900ecef0b4b"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3c13bbf3ed81ce4072ba58f980"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2d6c3f8d9711e7815e5193192d"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4952f06d1d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}]]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000000000200000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x54}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000085) (async) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) (async) r5 = getpid() (async, rerun: 64) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000680), 0x408cc1, 0x0) (rerun: 64) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd4, r2, 0x204, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb17b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x233}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0x7f, 0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b1}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0x5, 0x1f, 0x3f, 0x0]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x635}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xea1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x373}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x203}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb17}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @val={0xc, 0x99, {0x3f, 0x3f}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc6, 0x4a}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x40040) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x184, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="67cc21d97228dbeed581f639c5cc33460b58f1a64133"}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6c45cd9afe"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2f8cbc9e0931b22b461545b81"}, @NL80211_KEY_SEQ={0xc, 0x4, "191f603f379badcc"}]}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bcbc8959320f042900ecef0b4b"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3c13bbf3ed81ce4072ba58f980"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2d6c3f8d9711e7815e5193192d"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4952f06d1d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}]]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) (rerun: 32) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000000000200000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000000000200000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x54}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000085) (async) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) (async) r5 = getpid() (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000680), 0x408cc1, 0x0) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd4, r2, 0x204, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb17b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x233}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0x7f, 0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b1}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0x5, 0x1f, 0x3f, 0x0]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x635}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xea1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x373}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x203}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb17}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @val={0xc, 0x99, {0x3f, 0x3f}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc6, 0x4a}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x40040) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x184, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="67cc21d97228dbeed581f639c5cc33460b58f1a64133"}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6c45cd9afe"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2f8cbc9e0931b22b461545b81"}, @NL80211_KEY_SEQ={0xc, 0x4, "191f603f379badcc"}]}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bcbc8959320f042900ecef0b4b"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3c13bbf3ed81ce4072ba58f980"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2d6c3f8d9711e7815e5193192d"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4952f06d1d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}]]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) 21:24:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:59 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = getpid() r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x80, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x41}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7f}, @NL80211_ATTR_SCAN_SSIDS={0x80, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x21, 0x0, @random="0c191b668501747ad9b33e0370e899c69d16d059a5d1c83ae896981892"}, {0x12, 0x0, @random="39f5ca5291759e3f26f0f0729222"}, {0xe, 0x0, @random="71a876d81a97f42d79de"}, {0x1b, 0x0, @random="ebf7d52ab50e9485780fe75d06493d32c1df67da7cb99f"}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x11c, 0xb0c, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000}}, 0x1c}}, 0x0) 21:24:59 executing program 1: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x40400, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000004047d63270ced1f57192f785856b94bc76372e2ae6d578a9cfc6c9a0e2fc3a361bd45dc735744200"/54, @ANYRES16=0x0, @ANYBLOB="0000000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x8c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3800000, 0x26}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_PMKID={0x14, 0x55, "198d5a2515b36b5fa4dc83e0d8639550"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "8a7fd62a6eb125965e415f62d4ef881f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "cf373aad12d68da09112bda8170293a1"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x240400c0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x9}}, 0x1c}}, 0x5) 21:24:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:24:59 executing program 1: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x40400, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000004047d63270ced1f57192f785856b94bc76372e2ae6d578a9cfc6c9a0e2fc3a361bd45dc735744200"/54, @ANYRES16=0x0, @ANYBLOB="0000000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x8c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3800000, 0x26}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_PMKID={0x14, 0x55, "198d5a2515b36b5fa4dc83e0d8639550"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "8a7fd62a6eb125965e415f62d4ef881f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "cf373aad12d68da09112bda8170293a1"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x240400c0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x9}}, 0x1c}}, 0x5) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = getpid() (async, rerun: 64) r3 = getpid() (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) (async) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x80, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x41}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7f}, @NL80211_ATTR_SCAN_SSIDS={0x80, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x21, 0x0, @random="0c191b668501747ad9b33e0370e899c69d16d059a5d1c83ae896981892"}, {0x12, 0x0, @random="39f5ca5291759e3f26f0f0729222"}, {0xe, 0x0, @random="71a876d81a97f42d79de"}, {0x1b, 0x0, @random="ebf7d52ab50e9485780fe75d06493d32c1df67da7cb99f"}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x11c, 0xb0c, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000}}, 0x1c}}, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = getpid() r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x80, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x41}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7f}, @NL80211_ATTR_SCAN_SSIDS={0x80, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x21, 0x0, @random="0c191b668501747ad9b33e0370e899c69d16d059a5d1c83ae896981892"}, {0x12, 0x0, @random="39f5ca5291759e3f26f0f0729222"}, {0xe, 0x0, @random="71a876d81a97f42d79de"}, {0x1b, 0x0, @random="ebf7d52ab50e9485780fe75d06493d32c1df67da7cb99f"}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x11c, 0xb0c, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) getpid() (async) getpid() (async) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000300)={0x10000, r4}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x80, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x41}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7f}, @NL80211_ATTR_SCAN_SSIDS={0x80, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x21, 0x0, @random="0c191b668501747ad9b33e0370e899c69d16d059a5d1c83ae896981892"}, {0x12, 0x0, @random="39f5ca5291759e3f26f0f0729222"}, {0xe, 0x0, @random="71a876d81a97f42d79de"}, {0x1b, 0x0, @random="ebf7d52ab50e9485780fe75d06493d32c1df67da7cb99f"}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x11c, 0xb0c, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000}}, 0x1c}}, 0x0) (async) 21:24:59 executing program 1: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x40400, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000004047d63270ced1f57192f785856b94bc76372e2ae6d578a9cfc6c9a0e2fc3a361bd45dc735744200"/54, @ANYRES16=0x0, @ANYBLOB="0000000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x30}}, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x8c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3800000, 0x26}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_PMKID={0x14, 0x55, "198d5a2515b36b5fa4dc83e0d8639550"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "8a7fd62a6eb125965e415f62d4ef881f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "cf373aad12d68da09112bda8170293a1"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x240400c0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x9}}, 0x1c}}, 0x5) 21:24:59 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8, 0x1, 0xe, 0x8, {{0x2a, 0x4, 0x0, 0x39, 0xa8, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x47, 0xffffffffffffffff, [{0x7, 0x10, "60f29b5b57942f969f1c608b6750"}, {0x2, 0xd, "59bd56c7272d55e6cb8878"}, {0x5, 0xc, "5b6b7b7c514d21cb3b3f"}, {0x7, 0xe, "89771ef4bc039b5f236d33cf"}, {0x5, 0x2}, {0x6, 0x3, 'W'}, {0x0, 0x5, "375180"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xf, [{@multicast2, 0x7}, {@loopback, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x1}, {@broadcast, 0xe5}]}, @lsrr={0x83, 0x7, 0xc1, [@broadcast]}, @ssrr={0x89, 0x7, 0xee, [@dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x17, 0xbd, [@multicast2, @empty, @local, @multicast2, @local]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@delneigh={0x4c, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x10, 0xf0, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x1000000, 0x7fffffff, 0x69, 0xaa}}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_LLADDR={0xa}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20064800}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40810}, 0x4080) 21:24:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 21:24:59 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8, 0x1, 0xe, 0x8, {{0x2a, 0x4, 0x0, 0x39, 0xa8, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x47, 0xffffffffffffffff, [{0x7, 0x10, "60f29b5b57942f969f1c608b6750"}, {0x2, 0xd, "59bd56c7272d55e6cb8878"}, {0x5, 0xc, "5b6b7b7c514d21cb3b3f"}, {0x7, 0xe, "89771ef4bc039b5f236d33cf"}, {0x5, 0x2}, {0x6, 0x3, 'W'}, {0x0, 0x5, "375180"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xf, [{@multicast2, 0x7}, {@loopback, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x1}, {@broadcast, 0xe5}]}, @lsrr={0x83, 0x7, 0xc1, [@broadcast]}, @ssrr={0x89, 0x7, 0xee, [@dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x17, 0xbd, [@multicast2, @empty, @local, @multicast2, @local]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@delneigh={0x4c, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x10, 0xf0, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x1000000, 0x7fffffff, 0x69, 0xaa}}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_LLADDR={0xa}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20064800}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40810}, 0x4080) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x8, r0, 0x80000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7b7fdb090d1051a0}, 0x200088c1) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x74, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "de9555091a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 21:24:59 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async, rerun: 32) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x8, r0, 0x80000}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7b7fdb090d1051a0}, 0x200088c1) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x74, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "de9555091a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (rerun: 32) 21:24:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8, 0x1, 0xe, 0x8, {{0x2a, 0x4, 0x0, 0x39, 0xa8, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x47, 0xffffffffffffffff, [{0x7, 0x10, "60f29b5b57942f969f1c608b6750"}, {0x2, 0xd, "59bd56c7272d55e6cb8878"}, {0x5, 0xc, "5b6b7b7c514d21cb3b3f"}, {0x7, 0xe, "89771ef4bc039b5f236d33cf"}, {0x5, 0x2}, {0x6, 0x3, 'W'}, {0x0, 0x5, "375180"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xf, [{@multicast2, 0x7}, {@loopback, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x1}, {@broadcast, 0xe5}]}, @lsrr={0x83, 0x7, 0xc1, [@broadcast]}, @ssrr={0x89, 0x7, 0xee, [@dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x17, 0xbd, [@multicast2, @empty, @local, @multicast2, @local]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@delneigh={0x4c, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x10, 0xf0, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x1000000, 0x7fffffff, 0x69, 0xaa}}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_LLADDR={0xa}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20064800}, 0x840) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async, rerun: 64) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async, rerun: 32) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 32) r4 = getpid() (async, rerun: 64) r5 = getpid() (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async, rerun: 64) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40810}, 0x4080) (rerun: 64) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x28, 0x18, 0x200, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x28, 0x18, 0x200, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x8, r0, 0x80000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7b7fdb090d1051a0}, 0x200088c1) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x74, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "de9555091a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x28, 0x18, 0x200, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x28, 0x18, 0x200, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) 21:24:59 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c200000000000ad5bd6df0603dc8f512836345fb300839ca20244ed6c63658969d5cce3e908936a03c97a"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x410) 21:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c200000000000ad5bd6df0603dc8f512836345fb300839ca20244ed6c63658969d5cce3e908936a03c97a"], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x410) 21:24:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000b00030700000000000000000a00000000000000000000000800bde20000000004000880"], 0x28}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = getpid() r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) r15 = openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) r16 = getuid() sendmsg$nl_xfrm(r15, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000150008002abd7000fddbdf25fe8000000000000000000000000000bb200100000000000000000000000000014e2000024e22001f0200a06032000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="b66b6e0002000000200017000100000028bd70002dbd70002abd70002cbd7000fcffffff4416000008001d00090000000a001000000000000000000024000901000500000000000000ffffff7f00"/96], 0xa8}, 0x1, 0x0, 0x0, 0x44084}, 0x4040001) sendmsg$nl_xfrm(r14, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=@getsadinfo={0x1a4, 0x23, 0x10, 0x70bd2a, 0x25dfdbfb, 0x0, [@sa={0xe0, 0x6, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e20, 0x5, 0x4e22, 0x25, 0x3, 0x1a0, 0x80, 0x6, 0x0, r16}, {@in6=@mcast1, 0x4d6, 0x2b}, @in=@loopback, {0x5be7, 0xa359, 0x0, 0x5, 0x6, 0x200, 0x8}, {0x0, 0x6d2, 0x6, 0x100000001}, {0xffff, 0x4, 0x4}, 0x70bd26, 0x3501, 0xa, 0x0, 0x40}}, @algo_crypt={0x8c, 0x2, {{'kw(khazad-generic)\x00'}, 0x220, "2d60a922ba28ee42df02adc0653a36693cfdb032c20233f553f2e92c7d062b2a6d82a6e425564939e0bdbf93dd664c34d77219676909de36fcb26307927ab5c322c786f2"}}, @lifetime_val={0x24, 0x9, {0x3f, 0x67, 0x4, 0x9}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000240)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd2b, 0x4, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0xfffffffd}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a43f3dcb950"}]}, 0x3c}}, 0x4010) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6}}}}}, 0x20}}, 0x401) 21:24:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c200000000000ad5bd6df0603dc8f512836345fb300839ca20244ed6c63658969d5cce3e908936a03c97a"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x410) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x410) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:00 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000b00030700000000000000000a00000000000000000000000800bde20000000004000880"], 0x28}}, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r7 = getpid() r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r15 = openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) r16 = getuid() sendmsg$nl_xfrm(r15, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000150008002abd7000fddbdf25fe8000000000000000000000000000bb200100000000000000000000000000014e2000024e22001f0200a06032000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="b66b6e0002000000200017000100000028bd70002dbd70002abd70002cbd7000fcffffff4416000008001d00090000000a001000000000000000000024000901000500000000000000ffffff7f00"/96], 0xa8}, 0x1, 0x0, 0x0, 0x44084}, 0x4040001) (async) sendmsg$nl_xfrm(r14, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=@getsadinfo={0x1a4, 0x23, 0x10, 0x70bd2a, 0x25dfdbfb, 0x0, [@sa={0xe0, 0x6, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e20, 0x5, 0x4e22, 0x25, 0x3, 0x1a0, 0x80, 0x6, 0x0, r16}, {@in6=@mcast1, 0x4d6, 0x2b}, @in=@loopback, {0x5be7, 0xa359, 0x0, 0x5, 0x6, 0x200, 0x8}, {0x0, 0x6d2, 0x6, 0x100000001}, {0xffff, 0x4, 0x4}, 0x70bd26, 0x3501, 0xa, 0x0, 0x40}}, @algo_crypt={0x8c, 0x2, {{'kw(khazad-generic)\x00'}, 0x220, "2d60a922ba28ee42df02adc0653a36693cfdb032c20233f553f2e92c7d062b2a6d82a6e425564939e0bdbf93dd664c34d77219676909de36fcb26307927ab5c322c786f2"}}, @lifetime_val={0x24, 0x9, {0x3f, 0x67, 0x4, 0x9}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000240)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd2b, 0x4, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0xfffffffd}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a43f3dcb950"}]}, 0x3c}}, 0x4010) (async) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6}}}}}, 0x20}}, 0x401) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x92) 21:25:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000b00030700000000000000000a00000000000000000000000800bde20000000004000880"], 0x28}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = getpid() r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) r15 = openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) r16 = getuid() sendmsg$nl_xfrm(r15, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000150008002abd7000fddbdf25fe8000000000000000000000000000bb200100000000000000000000000000014e2000024e22001f0200a06032000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="b66b6e0002000000200017000100000028bd70002dbd70002abd70002cbd7000fcffffff4416000008001d00090000000a001000000000000000000024000901000500000000000000ffffff7f00"/96], 0xa8}, 0x1, 0x0, 0x0, 0x44084}, 0x4040001) sendmsg$nl_xfrm(r14, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=@getsadinfo={0x1a4, 0x23, 0x10, 0x70bd2a, 0x25dfdbfb, 0x0, [@sa={0xe0, 0x6, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e20, 0x5, 0x4e22, 0x25, 0x3, 0x1a0, 0x80, 0x6, 0x0, r16}, {@in6=@mcast1, 0x4d6, 0x2b}, @in=@loopback, {0x5be7, 0xa359, 0x0, 0x5, 0x6, 0x200, 0x8}, {0x0, 0x6d2, 0x6, 0x100000001}, {0xffff, 0x4, 0x4}, 0x70bd26, 0x3501, 0xa, 0x0, 0x40}}, @algo_crypt={0x8c, 0x2, {{'kw(khazad-generic)\x00'}, 0x220, "2d60a922ba28ee42df02adc0653a36693cfdb032c20233f553f2e92c7d062b2a6d82a6e425564939e0bdbf93dd664c34d77219676909de36fcb26307927ab5c322c786f2"}}, @lifetime_val={0x24, 0x9, {0x3f, 0x67, 0x4, 0x9}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000240)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd2b, 0x4, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0xfffffffd}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a43f3dcb950"}]}, 0x3c}}, 0x4010) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6}}}}}, 0x20}}, 0x401) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x92) 21:25:00 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000b00030700000000000000000a00000000000000000000000800bde20000000004000880"], 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000b00030700000000000000000a00000000000000000000000800bde20000000004000880"], 0x28}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) getpid() (async) r7 = getpid() r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) r15 = openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) r16 = getuid() sendmsg$nl_xfrm(r15, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000150008002abd7000fddbdf25fe8000000000000000000000000000bb200100000000000000000000000000014e2000024e22001f0200a06032000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="b66b6e0002000000200017000100000028bd70002dbd70002abd70002cbd7000fcffffff4416000008001d00090000000a001000000000000000000024000901000500000000000000ffffff7f00"/96], 0xa8}, 0x1, 0x0, 0x0, 0x44084}, 0x4040001) sendmsg$nl_xfrm(r14, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=@getsadinfo={0x1a4, 0x23, 0x10, 0x70bd2a, 0x25dfdbfb, 0x0, [@sa={0xe0, 0x6, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e20, 0x5, 0x4e22, 0x25, 0x3, 0x1a0, 0x80, 0x6, 0x0, r16}, {@in6=@mcast1, 0x4d6, 0x2b}, @in=@loopback, {0x5be7, 0xa359, 0x0, 0x5, 0x6, 0x200, 0x8}, {0x0, 0x6d2, 0x6, 0x100000001}, {0xffff, 0x4, 0x4}, 0x70bd26, 0x3501, 0xa, 0x0, 0x40}}, @algo_crypt={0x8c, 0x2, {{'kw(khazad-generic)\x00'}, 0x220, "2d60a922ba28ee42df02adc0653a36693cfdb032c20233f553f2e92c7d062b2a6d82a6e425564939e0bdbf93dd664c34d77219676909de36fcb26307927ab5c322c786f2"}}, @lifetime_val={0x24, 0x9, {0x3f, 0x67, 0x4, 0x9}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000240)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd2b, 0x4, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0xfffffffd}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a43f3dcb950"}]}, 0x3c}}, 0x4010) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6}}}}}, 0x20}}, 0x401) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x92) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) getpid() (async) getpid() (async) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x92) (async) 21:25:00 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:25:00 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:25:00 executing program 0: socket$nl_route(0x10, 0x3, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001800030700ff0f00000000000a000000000000000000006c08000600000000000400088001aab32644066ce4318033f10e822a7f14b4c9fc1ad8fa2dd6b8d2f7c4cac1c571f025e60e0ad6dc21a393624c9e4851aea01fef8be2c3bcf727d8f1229ee8c27742dd05e127e39e0a5cd8c17aa38f1685f7c6032a7a46dd0e50e0ede957a223c3f75058b26757deee9be9704756ccebf4299d068daf13b4b1a2e3472e7d8e493ec1bb6959307ce7ef604831f4c0206b4fbea683440377858ccc17feca48732ff8152823e8cbbc596f4cf14e8cf9a314088b38160b8b9c4d659557711d318065e5b0429f9ff27943e86a"], 0x28}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3a5c13a4e81edc7088e0df9e7e"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x4}, 0x10) socketpair(0x0, 0x4, 0x6, &(0x7f0000000380)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa2, 0x7}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4048080}, 0x40000c0) 21:25:00 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:25:00 executing program 0: socket$nl_route(0x10, 0x3, 0x0) 21:25:00 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001800030700ff0f00000000000a000000000000000000006c08000600000000000400088001aab32644066ce4318033f10e822a7f14b4c9fc1ad8fa2dd6b8d2f7c4cac1c571f025e60e0ad6dc21a393624c9e4851aea01fef8be2c3bcf727d8f1229ee8c27742dd05e127e39e0a5cd8c17aa38f1685f7c6032a7a46dd0e50e0ede957a223c3f75058b26757deee9be9704756ccebf4299d068daf13b4b1a2e3472e7d8e493ec1bb6959307ce7ef604831f4c0206b4fbea683440377858ccc17feca48732ff8152823e8cbbc596f4cf14e8cf9a314088b38160b8b9c4d659557711d318065e5b0429f9ff27943e86a"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3a5c13a4e81edc7088e0df9e7e"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x4}, 0x10) socketpair(0x0, 0x4, 0x6, &(0x7f0000000380)={0xffffffffffffffff}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa2, 0x7}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4048080}, 0x40000c0) 21:25:00 executing program 0: socket$nl_route(0x10, 0x3, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c0100030000dfffffff00170a0000090000000000000000"], 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000430000012abd7000fddbdf2507000000080003000600000008000300030000000800e8449d46000000000200fdffffff20000680080011000104000008000b00008000000c000c000500000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4008005}, 0x4040081) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001840)={'wlan0\x00'}) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xc4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100e, 0x43}}}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x0, 0x6}, {0x80, 0x1}, {0x6, 0x4}, {0x0, 0x4}, {0x40, 0x3}, {0x7, 0x1}, {0x20, 0x2}, {0x59, 0x3}, {0x8, 0x5}, {0xc, 0x4}, {0x29, 0x4}, {0x8, 0x5}, {0x4, 0x3}, {0x1, 0x2}, {0x80, 0x2}, {0x20, 0x1}, {0x5, 0x6}, {0x0, 0x6}], "4f846949fe232ca0"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x1}, {0x20}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x5}, {0x4, 0x1}, {0x81, 0xe}, {0xa1, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x3f, 0x4}, {0x1f, 0xfd}], "f506bc137bbd141a"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3f}, {0x6, 0x5}, {0xfd, 0x6}, {0xc8}, {0x6, 0x7}, {0x81, 0x2}], "f8a8e08aef799b21"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x5}, {0xff, 0x6}, {0xfd, 0x7}, {0x7f, 0x5}, {0x40, 0x8}, {0x40, 0x1}, {0x38, 0x5}, {0x40, 0x1}, {0x0, 0x2}, {0x3, 0x4}, {0xd4, 0x20}, {0x40, 0x5}, {0x2}], "672d9ff57bc108f8"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "8e8bbf72e5e43fb3"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8085}, 0x8800) r4 = openat$vcsa(0xffffff9c, &(0x7f0000001880), 0x4500, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000001ac0), 0x82000, 0x0) write$apparmor_exec(r4, &(0x7f00000018c0)={'stack ', '\x00'}, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000001800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000280)={0x1530, r5, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1510, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8d, 0x2, "366ba61e4a09a9745f8c14b1c7ff3da2ae4683081557ec76a2b42a85756021eb2c1d76ee0cb2d5140595482a2d23089691eaca06556706debb9a29af1da8318d5bf9543502b763d3b87e9fffd15d932f48b5696d29692f1aff12adcb0a5ba8b7600041a2862243dbde519b1171a39ce42025e67906b54011defb57bb12a662870c3d90de7c2acfa993"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_60GHZ={0xc4, 0x2, "25feb9683f73e87f17b450c752044c25715a94e60bf9c6408542193fdf7b1dcf38907816fbc4333abaea3ea42fb45c844e9066148d052117617ecef3b62e52f0b8a53e9853ca14436fc823bad79d9a8b28b14f148311d100726645761877a2b742ce19fba1474c9eedf0c315bce480a8b1fde7e791d84b0e535e3fd3f6b3a111d31df7b2c29c1fab76acc72693cf2bec690d99fd5d1c33754760c09605fc86a112ba7aed7a88ccbb968fcf57e632022aa93ae289f14b022ec024781ffe44c49e"}, @NL80211_BAND_6GHZ={0xfd, 0x3, "bd117689dd1ffb3a5f35be3f9383a7bcd95f0c6708ba4287157680fa577e5dcda69214a9a925fd43e0c1a5fd799e4a714e1250f8e7f1af1308e84f12141c05da01a0ceb7151150e3ba65c67f1c163661e194f844f798815718ef828a539558bc26b83eb1940e5b8230c68f98d50aba27fdbf4759eb003b6ba6efca964e92258d8f346c61975687afc7e0364717d6d1e5e771b17acc1bef65b0e63cd00f1c5126ab2f62a8a094ad9975e90d24cc1b57c52e393707a32ab7b8edf0d06f166d955943ca14fb8df88db7341456fa1d1d66e980435886f8606cadf6dbea8145b72759f7d576a67ff429ad51912c76211a6b6c01d4b92a79545e60ea"}, @NL80211_BAND_6GHZ={0xd9, 0x3, "6e70960ea9900a9236dda56b018d7505671d159a5dc2a1c96f83262812d4fb89a1720b1843be442531c2c3aeaecfa7380257099e5cd07f208c665a58d4632306b42d93a49747680d642b3851690d52b35a339f5d27df98293f123bf411d11b384d50b2362233ff21efbc2173155b413b17ceb8336847ddc9a569e15b218f7161cfa8e3c97859654ca37dbc9907ca4555c17b768775e4b744d26fecdfefaf5749b964ff2602421f1f3b8a2140d0b61a15176630727ce87f10ca69ae79863ac7df8a00e82475acd3de133d3c813783a473b671a449e3"}, @NL80211_BAND_2GHZ={0xf1, 0x0, "ba949271e87a2df00b7b41d0fe06391f8c3995c8c9f859693bbc1c986ccc64935f4571c361b80befc47d3f3639de089c85f8879175217cc4f54d7d86bd3447b0c362b34f11241394c162835571f45ced33c10f3217bc17b96bd8d9c341acd2d47e299c4a2f05bded996db3b6b122b610953b5e546e09e3edb71db745acd20364b6074dd04b716ba9283a47dbd28974d07b879479d812ad5c1a3fdc768736653d1cca93b80fe1aae262dd8d4421a9660fdfd5bfd9e2afe2f8dcb1690979548bcdcead23d01f57614a2d9d87349bff37366bfc06e6b82b4e5d431d9ac377372a0cac94660fd73ccfa5e2068a4302"}, @NL80211_BAND_6GHZ={0x95, 0x3, "f5efdd4947421075e83f840308d2cfc9a93203eadd06e03977f2eec1de34d26b6457d0ebdf6ad8973035aeed75ef9c55e6ef7428bc12dc50ca32e2b572b82b61c98890f242f668a7f7ef27cfd90b9b661cebb9eb91c083450b3ef2489eabe17f193992686b1ab9c2f00367d0466e7879368b0f928e60ebcd0370933efe4ba04308b630d9771713c111169ca9c7af95d933"}, @NL80211_BAND_5GHZ={0x4b, 0x1, "27497b89786e65447d523769860506ebdc104a56b09de34f831e1b4a1dc59fd88302a74afa14ecec71ccba66eb483e335caed08704bee342f8c68e1042878f2419776ea48cdd36"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x41f0}]}, 0x1530}}, 0x8090) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001800030700ff0f00000000000a000000000000000000006c08000600000000000400088001aab32644066ce4318033f10e822a7f14b4c9fc1ad8fa2dd6b8d2f7c4cac1c571f025e60e0ad6dc21a393624c9e4851aea01fef8be2c3bcf727d8f1229ee8c27742dd05e127e39e0a5cd8c17aa38f1685f7c6032a7a46dd0e50e0ede957a223c3f75058b26757deee9be9704756ccebf4299d068daf13b4b1a2e3472e7d8e493ec1bb6959307ce7ef604831f4c0206b4fbea683440377858ccc17feca48732ff8152823e8cbbc596f4cf14e8cf9a314088b38160b8b9c4d659557711d318065e5b0429f9ff27943e86a"], 0x28}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3a5c13a4e81edc7088e0df9e7e"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x4}, 0x10) socketpair(0x0, 0x4, 0x6, &(0x7f0000000380)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa2, 0x7}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4048080}, 0x40000c0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c0100030000dfffffff00170a0000090000000000000000"], 0x1c}}, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000430000012abd7000fddbdf2507000000080003000600000008000300030000000800e8449d46000000000200fdffffff20000680080011000104000008000b00008000000c000c000500000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4008005}, 0x4040081) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001840)={'wlan0\x00'}) (async) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xc4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100e, 0x43}}}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x0, 0x6}, {0x80, 0x1}, {0x6, 0x4}, {0x0, 0x4}, {0x40, 0x3}, {0x7, 0x1}, {0x20, 0x2}, {0x59, 0x3}, {0x8, 0x5}, {0xc, 0x4}, {0x29, 0x4}, {0x8, 0x5}, {0x4, 0x3}, {0x1, 0x2}, {0x80, 0x2}, {0x20, 0x1}, {0x5, 0x6}, {0x0, 0x6}], "4f846949fe232ca0"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x1}, {0x20}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x5}, {0x4, 0x1}, {0x81, 0xe}, {0xa1, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x3f, 0x4}, {0x1f, 0xfd}], "f506bc137bbd141a"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3f}, {0x6, 0x5}, {0xfd, 0x6}, {0xc8}, {0x6, 0x7}, {0x81, 0x2}], "f8a8e08aef799b21"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x5}, {0xff, 0x6}, {0xfd, 0x7}, {0x7f, 0x5}, {0x40, 0x8}, {0x40, 0x1}, {0x38, 0x5}, {0x40, 0x1}, {0x0, 0x2}, {0x3, 0x4}, {0xd4, 0x20}, {0x40, 0x5}, {0x2}], "672d9ff57bc108f8"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "8e8bbf72e5e43fb3"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8085}, 0x8800) (async, rerun: 64) r4 = openat$vcsa(0xffffff9c, &(0x7f0000001880), 0x4500, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000001ac0), 0x82000, 0x0) (async) write$apparmor_exec(r4, &(0x7f00000018c0)={'stack ', '\x00'}, 0x7) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000001800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000280)={0x1530, r5, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1510, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8d, 0x2, "366ba61e4a09a9745f8c14b1c7ff3da2ae4683081557ec76a2b42a85756021eb2c1d76ee0cb2d5140595482a2d23089691eaca06556706debb9a29af1da8318d5bf9543502b763d3b87e9fffd15d932f48b5696d29692f1aff12adcb0a5ba8b7600041a2862243dbde519b1171a39ce42025e67906b54011defb57bb12a662870c3d90de7c2acfa993"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "c043cf054c2fa041efd3e7f52303763b7ed7adc934e0a8feddd9ea1639307a6592e508f44c31e13bd1ac4fa084a511406179d62319407be93c3e79c5643ee642f60e98346a604307d84816ec6ac757c3cf19add4ba1a01ad51d2ae117119b3a19539dea9c00bdfafa76f266c885559fee4ede948b90c6f9c950aa1ec43f3720a82e9f4e5f254e02933bf4bf59f51d8b168410f7f5864bd4fab15be338c13b6115f28265648f60aae37965b2e7347c12b07f4f38e75bbfc2e8e0d1873a1cc8004b40acf6f9f12740c785759300db828eae2c89b769d5acf86a62b84475202461f1cf67a472cd11f2a33a92db4f4ffcf1cafdd8721343876daf4fe9260388f1b58627f9247b841010cb565d2a5f582b8bbf3cd4125b32b4a159185e2e9c23e4192fcb4c16aecc3c1ce602d1c7d6aa922f454666e04d777ca1892bf7e787d663892f1017e5137ce3f40e2b609abb9fe3542e3d170e394a9d5a353793eac3a9377674dd6d76d16283a17047988f0cff0bd07c84f61b54070cee4ed381dda4402bcc24af75377e0ac3a6a40f46f0f8970d487b8127fb0adc1752bf6b085c7bb97511c377037905da48d174d54ee0c087a856d7005283b1b15236ada450c4c85384c1d1dc20609798aadc21c46e9f31b80f20a3a1fb1eebaa9bbe96c046c0bf80cf5cb98284ca48bf54645285a5609bcb324324b396d6853dea63330c8f257e1170866ae99a88e779c3f54968f28427de1c0a8b35cd4c74a6fa5d5c53405d2765316e803a836af4f1c5a6514a333adf41ee7f9f2fdf664f10f079cadb2c82eef0e4506157a4ce80b8db7dbf68e163a8b24c8c09e2e915ccd619de8d42517ca23df84f686b3d7bd1235eac4763a6e62afb1cff63efa9f0b4dbf2718f0ee8fc12049564fedd043ade622ab9f903cd9a17f56421d3b211a6db85b9677a9babad44e70b2ca955046e910f0c84d730d9cef8f125a2035e545f2aa5e52dfe9fc655f26bb1b1ba64faee946fbc4cbd901b194a2de37300a060bc015e92743ccbd322de78d8a74f42f05a3429ad3eea9b8fa0b5dd0bd5e0ca8a8a4084945f25be78de31c73c4835a7190b55e5e8ddec98bf7659fa342105ba1281e4973cacd62af02c90efee574b383cc73d9bf7c1d2c1f65128a9f3df8b09f1fd40a1ea3019199eb85b03a3d03ef6d442235103a3a45da66bc2ebe2bf4e49c9b81218167acda89ee4fc9a77c2b3f3076499ece6e534ea6cb0c4ddb9a77c3c7d88ae95d4a7c4a582431a0f143ccaa00658ccf0f8e88450d6cfa6a423eaab55bd41b25b13a3d5f0eb45708b8e8341eb972523bf79c792eb26573d383b2969b0634da92e6931cc7b2b9d783067aa7f70d525c1be476575871ec3450e3c3e36a0704ef5915dfb104f7dbf6965ea082285e7deb6d4f5367373ccdbc9ebb14428673dfb265b8c5c99e2e7fb5a3afedf5cf44380649956092464af4965da2e0358883adabca82c86823d6d87c9eebc15fd261aaa1a9f736e6144ca21d49010820946472861c94a8e822992b5e1f806ad621fc43aac95164cc5ce7a2a839d46d893c5dd59701dc436a03373248d43625d98e8d2b121d60d6fe3b02cb6b308950308814f8c0b943a434885478415f63c39e20f97727a744c25f1f7d06184f88ea35c9a164569cd7ab3b3a0d3c5b09b04854240244e0a8dc8d31cc7549407bd1788762b0163fb4d9e0719f457c88525779394973c347107dab0a573614698853fcb9a29719a01b42fc6746e8330d7ea732b0b4aeb5eb1105b570eedd985b4cd97bdca442cb354703c7fc21f2111b2c5086a993cd5df0a22e0539d73b1e0fc8fdd022da1436e2649c75498facaa1a5178bd8684376cf4a78f4ea26ad56a7b5ad61bcb66dd22bf8ad03a03a4477a8aabd375fd4f9908b520ef8352a11ca4882eddde767ecaa14cf30e44c0b3eacabf1bfe58c7fbcd1234f58fba0df6fa9dd1ec1747807ab6ab7586e82e39ad3ecbda6915fd04b35487d17f3560d153ed6602e19d5b743d3fcd81464a4553f80b03b7528d8bdaa20ec39a66d611f116a1ca6b1a34a52df1c0836562108967babac412e8f8fcb8b8d9fab40e222c2e176a51c964edcf3c0022fdada45af9f5637b67b55acb1fa7b90723e8afa9ca4275b3e29e4fbd51e80c89c9da9c4c43147fa335a113350d9a951795062de37df5ae8765e49fdfe722afc7a8f0d6364acdeb9013a11542a5c7302c7152c7dbf3cdbb7ce1fafd155c278d8926c6098641529946cb00d9fb59432ae3c8900fdd38713f72031845bf16fc702f4b6d6de5b9228021d248371cd2aebab7d0ebe254a18a0aa8802861fb33e04ba879ddb7bef8dee3cf763bbdad7719e22457546cbcce4285505b15db7235926925daa466281e836a7e4b86834b737d7181ea97d3ab16a23a9ab33c8cbf16c83778a5c576aa41152949e99fa2400d33ba1cd2a0c5380ec5698625f49b382885ccb099b4f7b356b4828facb12d288bef36784aa5f166b919726a94b73d4501e9481e5ebfc05be50550b10eec4f981276ea506971b7297d0f8ac8e3b0728cbd6f4bac5749df0d541c3a2b10b83c18183095730eb86d8140a20300fa9bf511fb485e49cc8c94c4423ab6ef8960a130c510d6427538cbbff62f3032a218da55d7fd86f5190f94d6da5a64518d2f69cc69a9c9ce20ee9c731f905d9f309a45083fadc3f1993587579e3137b4c3d2a11e81b717b79c206d056162b34e4ad112d879ddf705e4e125a6bf7389ffda06e9516f852b71dafb94e97abfa00f077a6362c2f24713cedea6176bca8c055ace3ae48711954aad9b5430b83710c61bd5b6e9c187e966915888f471bb0335618f0a993cdbd9538219ea5884aaa2e9928d4e899cc92f04fa90ef37b9b1247521e744c920a4f70cb8c596d24dfca61a1c2920f4c503366eb5cb81409137c94edacba96f4475484660666c0c3b6c868cf575a60c5519529220b2126777a31e6bb6546715b8b45082327c365f06b7ed998ed91ef318d199a01d11840fd376d265d3b54ee7f06d151cfc46f311cb89e2c9362c0e50ee197172bef624e7400b21714145dcebcf6fd9344361107b2559ad19afc0e7fd460f413e7da6a6ae58faa97f4f23cc6b1ca3c1c095f3bf5e18ffe58d1820c6ff4de0b477df48e04e0cfbe172573f9635107da917feb03247a275730c2ebbca6dc4d2b90e27645a4d0f9c068702d8822d03a4ac40bafd155736f70b5e4a3c02402ba501b4f8e84208dbee28ed6f15d8c2060e4b1a9bcd3c06d9f44cd8b1ada75a91571d9dd12f6fd7e7764590b9be6a2e278020080e7a049005fabeef437604d1f41026e2fa5719c2c1befc323e239d32fb8b919d381219cb81e90db223f39a69fe01d3ae42f2d71b655769fc85dd72306903210212d43b011e5d3eb61645420b573b196c65dc54482d06b5f38272452780838d7f2a2c786589440b1b0c3657d7332eb8a6c0d82552b5db49377951f1ac0e1d51b67649659dde882d4b982979a469a398dbcf29ca9ab87c5073bc81ec2fa916aed4657bbb00df6a9a110c9d47d5e3d36e434c8507d078d92a36dfcfd94b25dc8a552f946abbafc2ea515814b0fb0bfaa99022e0a3d5cbc0f7e665338d72c55717dcaf8dd2bdc87bfe3068d3779bb44d2119f841e4a7d165faa6a7eb912e6c27a2ca392660280ff83c606670a82bb611e6b161976e764b092f1f7f4e1040adce64a8fce4af9e6d63a88ebf8cac3afb2b908b2e2749d37da65e2f9967bdba0df50d8b73d8c424170b718625a6d138339f71d6ce9415cc39e8ac1882bfb58681a08179d2d1e890b4b393ab68287e9a40d316ae323d93f009a7b0c170744b0f8c84b0ea23f6382c0aa375d7119744097ea8bd6fc8fb583813b1ed0001e61069117ebf9521c33a96239b46869fcbd1da491a896ccb8a62fb0b00dbdc56e9881644bc07b1a45d012d2a26f2d9f7c6cd205a671a08fbd643c2b659423974257fcd9fccba3f84e23ebcd4b04d0f062b33db537acef62490dbdeb8a9ee556ffe0988185d651fc92b89871d44722961715956012536ca2f93736fc4167f3f38e99dabcf6251a1af77efa56d5767795c828e3ce6af825d913eed8b8d955117a4984fb24847462c596a2e22c8c97e10dc40c24f122b93debae3b0ac9b5d9c2b4490d4f9b853a88051d2241bc7f7d7f08e8690a997a8827cd1ec94aa4eb0e6d1ce065a7a26d1704ec04b0915d9165ad3b50add49115f32f2ddfa129d83739ffab483c8ae0d9faacf4403fd77965268034643f268a52beb2571760b689cd88ec8f9e5f2525ed69ab39944efeb3f161ce712adc0bc44fd63c88acab0b708745d6c2ae873db3dac1d91526174224be3a5da63eecae97037a78a684e7cf73825240a90f35bdcf2014e3472df90ba4853bbfbf2b6d4ec5b86a0b2a5d1fc0260477a51f83bbc7f328c7b655f9a4f2331af67d853e9e5a9a579f37481534cba66643ecdade9f45393fe8b32ea64fbb6078bc5b9ea1c34030069603e6e3e11ff88c26f25fc6e6f2e76b4f5cc041b0cbfa4d7bd029becbb8a0a9f050a18c0487024f617573e9ec73e77fb517f60818a010df63fa55d7a4056a6b75d9f76091e86bb3846f33b73c4eb3f1eeba6cba11f2aa9f5f9c5a086bbfb4d7f76796359d0365f426aeac3fbc9740827a5bdf65a06c01b2f84f6f1788032267584ccf02d34f893efd88c5c5dbd4d40f5e886bfc2f6ba5a7d4b6e046ff2f183fa1be58daa9988d338e3a6c07357db672fcdc94ea3e4a0927eacc3d662cea5f77b6e1abfd4db9bbb232f12e47bcd18a96338450fa6fe272853207118c55b17e64d94773ba25c057c73e9dcfed3b6847560b87757c00f216bb47444f9e0c547cd62f4b0c2c542b460f5e035b8f4a44c6165892a6af7c52f43fbebd19656c47154ad7e2560778ad0d62317f6eb39988bed5c40b4810866b6c78c7073d9cddaaeedfa58e3bd4e0c17975f0ee43ead2c889dece3b709a42ce64f3a492334fdc2d716d2fca68a7c4dba8845213e55757f734ff6ffc74b8874972e3733f97153a5601c8ba376aa8b045471010052fc4bf3a70497c34517f9420e0fedc38e9739a7ceac73e8c581d15f7a2ef97800f2cc1dff902eca5fe98a212fda3b3c2ae9b3dcfd0752553e3f5a0b80792046a6a9c8b42c7b922e075fafc01bb2d70b42bfa53812160c2bc30fbf5d079b86c04b598ba199c304dfe6d8afc4a8e8214e4ccac8bc27bc1deb20c5d3b747468fbe043854bdb7491c976790537f8b081bf0d3ec8ce000d302172efc67fa2676bd4de40c53d5f7fdcf12ddbfaf9abc803dfc6adfd0e33d04e1d1c208cdc2cc1a06591d5dce216eac792c4247b90413a25d18f90072b02cf2fe2b51f51ba3b5a9bf604591a42c398b0c9f01c1963bf1924648bd2b11ff89125400188894f8998e468e729839911c5c6d0a04f7348d124bb0a75ecc3da2995e62363a4e3680fe4755e1fe015c24e7ed981ab366a1fc086f28be1886adc86b7e06a72eb9bac1817244260025b327e424ac104c98451a26b0fd17381e29fbdba2005e1f3493a8540a8b64679f7df27908fe93ea85067ab785e7f5c5ba4c7d2594dfe96c91723798e1ccc80fc021a4235789e639c4aa7349c6f353956706fab532b837563c6bee3aae382dd54fb9a589630c4726d5fa8e227a972f65aa686abc4592474e801cb517306919fa3d9655589ebc59288218ef2e808e4a52fe2216efd0a129ef08896d65098392d0eda5bf12927b299649ba4ae7b09591f69b561580e60a31ff794b671215a93c34f7c39cede653"}, @NL80211_BAND_60GHZ={0xc4, 0x2, "25feb9683f73e87f17b450c752044c25715a94e60bf9c6408542193fdf7b1dcf38907816fbc4333abaea3ea42fb45c844e9066148d052117617ecef3b62e52f0b8a53e9853ca14436fc823bad79d9a8b28b14f148311d100726645761877a2b742ce19fba1474c9eedf0c315bce480a8b1fde7e791d84b0e535e3fd3f6b3a111d31df7b2c29c1fab76acc72693cf2bec690d99fd5d1c33754760c09605fc86a112ba7aed7a88ccbb968fcf57e632022aa93ae289f14b022ec024781ffe44c49e"}, @NL80211_BAND_6GHZ={0xfd, 0x3, "bd117689dd1ffb3a5f35be3f9383a7bcd95f0c6708ba4287157680fa577e5dcda69214a9a925fd43e0c1a5fd799e4a714e1250f8e7f1af1308e84f12141c05da01a0ceb7151150e3ba65c67f1c163661e194f844f798815718ef828a539558bc26b83eb1940e5b8230c68f98d50aba27fdbf4759eb003b6ba6efca964e92258d8f346c61975687afc7e0364717d6d1e5e771b17acc1bef65b0e63cd00f1c5126ab2f62a8a094ad9975e90d24cc1b57c52e393707a32ab7b8edf0d06f166d955943ca14fb8df88db7341456fa1d1d66e980435886f8606cadf6dbea8145b72759f7d576a67ff429ad51912c76211a6b6c01d4b92a79545e60ea"}, @NL80211_BAND_6GHZ={0xd9, 0x3, "6e70960ea9900a9236dda56b018d7505671d159a5dc2a1c96f83262812d4fb89a1720b1843be442531c2c3aeaecfa7380257099e5cd07f208c665a58d4632306b42d93a49747680d642b3851690d52b35a339f5d27df98293f123bf411d11b384d50b2362233ff21efbc2173155b413b17ceb8336847ddc9a569e15b218f7161cfa8e3c97859654ca37dbc9907ca4555c17b768775e4b744d26fecdfefaf5749b964ff2602421f1f3b8a2140d0b61a15176630727ce87f10ca69ae79863ac7df8a00e82475acd3de133d3c813783a473b671a449e3"}, @NL80211_BAND_2GHZ={0xf1, 0x0, "ba949271e87a2df00b7b41d0fe06391f8c3995c8c9f859693bbc1c986ccc64935f4571c361b80befc47d3f3639de089c85f8879175217cc4f54d7d86bd3447b0c362b34f11241394c162835571f45ced33c10f3217bc17b96bd8d9c341acd2d47e299c4a2f05bded996db3b6b122b610953b5e546e09e3edb71db745acd20364b6074dd04b716ba9283a47dbd28974d07b879479d812ad5c1a3fdc768736653d1cca93b80fe1aae262dd8d4421a9660fdfd5bfd9e2afe2f8dcb1690979548bcdcead23d01f57614a2d9d87349bff37366bfc06e6b82b4e5d431d9ac377372a0cac94660fd73ccfa5e2068a4302"}, @NL80211_BAND_6GHZ={0x95, 0x3, "f5efdd4947421075e83f840308d2cfc9a93203eadd06e03977f2eec1de34d26b6457d0ebdf6ad8973035aeed75ef9c55e6ef7428bc12dc50ca32e2b572b82b61c98890f242f668a7f7ef27cfd90b9b661cebb9eb91c083450b3ef2489eabe17f193992686b1ab9c2f00367d0466e7879368b0f928e60ebcd0370933efe4ba04308b630d9771713c111169ca9c7af95d933"}, @NL80211_BAND_5GHZ={0x4b, 0x1, "27497b89786e65447d523769860506ebdc104a56b09de34f831e1b4a1dc59fd88302a74afa14ecec71ccba66eb483e335caed08704bee342f8c68e1042878f2419776ea48cdd36"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x41f0}]}, 0x1530}}, 0x8090) 21:25:00 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x3100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4e, r1, 0xc3d8c13066bca68d}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x18, 0x703, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) 21:25:00 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c0100030000dfffffff00170a0000090000000000000000"], 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000430000012abd7000fddbdf2507000000080003000600000008000300030000000800e8449d46000000000200fdffffff20000680080011000104000008000b00008000000c000c000500000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4008005}, 0x4040081) (rerun: 32) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001840)={'wlan0\x00'}) (async) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xc4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100e, 0x43}}}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x0, 0x6}, {0x80, 0x1}, {0x6, 0x4}, {0x0, 0x4}, {0x40, 0x3}, {0x7, 0x1}, {0x20, 0x2}, {0x59, 0x3}, {0x8, 0x5}, {0xc, 0x4}, {0x29, 0x4}, {0x8, 0x5}, {0x4, 0x3}, {0x1, 0x2}, {0x80, 0x2}, {0x20, 0x1}, {0x5, 0x6}, {0x0, 0x6}], "4f846949fe232ca0"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x1}, {0x20}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x5}, {0x4, 0x1}, {0x81, 0xe}, {0xa1, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x3f, 0x4}, {0x1f, 0xfd}], "f506bc137bbd141a"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3f}, {0x6, 0x5}, {0xfd, 0x6}, {0xc8}, {0x6, 0x7}, {0x81, 0x2}], "f8a8e08aef799b21"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x5}, {0xff, 0x6}, {0xfd, 0x7}, {0x7f, 0x5}, {0x40, 0x8}, {0x40, 0x1}, {0x38, 0x5}, {0x40, 0x1}, {0x0, 0x2}, {0x3, 0x4}, {0xd4, 0x20}, {0x40, 0x5}, {0x2}], "672d9ff57bc108f8"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "8e8bbf72e5e43fb3"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8085}, 0x8800) r4 = openat$vcsa(0xffffff9c, &(0x7f0000001880), 0x4500, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000001ac0), 0x82000, 0x0) (async, rerun: 64) write$apparmor_exec(r4, &(0x7f00000018c0)={'stack ', '\x00'}, 0x7) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000001800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000280)={0x1530, r5, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1510, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8d, 0x2, "366ba61e4a09a9745f8c14b1c7ff3da2ae4683081557ec76a2b42a85756021eb2c1d76ee0cb2d5140595482a2d23089691eaca06556706debb9a29af1da8318d5bf9543502b763d3b87e9fffd15d932f48b5696d29692f1aff12adcb0a5ba8b7600041a2862243dbde519b1171a39ce42025e67906b54011defb57bb12a662870c3d90de7c2acfa993"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_60GHZ={0xc4, 0x2, "25feb9683f73e87f17b450c752044c25715a94e60bf9c6408542193fdf7b1dcf38907816fbc4333abaea3ea42fb45c844e9066148d052117617ecef3b62e52f0b8a53e9853ca14436fc823bad79d9a8b28b14f148311d100726645761877a2b742ce19fba1474c9eedf0c315bce480a8b1fde7e791d84b0e535e3fd3f6b3a111d31df7b2c29c1fab76acc72693cf2bec690d99fd5d1c33754760c09605fc86a112ba7aed7a88ccbb968fcf57e632022aa93ae289f14b022ec024781ffe44c49e"}, @NL80211_BAND_6GHZ={0xfd, 0x3, "bd117689dd1ffb3a5f35be3f9383a7bcd95f0c6708ba4287157680fa577e5dcda69214a9a925fd43e0c1a5fd799e4a714e1250f8e7f1af1308e84f12141c05da01a0ceb7151150e3ba65c67f1c163661e194f844f798815718ef828a539558bc26b83eb1940e5b8230c68f98d50aba27fdbf4759eb003b6ba6efca964e92258d8f346c61975687afc7e0364717d6d1e5e771b17acc1bef65b0e63cd00f1c5126ab2f62a8a094ad9975e90d24cc1b57c52e393707a32ab7b8edf0d06f166d955943ca14fb8df88db7341456fa1d1d66e980435886f8606cadf6dbea8145b72759f7d576a67ff429ad51912c76211a6b6c01d4b92a79545e60ea"}, @NL80211_BAND_6GHZ={0xd9, 0x3, "6e70960ea9900a9236dda56b018d7505671d159a5dc2a1c96f83262812d4fb89a1720b1843be442531c2c3aeaecfa7380257099e5cd07f208c665a58d4632306b42d93a49747680d642b3851690d52b35a339f5d27df98293f123bf411d11b384d50b2362233ff21efbc2173155b413b17ceb8336847ddc9a569e15b218f7161cfa8e3c97859654ca37dbc9907ca4555c17b768775e4b744d26fecdfefaf5749b964ff2602421f1f3b8a2140d0b61a15176630727ce87f10ca69ae79863ac7df8a00e82475acd3de133d3c813783a473b671a449e3"}, @NL80211_BAND_2GHZ={0xf1, 0x0, "ba949271e87a2df00b7b41d0fe06391f8c3995c8c9f859693bbc1c986ccc64935f4571c361b80befc47d3f3639de089c85f8879175217cc4f54d7d86bd3447b0c362b34f11241394c162835571f45ced33c10f3217bc17b96bd8d9c341acd2d47e299c4a2f05bded996db3b6b122b610953b5e546e09e3edb71db745acd20364b6074dd04b716ba9283a47dbd28974d07b879479d812ad5c1a3fdc768736653d1cca93b80fe1aae262dd8d4421a9660fdfd5bfd9e2afe2f8dcb1690979548bcdcead23d01f57614a2d9d87349bff37366bfc06e6b82b4e5d431d9ac377372a0cac94660fd73ccfa5e2068a4302"}, @NL80211_BAND_6GHZ={0x95, 0x3, "f5efdd4947421075e83f840308d2cfc9a93203eadd06e03977f2eec1de34d26b6457d0ebdf6ad8973035aeed75ef9c55e6ef7428bc12dc50ca32e2b572b82b61c98890f242f668a7f7ef27cfd90b9b661cebb9eb91c083450b3ef2489eabe17f193992686b1ab9c2f00367d0466e7879368b0f928e60ebcd0370933efe4ba04308b630d9771713c111169ca9c7af95d933"}, @NL80211_BAND_5GHZ={0x4b, 0x1, "27497b89786e65447d523769860506ebdc104a56b09de34f831e1b4a1dc59fd88302a74afa14ecec71ccba66eb483e335caed08704bee342f8c68e1042878f2419776ea48cdd36"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x41f0}]}, 0x1530}}, 0x8090) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x3100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4e, r1, 0xc3d8c13066bca68d}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x18, 0x703, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) 21:25:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x3100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4e, r1, 0xc3d8c13066bca68d}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x18, 0x703, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) 21:25:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x100, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x825}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048002) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x3100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4e, r1, 0xc3d8c13066bca68d}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x18, 0x703, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) socket$nl_route(0x10, 0x3, 0x0) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x3100, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4e, r1, 0xc3d8c13066bca68d}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x18, 0x703, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) (async) 21:25:00 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b0000001800030700000000000000000acd3bebe8efda73000000000000000600000000000070547b886f80400f434a488a5a6e95b8ae27a4c6a84d3f7f6afdf2dc8c7b1e90767d178d7df4919c3e1786a38363201d3ab19c521372"], 0x28}}, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x825}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048002) 21:25:00 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b0000001800030700000000000000000acd3bebe8efda73000000000000000600000000000070547b886f80400f434a488a5a6e95b8ae27a4c6a84d3f7f6afdf2dc8c7b1e90767d178d7df4919c3e1786a38363201d3ab19c521372"], 0x28}}, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x825}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048002) 21:25:00 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b0000001800030700000000000000000acd3bebe8efda73000000000000000600000000000070547b886f80400f434a488a5a6e95b8ae27a4c6a84d3f7f6afdf2dc8c7b1e90767d178d7df4919c3e1786a38363201d3ab19c521372"], 0x28}}, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a000000c3a531b6a300000000000000007cdf47f574ed9b30d2b8547db390c49f86f48d488344b044b1832e78e8926fff2e8efcd4252f53e182927602fdf0c3cb6e6947b60e39d918540f3ccab67a6929102d334113e58a9e91cd221bb20e0ed44707c239d6c225d3dbbe8862ac276a792b2ca4f4ee9c4991ae21201f3be9c82ebd65c3928e9a4ca0d6b4fc008aefb688c036c69a7a08f95a5c06b7bcbdac5e855d1ad250e60ef20b"], 0x1c}}, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x200, r0, 0x80000}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x56}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff801}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a000000c3a531b6a300000000000000007cdf47f574ed9b30d2b8547db390c49f86f48d488344b044b1832e78e8926fff2e8efcd4252f53e182927602fdf0c3cb6e6947b60e39d918540f3ccab67a6929102d334113e58a9e91cd221bb20e0ed44707c239d6c225d3dbbe8862ac276a792b2ca4f4ee9c4991ae21201f3be9c82ebd65c3928e9a4ca0d6b4fc008aefb688c036c69a7a08f95a5c06b7bcbdac5e855d1ad250e60ef20b"], 0x1c}}, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x200, r0, 0x80000}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x56}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff801}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a000000c3a531b6a300000000000000007cdf47f574ed9b30d2b8547db390c49f86f48d488344b044b1832e78e8926fff2e8efcd4252f53e182927602fdf0c3cb6e6947b60e39d918540f3ccab67a6929102d334113e58a9e91cd221bb20e0ed44707c239d6c225d3dbbe8862ac276a792b2ca4f4ee9c4991ae21201f3be9c82ebd65c3928e9a4ca0d6b4fc008aefb688c036c69a7a08f95a5c06b7bcbdac5e855d1ad250e60ef20b"], 0x1c}}, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x200, r0, 0x80000}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x56}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff801}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 21:25:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x8, r0, 0x80000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7b7fdb090d1051a0}, 0x200088c1) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x74, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "de9555091a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 21:25:00 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001c01030700000000000000000a000000fc0000000000000008001900", @ANYRES32=0xee00, @ANYBLOB="5939db75b1423a686af56f6a3d4c86e5d2defc4dc04910ac5a0bba67670bac4d527330356b55f8a7fe9a7046ec0e9707a6020935585f1559e636f31f4ab1b4d1896b76006e86eb2e2ef9ec14eafabb7792d10600000000000000807b98c65b3d78592eea67afc2b75371995d07426395e4ae996cfef4dcd14a8743af2e9ac4a300d7b94f5c6d1b0080"], 0x24}}, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_dellink={0x48, 0x11, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x28a10, 0x44}, [@IFLA_PHYS_PORT_ID={0x15, 0x22, "4b8e60f07fb87d852bf0cbc9b7eea1eba5"}, @IFLA_OPERSTATE={0x5, 0x10, 0xfc}, @IFLA_CARRIER={0x5, 0x21, 0x85}]}, 0x48}}, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_dellink={0x48, 0x11, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x28a10, 0x44}, [@IFLA_PHYS_PORT_ID={0x15, 0x22, "4b8e60f07fb87d852bf0cbc9b7eea1eba5"}, @IFLA_OPERSTATE={0x5, 0x10, 0xfc}, @IFLA_CARRIER={0x5, 0x21, 0x85}]}, 0x48}}, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001c01030700000000000000000a000000fc0000000000000008001900", @ANYRES32=0xee00, @ANYBLOB="5939db75b1423a686af56f6a3d4c86e5d2defc4dc04910ac5a0bba67670bac4d527330356b55f8a7fe9a7046ec0e9707a6020935585f1559e636f31f4ab1b4d1896b76006e86eb2e2ef9ec14eafabb7792d10600000000000000807b98c65b3d78592eea67afc2b75371995d07426395e4ae996cfef4dcd14a8743af2e9ac4a300d7b94f5c6d1b0080"], 0x24}}, 0x0) 21:25:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_dellink={0x48, 0x11, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x28a10, 0x44}, [@IFLA_PHYS_PORT_ID={0x15, 0x22, "4b8e60f07fb87d852bf0cbc9b7eea1eba5"}, @IFLA_OPERSTATE={0x5, 0x10, 0xfc}, @IFLA_CARRIER={0x5, 0x21, 0x85}]}, 0x48}}, 0x0) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001c01030700000000000000000a000000fc0000000000000008001900", @ANYRES32=0xee00, @ANYBLOB="5939db75b1423a686af56f6a3d4c86e5d2defc4dc04910ac5a0bba67670bac4d527330356b55f8a7fe9a7046ec0e9707a6020935585f1559e636f31f4ab1b4d1896b76006e86eb2e2ef9ec14eafabb7792d10600000000000000807b98c65b3d78592eea67afc2b75371995d07426395e4ae996cfef4dcd14a8743af2e9ac4a300d7b94f5c6d1b0080"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001c01030700000000000000000a000000fc0000000000000008001900", @ANYRES32=0xee00, @ANYBLOB="5939db75b1423a686af56f6a3d4c86e5d2defc4dc04910ac5a0bba67670bac4d527330356b55f8a7fe9a7046ec0e9707a6020935585f1559e636f31f4ab1b4d1896b76006e86eb2e2ef9ec14eafabb7792d10600000000000000807b98c65b3d78592eea67afc2b75371995d07426395e4ae996cfef4dcd14a8743af2e9ac4a300d7b94f5c6d1b0080"], 0x24}}, 0x0) (async) 21:25:00 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:25:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = getpid() r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10}, 0x18) 21:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000003a597a47ee775f0d860000000000004a267235b971304207000000000000001bac0875f1cba5fb954c17b177bd25a3ab9443f354518af3967b2f20851c08311ee6dc9c750cc4e5dada4900c41a18f50f237fd06fd00ebcfd9d85a53d54d88ec0631da1eb87235d541dae5a0e2277e468b9a02e9d6a0a5c0217d5c3be90299d08c793a572"], 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$UI_SET_PHYS(r2, 0x4004556c, &(0x7f0000000140)='syz0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xffffffff, 0x1, 0x0, 0x80, r2, 0x6, '\x00', 0x0, r2, 0x2, 0x1, 0x2, 0xe}, 0x48) r4 = socket$inet(0x2, 0x3, 0x7f) r5 = socket$inet(0x2, 0x3, 0x7f) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x20, 0x7, 0x3, 0x1a38, r3, 0x4, '\x00', r6, r1, 0x5, 0x1, 0x2, 0xc}, 0x48) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000003a597a47ee775f0d860000000000004a267235b971304207000000000000001bac0875f1cba5fb954c17b177bd25a3ab9443f354518af3967b2f20851c08311ee6dc9c750cc4e5dada4900c41a18f50f237fd06fd00ebcfd9d85a53d54d88ec0631da1eb87235d541dae5a0e2277e468b9a02e9d6a0a5c0217d5c3be90299d08c793a572"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000003a597a47ee775f0d860000000000004a267235b971304207000000000000001bac0875f1cba5fb954c17b177bd25a3ab9443f354518af3967b2f20851c08311ee6dc9c750cc4e5dada4900c41a18f50f237fd06fd00ebcfd9d85a53d54d88ec0631da1eb87235d541dae5a0e2277e468b9a02e9d6a0a5c0217d5c3be90299d08c793a572"], 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$UI_SET_PHYS(r2, 0x4004556c, &(0x7f0000000140)='syz0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xffffffff, 0x1, 0x0, 0x80, r2, 0x6, '\x00', 0x0, r2, 0x2, 0x1, 0x2, 0xe}, 0x48) socket$inet(0x2, 0x3, 0x7f) (async) r4 = socket$inet(0x2, 0x3, 0x7f) socket$inet(0x2, 0x3, 0x7f) (async) r5 = socket$inet(0x2, 0x3, 0x7f) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x20, 0x7, 0x3, 0x1a38, r3, 0x4, '\x00', r6, r1, 0x5, 0x1, 0x2, 0xc}, 0x48) 21:25:01 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 21:25:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = getpid() r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) getpid() (async) getpid() (async) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10}, 0x18) (async) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000003a597a47ee775f0d860000000000004a267235b971304207000000000000001bac0875f1cba5fb954c17b177bd25a3ab9443f354518af3967b2f20851c08311ee6dc9c750cc4e5dada4900c41a18f50f237fd06fd00ebcfd9d85a53d54d88ec0631da1eb87235d541dae5a0e2277e468b9a02e9d6a0a5c0217d5c3be90299d08c793a572"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000003a597a47ee775f0d860000000000004a267235b971304207000000000000001bac0875f1cba5fb954c17b177bd25a3ab9443f354518af3967b2f20851c08311ee6dc9c750cc4e5dada4900c41a18f50f237fd06fd00ebcfd9d85a53d54d88ec0631da1eb87235d541dae5a0e2277e468b9a02e9d6a0a5c0217d5c3be90299d08c793a572"], 0x1c}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$UI_SET_PHYS(r2, 0x4004556c, &(0x7f0000000140)='syz0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xffffffff, 0x1, 0x0, 0x80, r2, 0x6, '\x00', 0x0, r2, 0x2, 0x1, 0x2, 0xe}, 0x48) r4 = socket$inet(0x2, 0x3, 0x7f) r5 = socket$inet(0x2, 0x3, 0x7f) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x20, 0x7, 0x3, 0x1a38, r3, 0x4, '\x00', r6, r1, 0x5, 0x1, 0x2, 0xc}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x20, 0x7, 0x3, 0x1a38, r3, 0x4, '\x00', r6, r1, 0x5, 0x1, 0x2, 0xc}, 0x48) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c009cda1c01030700000000bb91360d1bb7b900004ca309730b00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:25:01 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c009cda1c01030700000000bb91360d1bb7b900004ca309730b00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:25:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r3 = getpid() (async) r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async, rerun: 64) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10}, 0x18) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c009cda1c01030700000000bb91360d1bb7b900004ca309730b00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:25:01 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 21:25:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000a00a772b37fbe08c6d8000000e9ff0010000000080006000000000014ea0400fe8000000000000000000000000000aa"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7ea4f62dc6"}]}, 0x64}, 0x1, 0x0, 0x0, 0x8044851}, 0xc804) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = getpid() r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x2, 0x15}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x801) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xab8, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa7}]}]}, @NL80211_ATTR_TID_CONFIG={0x9d4, 0x11d, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x60, 0x12, 0x1b, 0x60, 0x36, 0x16, 0x1b, 0x61, 0x9, 0x60, 0x24, 0xb, 0xa, 0x60, 0x5, 0x36, 0x6c, 0x48]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x70, 0x18, 0x6c, 0x1b, 0x24, 0x7, 0x36, 0x9, 0x6c, 0x3, 0x36, 0x4d, 0x1b, 0x6, 0x9, 0xb, 0x5, 0x5, 0x48, 0x2, 0x12, 0x33, 0x6, 0x1, 0x16, 0x79, 0x558942ed7ec0e9cc, 0x18, 0xc, 0xb9f6eb470b4ce313]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0x9, 0x0, 0x5, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x8}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x3, 0x2}, {0x6, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77d, 0x5, 0x4, 0xadf, 0xb4b9, 0xb2, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x2, 0x0, 0x2, 0x2, 0x3d, 0x4, 0x3, 0x6c, 0x12, 0x18, 0x7447e980b5e45933, 0xc, 0xc, 0x3, 0x36, 0x0, 0xc, 0x1b, 0x5, 0x1b, 0x1, 0x9, 0x1, 0x60, 0x5, 0x16, 0x30, 0x24, 0x6, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x6, 0x60, 0x18, 0x12, 0x60, 0xc, 0x7f, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa891, 0x6, 0x3, 0x0, 0x8c, 0x4, 0x100]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x6, 0xb061, 0x8, 0x4, 0x4, 0x3]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x237, 0x8000, 0x0, 0x8000, 0x4, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x5}, {0x6, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x1}, {0x5, 0x9}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x4}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x6}, {0x0, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdae, 0x5, 0x8000, 0x1, 0x7, 0x0, 0x2, 0x1]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x3c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x390, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf801, 0x6, 0x6, 0xfc00, 0x658, 0x6, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8c, 0xfff, 0x515f, 0x8, 0x800, 0x8001, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x9}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x6, 0x9}, {}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x7}, {0x4, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x5}, {}, {0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x58d3, 0x401, 0x825, 0x20, 0x40, 0x5, 0xf4d5]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x4, 0x3, 0x9, 0x8, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x3, 0x9, 0x7, 0x5, 0x81, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf1b, 0x6, 0xfffa, 0x81, 0x80, 0x5, 0x175, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x9, 0x2, 0xff, 0x0, 0x40, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x1b, 0x36, 0x30, 0x6, 0x2, 0x18, 0x2, 0xc, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x48, 0x1b, 0x1, 0x6c, 0x36, 0x4, 0xc, 0x16, 0x30, 0xc, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7, 0x7, 0x1, 0x4, 0x3, 0x7, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x101, 0x1, 0x9, 0x8, 0x8001, 0xa6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x158, 0xfff, 0x2, 0x9, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0x48, 0x18]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x3, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0xa}, {0x4, 0x5}, {0x3}, {0x1, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x6}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x9}, {}, {0x5, 0x7}, {0x6, 0x7}, {0x0, 0x6}, {0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {}, {0x5, 0x3}, {0x2, 0x6}, {0x5}, {0x6, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdfdf, 0x2, 0xfff8, 0x9, 0x40, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x9, 0x8, 0x7, 0x4, 0x7, 0x8000]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffd1, 0x8b6, 0x7, 0x6c0, 0x4, 0x0, 0x0, 0x8dbb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfff, 0x1f, 0x1, 0x7, 0x2, 0x8, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x48, 0x24, 0x12, 0x12, 0x2, 0x18, 0x9, 0x3, 0x36acf92a696841bf, 0x24, 0x24, 0x4, 0xc, 0x2, 0x6c, 0x30, 0x0, 0x3, 0x6, 0x60, 0x6, 0x16, 0x0, 0x3, 0x3, 0x48, 0x9, 0x12, 0x9, 0x60, 0x16]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x2}, {0x3, 0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x4}, {0x5}, {0x7, 0x8}, {0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6}, {0x3, 0x6}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x360, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x2, 0x6c, 0x1b, 0x60, 0x0, 0x1, 0x18, 0x9, 0x6, 0x3a, 0x48, 0x48, 0x9, 0x18, 0x17, 0x60, 0x9, 0x24, 0x60, 0x2, 0x48, 0x3, 0x5, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfff, 0x2, 0x4, 0x1f, 0x62, 0x19, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x48, 0xc, 0x48, 0x1, 0x30, 0xc, 0x1b, 0x24, 0x1, 0x30, 0xc, 0x25, 0xb, 0xb, 0x0, 0x4, 0xc, 0x2, 0x5, 0x6, 0x14, 0x18, 0x6, 0x5, 0x1b, 0x58, 0x3, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x6, 0x4, 0x2, 0x1, 0xff7f, 0x7]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xbb4605b0019266a}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0x4, 0xf2e, 0x0, 0xffff, 0x2, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xd20, 0x400, 0x200, 0x7f, 0xffe3, 0x6]}}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x5, 0x9, 0x9, 0x3, 0x3f, 0x83, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35f, 0x1, 0x8, 0x7, 0x1, 0x1f, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x2}, {0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x3}, {0x2, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x6c, 0x36, 0x1, 0x30, 0x6c, 0x6, 0x4, 0x1, 0x2, 0x3, 0x6c, 0x36, 0x1, 0x36, 0x9, 0x6, 0x24, 0x48, 0x1b, 0x6c, 0x6, 0x2, 0x1b, 0x24, 0x30, 0x1, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x4}, {0x6, 0x3}, {0x2, 0x3}, {0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x1}, {0x2, 0xa}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0xa}, {}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x1}, {}, {0x2, 0x5}, {0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x5}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x60, 0x1, 0x3, 0x1, 0x3, 0x1b, 0x1b, 0x0, 0x12, 0x9, 0x9, 0x18, 0x16, 0x12, 0x0, 0x30, 0x36, 0x12, 0x16]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x6}, {0x4, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x5}, {}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x2}, {}, {0x6, 0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x5, 0x18, 0x32, 0x12, 0x6c, 0x9, 0x18, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc02b, 0x5, 0x8, 0x3, 0x6, 0x80, 0x5]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x6, 0x0, 0x3ff, 0x81, 0x1, 0x8001]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x5}, {0x3}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x5, 0x5}, {}, {0x4, 0x8}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x9}, {0x7, 0x1}, {0x4, 0x2}, {0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x455, 0x1000, 0x5, 0x6, 0x7, 0x1, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x7}, {0x1, 0x8}, {0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {0x3}, {0x1}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x8b, 0x94, 0x3, 0x0, 0x6, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a0d8f25}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d0000001c010307000000506b0000000a00000000000000790d0000"], 0x1c}}, 0x0) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xab8, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa7}]}]}, @NL80211_ATTR_TID_CONFIG={0x9d4, 0x11d, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x60, 0x12, 0x1b, 0x60, 0x36, 0x16, 0x1b, 0x61, 0x9, 0x60, 0x24, 0xb, 0xa, 0x60, 0x5, 0x36, 0x6c, 0x48]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x70, 0x18, 0x6c, 0x1b, 0x24, 0x7, 0x36, 0x9, 0x6c, 0x3, 0x36, 0x4d, 0x1b, 0x6, 0x9, 0xb, 0x5, 0x5, 0x48, 0x2, 0x12, 0x33, 0x6, 0x1, 0x16, 0x79, 0x558942ed7ec0e9cc, 0x18, 0xc, 0xb9f6eb470b4ce313]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0x9, 0x0, 0x5, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x8}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x3, 0x2}, {0x6, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77d, 0x5, 0x4, 0xadf, 0xb4b9, 0xb2, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x2, 0x0, 0x2, 0x2, 0x3d, 0x4, 0x3, 0x6c, 0x12, 0x18, 0x7447e980b5e45933, 0xc, 0xc, 0x3, 0x36, 0x0, 0xc, 0x1b, 0x5, 0x1b, 0x1, 0x9, 0x1, 0x60, 0x5, 0x16, 0x30, 0x24, 0x6, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x6, 0x60, 0x18, 0x12, 0x60, 0xc, 0x7f, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa891, 0x6, 0x3, 0x0, 0x8c, 0x4, 0x100]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x6, 0xb061, 0x8, 0x4, 0x4, 0x3]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x237, 0x8000, 0x0, 0x8000, 0x4, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x5}, {0x6, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x1}, {0x5, 0x9}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x4}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x6}, {0x0, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdae, 0x5, 0x8000, 0x1, 0x7, 0x0, 0x2, 0x1]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x3c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x390, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf801, 0x6, 0x6, 0xfc00, 0x658, 0x6, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8c, 0xfff, 0x515f, 0x8, 0x800, 0x8001, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x9}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x6, 0x9}, {}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x7}, {0x4, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x5}, {}, {0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x58d3, 0x401, 0x825, 0x20, 0x40, 0x5, 0xf4d5]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x4, 0x3, 0x9, 0x8, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x3, 0x9, 0x7, 0x5, 0x81, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf1b, 0x6, 0xfffa, 0x81, 0x80, 0x5, 0x175, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x9, 0x2, 0xff, 0x0, 0x40, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x1b, 0x36, 0x30, 0x6, 0x2, 0x18, 0x2, 0xc, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x48, 0x1b, 0x1, 0x6c, 0x36, 0x4, 0xc, 0x16, 0x30, 0xc, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7, 0x7, 0x1, 0x4, 0x3, 0x7, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x101, 0x1, 0x9, 0x8, 0x8001, 0xa6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x158, 0xfff, 0x2, 0x9, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0x48, 0x18]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x3, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0xa}, {0x4, 0x5}, {0x3}, {0x1, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x6}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x9}, {}, {0x5, 0x7}, {0x6, 0x7}, {0x0, 0x6}, {0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {}, {0x5, 0x3}, {0x2, 0x6}, {0x5}, {0x6, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdfdf, 0x2, 0xfff8, 0x9, 0x40, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x9, 0x8, 0x7, 0x4, 0x7, 0x8000]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffd1, 0x8b6, 0x7, 0x6c0, 0x4, 0x0, 0x0, 0x8dbb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfff, 0x1f, 0x1, 0x7, 0x2, 0x8, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x48, 0x24, 0x12, 0x12, 0x2, 0x18, 0x9, 0x3, 0x36acf92a696841bf, 0x24, 0x24, 0x4, 0xc, 0x2, 0x6c, 0x30, 0x0, 0x3, 0x6, 0x60, 0x6, 0x16, 0x0, 0x3, 0x3, 0x48, 0x9, 0x12, 0x9, 0x60, 0x16]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x2}, {0x3, 0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x4}, {0x5}, {0x7, 0x8}, {0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6}, {0x3, 0x6}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x360, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x2, 0x6c, 0x1b, 0x60, 0x0, 0x1, 0x18, 0x9, 0x6, 0x3a, 0x48, 0x48, 0x9, 0x18, 0x17, 0x60, 0x9, 0x24, 0x60, 0x2, 0x48, 0x3, 0x5, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfff, 0x2, 0x4, 0x1f, 0x62, 0x19, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x48, 0xc, 0x48, 0x1, 0x30, 0xc, 0x1b, 0x24, 0x1, 0x30, 0xc, 0x25, 0xb, 0xb, 0x0, 0x4, 0xc, 0x2, 0x5, 0x6, 0x14, 0x18, 0x6, 0x5, 0x1b, 0x58, 0x3, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x6, 0x4, 0x2, 0x1, 0xff7f, 0x7]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xbb4605b0019266a}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0x4, 0xf2e, 0x0, 0xffff, 0x2, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xd20, 0x400, 0x200, 0x7f, 0xffe3, 0x6]}}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x5, 0x9, 0x9, 0x3, 0x3f, 0x83, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35f, 0x1, 0x8, 0x7, 0x1, 0x1f, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x2}, {0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x3}, {0x2, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x6c, 0x36, 0x1, 0x30, 0x6c, 0x6, 0x4, 0x1, 0x2, 0x3, 0x6c, 0x36, 0x1, 0x36, 0x9, 0x6, 0x24, 0x48, 0x1b, 0x6c, 0x6, 0x2, 0x1b, 0x24, 0x30, 0x1, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x4}, {0x6, 0x3}, {0x2, 0x3}, {0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x1}, {0x2, 0xa}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0xa}, {}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x1}, {}, {0x2, 0x5}, {0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x5}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x60, 0x1, 0x3, 0x1, 0x3, 0x1b, 0x1b, 0x0, 0x12, 0x9, 0x9, 0x18, 0x16, 0x12, 0x0, 0x30, 0x36, 0x12, 0x16]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x6}, {0x4, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x5}, {}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x2}, {}, {0x6, 0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x5, 0x18, 0x32, 0x12, 0x6c, 0x9, 0x18, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc02b, 0x5, 0x8, 0x3, 0x6, 0x80, 0x5]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x6, 0x0, 0x3ff, 0x81, 0x1, 0x8001]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x5}, {0x3}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x5, 0x5}, {}, {0x4, 0x8}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x9}, {0x7, 0x1}, {0x4, 0x2}, {0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x455, 0x1000, 0x5, 0x6, 0x7, 0x1, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x7}, {0x1, 0x8}, {0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {0x3}, {0x1}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x8b, 0x94, 0x3, 0x0, 0x6, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a0d8f25}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d0000001c010307000000506b0000000a00000000000000790d0000"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xab8, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa7}]}]}, @NL80211_ATTR_TID_CONFIG={0x9d4, 0x11d, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x60, 0x12, 0x1b, 0x60, 0x36, 0x16, 0x1b, 0x61, 0x9, 0x60, 0x24, 0xb, 0xa, 0x60, 0x5, 0x36, 0x6c, 0x48]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x70, 0x18, 0x6c, 0x1b, 0x24, 0x7, 0x36, 0x9, 0x6c, 0x3, 0x36, 0x4d, 0x1b, 0x6, 0x9, 0xb, 0x5, 0x5, 0x48, 0x2, 0x12, 0x33, 0x6, 0x1, 0x16, 0x79, 0x558942ed7ec0e9cc, 0x18, 0xc, 0xb9f6eb470b4ce313]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0x9, 0x0, 0x5, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x8}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x3, 0x2}, {0x6, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77d, 0x5, 0x4, 0xadf, 0xb4b9, 0xb2, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x2, 0x0, 0x2, 0x2, 0x3d, 0x4, 0x3, 0x6c, 0x12, 0x18, 0x7447e980b5e45933, 0xc, 0xc, 0x3, 0x36, 0x0, 0xc, 0x1b, 0x5, 0x1b, 0x1, 0x9, 0x1, 0x60, 0x5, 0x16, 0x30, 0x24, 0x6, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x6, 0x60, 0x18, 0x12, 0x60, 0xc, 0x7f, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa891, 0x6, 0x3, 0x0, 0x8c, 0x4, 0x100]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x6, 0xb061, 0x8, 0x4, 0x4, 0x3]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x237, 0x8000, 0x0, 0x8000, 0x4, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x5}, {0x6, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x1}, {0x5, 0x9}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x4}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x6}, {0x0, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdae, 0x5, 0x8000, 0x1, 0x7, 0x0, 0x2, 0x1]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x3c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x390, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf801, 0x6, 0x6, 0xfc00, 0x658, 0x6, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8c, 0xfff, 0x515f, 0x8, 0x800, 0x8001, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x9}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x6, 0x9}, {}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x7}, {0x4, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x5}, {}, {0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x58d3, 0x401, 0x825, 0x20, 0x40, 0x5, 0xf4d5]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x4, 0x3, 0x9, 0x8, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x3, 0x9, 0x7, 0x5, 0x81, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf1b, 0x6, 0xfffa, 0x81, 0x80, 0x5, 0x175, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x9, 0x2, 0xff, 0x0, 0x40, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x1b, 0x36, 0x30, 0x6, 0x2, 0x18, 0x2, 0xc, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x48, 0x1b, 0x1, 0x6c, 0x36, 0x4, 0xc, 0x16, 0x30, 0xc, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7, 0x7, 0x1, 0x4, 0x3, 0x7, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x101, 0x1, 0x9, 0x8, 0x8001, 0xa6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x158, 0xfff, 0x2, 0x9, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0x48, 0x18]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x3, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0xa}, {0x4, 0x5}, {0x3}, {0x1, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x6}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x9}, {}, {0x5, 0x7}, {0x6, 0x7}, {0x0, 0x6}, {0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {}, {0x5, 0x3}, {0x2, 0x6}, {0x5}, {0x6, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdfdf, 0x2, 0xfff8, 0x9, 0x40, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x9, 0x8, 0x7, 0x4, 0x7, 0x8000]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffd1, 0x8b6, 0x7, 0x6c0, 0x4, 0x0, 0x0, 0x8dbb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfff, 0x1f, 0x1, 0x7, 0x2, 0x8, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x48, 0x24, 0x12, 0x12, 0x2, 0x18, 0x9, 0x3, 0x36acf92a696841bf, 0x24, 0x24, 0x4, 0xc, 0x2, 0x6c, 0x30, 0x0, 0x3, 0x6, 0x60, 0x6, 0x16, 0x0, 0x3, 0x3, 0x48, 0x9, 0x12, 0x9, 0x60, 0x16]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x2}, {0x3, 0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x4}, {0x5}, {0x7, 0x8}, {0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6}, {0x3, 0x6}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x360, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x2, 0x6c, 0x1b, 0x60, 0x0, 0x1, 0x18, 0x9, 0x6, 0x3a, 0x48, 0x48, 0x9, 0x18, 0x17, 0x60, 0x9, 0x24, 0x60, 0x2, 0x48, 0x3, 0x5, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfff, 0x2, 0x4, 0x1f, 0x62, 0x19, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x48, 0xc, 0x48, 0x1, 0x30, 0xc, 0x1b, 0x24, 0x1, 0x30, 0xc, 0x25, 0xb, 0xb, 0x0, 0x4, 0xc, 0x2, 0x5, 0x6, 0x14, 0x18, 0x6, 0x5, 0x1b, 0x58, 0x3, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x6, 0x4, 0x2, 0x1, 0xff7f, 0x7]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xbb4605b0019266a}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0x4, 0xf2e, 0x0, 0xffff, 0x2, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xd20, 0x400, 0x200, 0x7f, 0xffe3, 0x6]}}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x5, 0x9, 0x9, 0x3, 0x3f, 0x83, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35f, 0x1, 0x8, 0x7, 0x1, 0x1f, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x2}, {0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x3}, {0x2, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x6c, 0x36, 0x1, 0x30, 0x6c, 0x6, 0x4, 0x1, 0x2, 0x3, 0x6c, 0x36, 0x1, 0x36, 0x9, 0x6, 0x24, 0x48, 0x1b, 0x6c, 0x6, 0x2, 0x1b, 0x24, 0x30, 0x1, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x4}, {0x6, 0x3}, {0x2, 0x3}, {0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x1}, {0x2, 0xa}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0xa}, {}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x1}, {}, {0x2, 0x5}, {0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x5}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x60, 0x1, 0x3, 0x1, 0x3, 0x1b, 0x1b, 0x0, 0x12, 0x9, 0x9, 0x18, 0x16, 0x12, 0x0, 0x30, 0x36, 0x12, 0x16]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x6}, {0x4, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x5}, {}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x2}, {}, {0x6, 0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x5, 0x18, 0x32, 0x12, 0x6c, 0x9, 0x18, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc02b, 0x5, 0x8, 0x3, 0x6, 0x80, 0x5]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x6, 0x0, 0x3ff, 0x81, 0x1, 0x8001]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x5}, {0x3}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x5, 0x5}, {}, {0x4, 0x8}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x9}, {0x7, 0x1}, {0x4, 0x2}, {0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x455, 0x1000, 0x5, 0x6, 0x7, 0x1, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x7}, {0x1, 0x8}, {0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {0x3}, {0x1}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x8b, 0x94, 0x3, 0x0, 0x6, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a0d8f25}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d0000001c010307000000506b0000000a00000000000000790d0000"], 0x1c}}, 0x0) (async) 21:25:01 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xab8, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa7}]}]}, @NL80211_ATTR_TID_CONFIG={0x9d4, 0x11d, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x60, 0x12, 0x1b, 0x60, 0x36, 0x16, 0x1b, 0x61, 0x9, 0x60, 0x24, 0xb, 0xa, 0x60, 0x5, 0x36, 0x6c, 0x48]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x70, 0x18, 0x6c, 0x1b, 0x24, 0x7, 0x36, 0x9, 0x6c, 0x3, 0x36, 0x4d, 0x1b, 0x6, 0x9, 0xb, 0x5, 0x5, 0x48, 0x2, 0x12, 0x33, 0x6, 0x1, 0x16, 0x79, 0x558942ed7ec0e9cc, 0x18, 0xc, 0xb9f6eb470b4ce313]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0x9, 0x0, 0x5, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x8}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x3, 0x2}, {0x6, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77d, 0x5, 0x4, 0xadf, 0xb4b9, 0xb2, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x2, 0x0, 0x2, 0x2, 0x3d, 0x4, 0x3, 0x6c, 0x12, 0x18, 0x7447e980b5e45933, 0xc, 0xc, 0x3, 0x36, 0x0, 0xc, 0x1b, 0x5, 0x1b, 0x1, 0x9, 0x1, 0x60, 0x5, 0x16, 0x30, 0x24, 0x6, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x6, 0x60, 0x18, 0x12, 0x60, 0xc, 0x7f, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa891, 0x6, 0x3, 0x0, 0x8c, 0x4, 0x100]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x6, 0xb061, 0x8, 0x4, 0x4, 0x3]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x237, 0x8000, 0x0, 0x8000, 0x4, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x5}, {0x6, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x1}, {0x5, 0x9}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x4}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x6}, {0x0, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdae, 0x5, 0x8000, 0x1, 0x7, 0x0, 0x2, 0x1]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x3c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x390, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf801, 0x6, 0x6, 0xfc00, 0x658, 0x6, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8c, 0xfff, 0x515f, 0x8, 0x800, 0x8001, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x9}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x6, 0x9}, {}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x7}, {0x4, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x5}, {}, {0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x58d3, 0x401, 0x825, 0x20, 0x40, 0x5, 0xf4d5]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x4, 0x3, 0x9, 0x8, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x3, 0x9, 0x7, 0x5, 0x81, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf1b, 0x6, 0xfffa, 0x81, 0x80, 0x5, 0x175, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x9, 0x2, 0xff, 0x0, 0x40, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x1b, 0x36, 0x30, 0x6, 0x2, 0x18, 0x2, 0xc, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x48, 0x1b, 0x1, 0x6c, 0x36, 0x4, 0xc, 0x16, 0x30, 0xc, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7, 0x7, 0x1, 0x4, 0x3, 0x7, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x101, 0x1, 0x9, 0x8, 0x8001, 0xa6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x158, 0xfff, 0x2, 0x9, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0x48, 0x18]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x3, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0xa}, {0x4, 0x5}, {0x3}, {0x1, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x6}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x9}, {}, {0x5, 0x7}, {0x6, 0x7}, {0x0, 0x6}, {0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {}, {0x5, 0x3}, {0x2, 0x6}, {0x5}, {0x6, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdfdf, 0x2, 0xfff8, 0x9, 0x40, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x9, 0x8, 0x7, 0x4, 0x7, 0x8000]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffd1, 0x8b6, 0x7, 0x6c0, 0x4, 0x0, 0x0, 0x8dbb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfff, 0x1f, 0x1, 0x7, 0x2, 0x8, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x48, 0x24, 0x12, 0x12, 0x2, 0x18, 0x9, 0x3, 0x36acf92a696841bf, 0x24, 0x24, 0x4, 0xc, 0x2, 0x6c, 0x30, 0x0, 0x3, 0x6, 0x60, 0x6, 0x16, 0x0, 0x3, 0x3, 0x48, 0x9, 0x12, 0x9, 0x60, 0x16]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x2}, {0x3, 0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x4}, {0x5}, {0x7, 0x8}, {0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6}, {0x3, 0x6}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x360, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x2, 0x6c, 0x1b, 0x60, 0x0, 0x1, 0x18, 0x9, 0x6, 0x3a, 0x48, 0x48, 0x9, 0x18, 0x17, 0x60, 0x9, 0x24, 0x60, 0x2, 0x48, 0x3, 0x5, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfff, 0x2, 0x4, 0x1f, 0x62, 0x19, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x48, 0xc, 0x48, 0x1, 0x30, 0xc, 0x1b, 0x24, 0x1, 0x30, 0xc, 0x25, 0xb, 0xb, 0x0, 0x4, 0xc, 0x2, 0x5, 0x6, 0x14, 0x18, 0x6, 0x5, 0x1b, 0x58, 0x3, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x6, 0x4, 0x2, 0x1, 0xff7f, 0x7]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xbb4605b0019266a}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0x4, 0xf2e, 0x0, 0xffff, 0x2, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xd20, 0x400, 0x200, 0x7f, 0xffe3, 0x6]}}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x5, 0x9, 0x9, 0x3, 0x3f, 0x83, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35f, 0x1, 0x8, 0x7, 0x1, 0x1f, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x2}, {0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x3}, {0x2, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x6c, 0x36, 0x1, 0x30, 0x6c, 0x6, 0x4, 0x1, 0x2, 0x3, 0x6c, 0x36, 0x1, 0x36, 0x9, 0x6, 0x24, 0x48, 0x1b, 0x6c, 0x6, 0x2, 0x1b, 0x24, 0x30, 0x1, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x4}, {0x6, 0x3}, {0x2, 0x3}, {0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x1}, {0x2, 0xa}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0xa}, {}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x1}, {}, {0x2, 0x5}, {0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x5}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x60, 0x1, 0x3, 0x1, 0x3, 0x1b, 0x1b, 0x0, 0x12, 0x9, 0x9, 0x18, 0x16, 0x12, 0x0, 0x30, 0x36, 0x12, 0x16]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x6}, {0x4, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x5}, {}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x2}, {}, {0x6, 0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x5, 0x18, 0x32, 0x12, 0x6c, 0x9, 0x18, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc02b, 0x5, 0x8, 0x3, 0x6, 0x80, 0x5]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x6, 0x0, 0x3ff, 0x81, 0x1, 0x8001]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x5}, {0x3}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x5, 0x5}, {}, {0x4, 0x8}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x9}, {0x7, 0x1}, {0x4, 0x2}, {0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x455, 0x1000, 0x5, 0x6, 0x7, 0x1, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x7}, {0x1, 0x8}, {0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {0x3}, {0x1}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x8b, 0x94, 0x3, 0x0, 0x6, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a0d8f25}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d0000001c010307000000506b0000000a00000000000000790d0000"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xab8, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa7}]}]}, @NL80211_ATTR_TID_CONFIG={0x9d4, 0x11d, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x60, 0x12, 0x1b, 0x60, 0x36, 0x16, 0x1b, 0x61, 0x9, 0x60, 0x24, 0xb, 0xa, 0x60, 0x5, 0x36, 0x6c, 0x48]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x70, 0x18, 0x6c, 0x1b, 0x24, 0x7, 0x36, 0x9, 0x6c, 0x3, 0x36, 0x4d, 0x1b, 0x6, 0x9, 0xb, 0x5, 0x5, 0x48, 0x2, 0x12, 0x33, 0x6, 0x1, 0x16, 0x79, 0x558942ed7ec0e9cc, 0x18, 0xc, 0xb9f6eb470b4ce313]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0x9, 0x0, 0x5, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x8}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x3, 0x2}, {0x6, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77d, 0x5, 0x4, 0xadf, 0xb4b9, 0xb2, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x2, 0x0, 0x2, 0x2, 0x3d, 0x4, 0x3, 0x6c, 0x12, 0x18, 0x7447e980b5e45933, 0xc, 0xc, 0x3, 0x36, 0x0, 0xc, 0x1b, 0x5, 0x1b, 0x1, 0x9, 0x1, 0x60, 0x5, 0x16, 0x30, 0x24, 0x6, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x6, 0x60, 0x18, 0x12, 0x60, 0xc, 0x7f, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa891, 0x6, 0x3, 0x0, 0x8c, 0x4, 0x100]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x6, 0xb061, 0x8, 0x4, 0x4, 0x3]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x237, 0x8000, 0x0, 0x8000, 0x4, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x5}, {0x6, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x1}, {0x5, 0x9}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x4}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x6}, {0x0, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdae, 0x5, 0x8000, 0x1, 0x7, 0x0, 0x2, 0x1]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x3c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x390, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf801, 0x6, 0x6, 0xfc00, 0x658, 0x6, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8c, 0xfff, 0x515f, 0x8, 0x800, 0x8001, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x9}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x6, 0x9}, {}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x7}, {0x4, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x5}, {}, {0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x58d3, 0x401, 0x825, 0x20, 0x40, 0x5, 0xf4d5]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x4, 0x3, 0x9, 0x8, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x3, 0x9, 0x7, 0x5, 0x81, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf1b, 0x6, 0xfffa, 0x81, 0x80, 0x5, 0x175, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x9, 0x2, 0xff, 0x0, 0x40, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x1b, 0x36, 0x30, 0x6, 0x2, 0x18, 0x2, 0xc, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x48, 0x1b, 0x1, 0x6c, 0x36, 0x4, 0xc, 0x16, 0x30, 0xc, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7, 0x7, 0x1, 0x4, 0x3, 0x7, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x101, 0x1, 0x9, 0x8, 0x8001, 0xa6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x158, 0xfff, 0x2, 0x9, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0x48, 0x18]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x3, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0xa}, {0x4, 0x5}, {0x3}, {0x1, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x6}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x9}, {}, {0x5, 0x7}, {0x6, 0x7}, {0x0, 0x6}, {0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {}, {0x5, 0x3}, {0x2, 0x6}, {0x5}, {0x6, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdfdf, 0x2, 0xfff8, 0x9, 0x40, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x9, 0x8, 0x7, 0x4, 0x7, 0x8000]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffd1, 0x8b6, 0x7, 0x6c0, 0x4, 0x0, 0x0, 0x8dbb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfff, 0x1f, 0x1, 0x7, 0x2, 0x8, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x48, 0x24, 0x12, 0x12, 0x2, 0x18, 0x9, 0x3, 0x36acf92a696841bf, 0x24, 0x24, 0x4, 0xc, 0x2, 0x6c, 0x30, 0x0, 0x3, 0x6, 0x60, 0x6, 0x16, 0x0, 0x3, 0x3, 0x48, 0x9, 0x12, 0x9, 0x60, 0x16]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x2}, {0x3, 0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x4}, {0x5}, {0x7, 0x8}, {0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6}, {0x3, 0x6}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x360, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x2, 0x6c, 0x1b, 0x60, 0x0, 0x1, 0x18, 0x9, 0x6, 0x3a, 0x48, 0x48, 0x9, 0x18, 0x17, 0x60, 0x9, 0x24, 0x60, 0x2, 0x48, 0x3, 0x5, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfff, 0x2, 0x4, 0x1f, 0x62, 0x19, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x48, 0xc, 0x48, 0x1, 0x30, 0xc, 0x1b, 0x24, 0x1, 0x30, 0xc, 0x25, 0xb, 0xb, 0x0, 0x4, 0xc, 0x2, 0x5, 0x6, 0x14, 0x18, 0x6, 0x5, 0x1b, 0x58, 0x3, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x6, 0x4, 0x2, 0x1, 0xff7f, 0x7]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xbb4605b0019266a}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0x4, 0xf2e, 0x0, 0xffff, 0x2, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xd20, 0x400, 0x200, 0x7f, 0xffe3, 0x6]}}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x5, 0x9, 0x9, 0x3, 0x3f, 0x83, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35f, 0x1, 0x8, 0x7, 0x1, 0x1f, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x2}, {0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x3}, {0x2, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x6c, 0x36, 0x1, 0x30, 0x6c, 0x6, 0x4, 0x1, 0x2, 0x3, 0x6c, 0x36, 0x1, 0x36, 0x9, 0x6, 0x24, 0x48, 0x1b, 0x6c, 0x6, 0x2, 0x1b, 0x24, 0x30, 0x1, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x4}, {0x6, 0x3}, {0x2, 0x3}, {0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x1}, {0x2, 0xa}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0xa}, {}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x1}, {}, {0x2, 0x5}, {0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x5}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x60, 0x1, 0x3, 0x1, 0x3, 0x1b, 0x1b, 0x0, 0x12, 0x9, 0x9, 0x18, 0x16, 0x12, 0x0, 0x30, 0x36, 0x12, 0x16]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x6}, {0x4, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x5}, {}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x2}, {}, {0x6, 0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x5, 0x18, 0x32, 0x12, 0x6c, 0x9, 0x18, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc02b, 0x5, 0x8, 0x3, 0x6, 0x80, 0x5]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x6, 0x0, 0x3ff, 0x81, 0x1, 0x8001]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x5}, {0x3}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x5, 0x5}, {}, {0x4, 0x8}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x9}, {0x7, 0x1}, {0x4, 0x2}, {0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x455, 0x1000, 0x5, 0x6, 0x7, 0x1, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x7}, {0x1, 0x8}, {0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {0x3}, {0x1}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x8b, 0x94, 0x3, 0x0, 0x6, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a0d8f25}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0xab8}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d0000001c010307000000506b0000000a00000000000000790d0000"], 0x1c}}, 0x0) (async) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) r9 = getpid() sched_rr_get_interval(r9, &(0x7f0000000480)) r10 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r11 = getpid() r12 = getpid() sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r11}, @NETNSA_PID={0x8, 0x2, r12}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r10, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000300)={0x10000, r13}) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r14, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r15}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_PID={0x8, 0x52, r11}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xffffffff, 0x17}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xdbd3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="631e1c4000701c9fffeabcef2ea6b70700000000bcdf00000019000000001f4c91e81487f9378dbd3f97a9877d34e5222adcb97a879039a2064f23dc7a81fd024d70f22829282a8d051c3f1978f6dd41c9762d3b3fb6f6684bb495d3570b"], 0x1c}}, 0x0) 21:25:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000a00a772b37fbe08c6d8000000e9ff0010000000080006000000000014ea0400fe8000000000000000000000000000aa"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7ea4f62dc6"}]}, 0x64}, 0x1, 0x0, 0x0, 0x8044851}, 0xc804) (async) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r7 = getpid() (async) r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x2, 0x15}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x801) 21:25:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) r9 = getpid() sched_rr_get_interval(r9, &(0x7f0000000480)) r10 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r11 = getpid() r12 = getpid() sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r11}, @NETNSA_PID={0x8, 0x2, r12}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r10, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000300)={0x10000, r13}) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r14, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r15}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_PID={0x8, 0x52, r11}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xffffffff, 0x17}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xdbd3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="631e1c4000701c9fffeabcef2ea6b70700000000bcdf00000019000000001f4c91e81487f9378dbd3f97a9877d34e5222adcb97a879039a2064f23dc7a81fd024d70f22829282a8d051c3f1978f6dd41c9762d3b3fb6f6684bb495d3570b"], 0x1c}}, 0x0) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() (async) r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async, rerun: 32) r9 = getpid() (rerun: 32) sched_rr_get_interval(r9, &(0x7f0000000480)) (async) r10 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r11 = getpid() r12 = getpid() sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r11}, @NETNSA_PID={0x8, 0x2, r12}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async, rerun: 64) r13 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r10, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000300)={0x10000, r13}) (async) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r14, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r15}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_PID={0x8, 0x52, r11}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xffffffff, 0x17}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xdbd3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="631e1c4000701c9fffeabcef2ea6b70700000000bcdf00000019000000001f4c91e81487f9378dbd3f97a9877d34e5222adcb97a879039a2064f23dc7a81fd024d70f22829282a8d051c3f1978f6dd41c9762d3b3fb6f6684bb495d3570b"], 0x1c}}, 0x0) 21:25:01 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0xa11, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x24000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x111080, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x40049409, 0x3) 21:25:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000a00a772b37fbe08c6d8000000e9ff0010000000080006000000000014ea0400fe8000000000000000000000000000aa"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000a00a772b37fbe08c6d8000000e9ff0010000000080006000000000014ea0400fe8000000000000000000000000000aa"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7ea4f62dc6"}]}, 0x64}, 0x1, 0x0, 0x0, 0x8044851}, 0xc804) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = getpid() getpid() (async) r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x2, 0x15}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x801) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) r9 = getpid() sched_rr_get_interval(r9, &(0x7f0000000480)) r10 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r11 = getpid() (async) r12 = getpid() sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r11}, @NETNSA_PID={0x8, 0x2, r12}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r13 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r10, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (rerun: 64) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000300)={0x10000, r13}) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r14, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r15}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_PID={0x8, 0x52, r11}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xffffffff, 0x17}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xdbd3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="631e1c4000701c9fffeabcef2ea6b70700000000bcdf00000019000000001f4c91e81487f9378dbd3f97a9877d34e5222adcb97a879039a2064f23dc7a81fd024d70f22829282a8d051c3f1978f6dd41c9762d3b3fb6f6684bb495d3570b"], 0x1c}}, 0x0) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0xc094) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={@remote, 0x0, 0x0, 0x40, 0x0, [{@local}, {}, {}, {}]}}) 21:25:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffff000, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0xc094) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={@remote, 0x0, 0x0, 0x40, 0x0, [{@local}, {}, {}, {}]}}) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0xc094) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={@remote, 0x0, 0x0, 0x40, 0x0, [{@local}, {}, {}, {}]}}) 21:25:01 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x40049409, 0x3) 21:25:01 executing program 1: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dma_heap(0xffffff9c, &(0x7f0000000080), 0x222100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x323, r2, 0x1}) socket$pptp(0x18, 0x1, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:01 executing program 0: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) r1 = getpid() r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@RTM_NEWNSID={0x44, 0x58, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40091) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x70b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x80, 0xfe, 0x0, 0xc8, 0x2}}, 0x1c}}, 0x2400c010) 21:25:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040040}, 0x800) ioctl$KVM_CHECK_EXTENSION(r0, 0x40049409, 0x3) 21:25:01 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x40049409, 0x3) 21:25:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x2, 0xa) 21:25:01 executing program 0: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) (async) r1 = getpid() (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@RTM_NEWNSID={0x44, 0x58, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40091) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x70b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x80, 0xfe, 0x0, 0xc8, 0x2}}, 0x1c}}, 0x2400c010) 21:25:01 executing program 1: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dma_heap(0xffffff9c, &(0x7f0000000080), 0x222100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x323, r2, 0x1}) (async) socket$pptp(0x18, 0x1, 0x2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 1) 21:25:01 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x40049409, 0x3) 21:25:01 executing program 0: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) (async) r1 = getpid() r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@RTM_NEWNSID={0x44, 0x58, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40091) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x70b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x80, 0xfe, 0x0, 0xc8, 0x2}}, 0x1c}}, 0x2400c010) 21:25:01 executing program 1: openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dma_heap(0xffffff9c, &(0x7f0000000080), 0x222100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x323, r2, 0x1}) socket$pptp(0x18, 0x1, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:01 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 2582.619149][ T9867] FAULT_INJECTION: forcing a failure. 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1ce9ff001c010307001e0000004000000400"/28], 0x1c}}, 0x0) [ 2582.619149][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 2582.624827][ T9867] CPU: 2 PID: 9867 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 21:25:01 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) [ 2582.629388][ T9867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2582.633523][ T9867] Call Trace: [ 2582.633531][ T9867] 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1ce9ff001c010307001e0000004000000400"/28], 0x1c}}, 0x0) [ 2582.633535][ T9867] dump_stack_lvl+0x125/0x1b0 [ 2582.633550][ T9867] should_fail_ex+0x496/0x5b0 [ 2582.639489][ T9867] should_failslab+0x9/0x20 [ 2582.639505][ T9867] __kmem_cache_alloc_node+0x2fd/0x350 [ 2582.639521][ T9867] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2582.639537][ T9867] ? lock_acquire+0x464/0x510 [ 2582.639553][ T9867] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2582.639568][ T9867] __kmalloc+0x4f/0x100 [ 2582.639577][ T9867] tomoyo_realpath_from_path+0xb9/0x710 [ 2582.639592][ T9867] ? tomoyo_profile+0x47/0x60 [ 2582.639604][ T9867] tomoyo_path_number_perm+0x243/0x590 [ 2582.639616][ T9867] ? tomoyo_path_number_perm+0x1eb/0x590 [ 2582.639630][ T9867] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2582.639643][ T9867] ? ksys_write+0x12f/0x250 [ 2582.639655][ T9867] ? reacquire_held_locks+0x4b0/0x4b0 [ 2582.639671][ T9867] ? reacquire_held_locks+0x4b0/0x4b0 [ 2582.639684][ T9867] ? bit_wait_timeout+0x160/0x160 [ 2582.639696][ T9867] ? __fget_files+0x279/0x410 [ 2582.639707][ T9867] ? __fget_files+0x279/0x410 [ 2582.639718][ T9867] security_file_ioctl+0x72/0xb0 [ 2582.639730][ T9867] __do_compat_sys_ioctl+0x5d/0x330 [ 2582.639741][ T9867] __do_fast_syscall_32+0x61/0xe0 [ 2582.639751][ T9867] do_fast_syscall_32+0x33/0x70 [ 2582.639761][ T9867] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2582.639773][ T9867] RIP: 0023:0xf7f91579 [ 2582.639782][ T9867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2582.639792][ T9867] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2582.639802][ T9867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2582.639808][ T9867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2582.639814][ T9867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2582.639820][ T9867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2582.639826][ T9867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2582.639836][ T9867] [ 2582.643867][ T9867] ERROR: Out of memory at tomoyo_realpath_from_path. 21:25:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 2) 21:25:01 executing program 3: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1ce9ff001c010307001e0000004000000400"/28], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1ce9ff001c010307001e0000004000000400"/28], 0x1c}}, 0x0) (async) 21:25:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800030700000000001c85ad91850000000a0000000000000000000000080006000000000004000200"], 0x28}}, 0x0) 21:25:01 executing program 3: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x70bd2c, 0x1ff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x8840}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x3f4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x111, 0x1}}, 0x20) 21:25:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800030700000000001c85ad91850000000a0000000000000000000000080006000000000004000200"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800030700000000001c85ad91850000000a0000000000000000000000080006000000000004000200"], 0x28}}, 0x0) (async) 21:25:01 executing program 3: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) [ 2582.852521][ T9896] FAULT_INJECTION: forcing a failure. [ 2582.852521][ T9896] name failslab, interval 1, probability 0, space 0, times 0 [ 2582.857532][ T9896] CPU: 1 PID: 9896 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2582.861691][ T9896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2582.865241][ T9896] Call Trace: [ 2582.866440][ T9896] [ 2582.867506][ T9896] dump_stack_lvl+0x125/0x1b0 [ 2582.869233][ T9896] should_fail_ex+0x496/0x5b0 [ 2582.870935][ T9896] should_failslab+0x9/0x20 [ 2582.872587][ T9896] __kmem_cache_alloc_node+0x2fd/0x350 [ 2582.874521][ T9896] ? tomoyo_encode2+0x100/0x3d0 [ 2582.876278][ T9896] ? tomoyo_encode2+0x100/0x3d0 [ 2582.878047][ T9896] __kmalloc+0x4f/0x100 [ 2582.879536][ T9896] tomoyo_encode2+0x100/0x3d0 [ 2582.881226][ T9896] ? rcu_is_watching+0x12/0xb0 [ 2582.882945][ T9896] tomoyo_encode+0x29/0x50 [ 2582.884554][ T9896] tomoyo_realpath_from_path+0x196/0x710 [ 2582.886559][ T9896] tomoyo_path_number_perm+0x243/0x590 [ 2582.888546][ T9896] ? tomoyo_path_number_perm+0x1eb/0x590 [ 2582.890542][ T9896] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2582.892655][ T9896] ? ksys_write+0x12f/0x250 [ 2582.894304][ T9896] ? reacquire_held_locks+0x4b0/0x4b0 [ 2582.896235][ T9896] ? reacquire_held_locks+0x4b0/0x4b0 [ 2582.898125][ T9896] ? bit_wait_timeout+0x160/0x160 [ 2582.899942][ T9896] ? __fget_files+0x279/0x410 [ 2582.901629][ T9896] ? __fget_files+0x279/0x410 [ 2582.903320][ T9896] security_file_ioctl+0x72/0xb0 [ 2582.905090][ T9896] __do_compat_sys_ioctl+0x5d/0x330 [ 2582.906969][ T9896] __do_fast_syscall_32+0x61/0xe0 [ 2582.908807][ T9896] do_fast_syscall_32+0x33/0x70 [ 2582.910538][ T9896] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2582.912813][ T9896] RIP: 0023:0xf7f91579 [ 2582.914252][ T9896] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2582.921029][ T9896] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2582.923966][ T9896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2582.926743][ T9896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2582.929523][ T9896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2582.932304][ T9896] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2582.935060][ T9896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2582.937870][ T9896] [ 2582.940033][ T9896] ERROR: Out of memory at tomoyo_realpath_from_path. 21:25:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 3) 21:25:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x70bd2c, 0x1ff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x8840}, 0x800) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x3f4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x111, 0x1}}, 0x20) 21:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800030700000000001c85ad91850000000a0000000000000000000000080006000000000004000200"], 0x28}}, 0x0) 21:25:02 executing program 3: r0 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x70bd2c, 0x1ff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x8840}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x3f4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x111, 0x1}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x70bd2c, 0x1ff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x8840}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x3f4, r2, 0x1}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x111, 0x1}}, 0x20) (async) 21:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x20}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x1}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x7b}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x54) 21:25:02 executing program 3: r0 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) [ 2583.126773][ T9918] FAULT_INJECTION: forcing a failure. [ 2583.126773][ T9918] name failslab, interval 1, probability 0, space 0, times 0 21:25:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) [ 2583.132344][ T9918] CPU: 1 PID: 9918 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2583.136966][ T9918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2583.140968][ T9918] Call Trace: [ 2583.142389][ T9918] [ 2583.143717][ T9918] dump_stack_lvl+0x125/0x1b0 [ 2583.145730][ T9918] should_fail_ex+0x496/0x5b0 [ 2583.147805][ T9918] should_failslab+0x9/0x20 [ 2583.149847][ T9918] __kmem_cache_alloc_node+0x2fd/0x350 [ 2583.152061][ T9918] ? __get_vm_area_node+0xe1/0x3d0 [ 2583.153901][ T9918] kmalloc_node_trace+0x22/0xd0 [ 2583.155641][ T9918] __get_vm_area_node+0xe1/0x3d0 [ 2583.157493][ T9918] __vmalloc_node_range+0x27a/0x1540 [ 2583.159496][ T9918] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.161367][ T9918] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.163263][ T9918] ? reacquire_held_locks+0x4b0/0x4b0 [ 2583.165329][ T9918] ? delayed_vfree_work+0x70/0x70 [ 2583.167278][ T9918] ? vsprintf+0x30/0x30 [ 2583.168895][ T9918] ? _raw_spin_unlock+0x28/0x40 [ 2583.170801][ T9918] ? alloc_fd+0x2da/0x6c0 [ 2583.172500][ T9918] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.174411][ T9918] __vmalloc+0x6d/0x90 [ 2583.176042][ T9918] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.177920][ T9918] kvm_dev_ioctl+0x210/0x1c20 [ 2583.179748][ T9918] ? reacquire_held_locks+0x4b0/0x4b0 [ 2583.181850][ T9918] ? bit_wait_timeout+0x160/0x160 [ 2583.183826][ T9918] ? __fget_files+0x279/0x410 [ 2583.185650][ T9918] ? kvm_vcpu_stats_release+0x80/0x80 [ 2583.187738][ T9918] ? __fget_files+0x279/0x410 [ 2583.189592][ T9918] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2583.191515][ T9918] ? kvm_vcpu_stats_release+0x80/0x80 [ 2583.193600][ T9918] __do_compat_sys_ioctl+0x2bf/0x330 [ 2583.195658][ T9918] __do_fast_syscall_32+0x61/0xe0 [ 2583.197618][ T9918] do_fast_syscall_32+0x33/0x70 [ 2583.199516][ T9918] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2583.201948][ T9918] RIP: 0023:0xf7f91579 [ 2583.203493][ T9918] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2583.210849][ T9918] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2583.214082][ T9918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2583.217150][ T9918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2583.220236][ T9918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2583.223276][ T9918] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2583.226297][ T9918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2583.229368][ T9918] [ 2583.231149][ T9918] warn_alloc: 61 callbacks suppressed [ 2583.231199][ T9918] syz-executor.2: vmalloc error: size 39320, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2583.239374][ T9918] CPU: 0 PID: 9918 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2583.243262][ T9918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2583.246931][ T9918] Call Trace: [ 2583.248154][ T9918] [ 2583.249233][ T9918] dump_stack_lvl+0x125/0x1b0 [ 2583.250944][ T9918] warn_alloc+0x24a/0x3a0 [ 2583.252548][ T9918] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 2583.254541][ T9918] ? __kmem_cache_alloc_node+0x2fd/0x350 [ 2583.256562][ T9918] ? __kasan_kmalloc+0x86/0xb0 [ 2583.258304][ T9918] ? __get_vm_area_node+0x281/0x3d0 [ 2583.260186][ T9918] __vmalloc_node_range+0xc13/0x1540 [ 2583.262083][ T9918] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.263938][ T9918] ? reacquire_held_locks+0x4b0/0x4b0 [ 2583.265889][ T9918] ? delayed_vfree_work+0x70/0x70 [ 2583.267733][ T9918] ? vsprintf+0x30/0x30 [ 2583.269302][ T9918] ? _raw_spin_unlock+0x28/0x40 [ 2583.271090][ T9918] ? alloc_fd+0x2da/0x6c0 [ 2583.272722][ T9918] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.274487][ T9918] __vmalloc+0x6d/0x90 [ 2583.275989][ T9918] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.277772][ T9918] kvm_dev_ioctl+0x210/0x1c20 [ 2583.279497][ T9918] ? reacquire_held_locks+0x4b0/0x4b0 [ 2583.281474][ T9918] ? bit_wait_timeout+0x160/0x160 [ 2583.283310][ T9918] ? __fget_files+0x279/0x410 [ 2583.285008][ T9918] ? kvm_vcpu_stats_release+0x80/0x80 [ 2583.286952][ T9918] ? __fget_files+0x279/0x410 [ 2583.288666][ T9918] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2583.290449][ T9918] ? kvm_vcpu_stats_release+0x80/0x80 [ 2583.292402][ T9918] __do_compat_sys_ioctl+0x2bf/0x330 [ 2583.294312][ T9918] __do_fast_syscall_32+0x61/0xe0 [ 2583.296141][ T9918] do_fast_syscall_32+0x33/0x70 [ 2583.297911][ T9918] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2583.300198][ T9918] RIP: 0023:0xf7f91579 [ 2583.301689][ T9918] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2583.308593][ T9918] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2583.311570][ T9918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2583.314550][ T9918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2583.318093][ T9918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2583.321413][ T9918] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2583.324303][ T9918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2583.327149][ T9918] [ 2583.328959][ T9918] Mem-Info: [ 2583.330373][ T9918] active_anon:8290 inactive_anon:11714 isolated_anon:0 [ 2583.330373][ T9918] active_file:2377 inactive_file:3574 isolated_file:0 [ 2583.330373][ T9918] unevictable:768 dirty:21 writeback:0 [ 2583.330373][ T9918] slab_reclaimable:7432 slab_unreclaimable:58787 [ 2583.330373][ T9918] mapped:12647 shmem:1442 pagetables:416 [ 2583.330373][ T9918] sec_pagetables:0 bounce:0 [ 2583.330373][ T9918] kernel_misc_reclaimable:0 [ 2583.330373][ T9918] free:141233 free_pcp:7816 free_cma:0 [ 2583.347180][ T9918] Node 0 active_anon:20708kB inactive_anon:31544kB active_file:208kB inactive_file:5528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:2220kB dirty:48kB writeback:0kB shmem:3412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9280kB pagetables:960kB sec_pagetables:0kB all_unreclaimable? no [ 2583.358417][ T9918] Node 1 active_anon:12408kB inactive_anon:15324kB active_file:9300kB inactive_file:8768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48304kB dirty:36kB writeback:0kB shmem:2372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1364kB pagetables:712kB sec_pagetables:0kB all_unreclaimable? no [ 2583.370478][ T9918] Node 0 DMA free:4656kB boost:2048kB min:2788kB low:2972kB high:3156kB reserved_highatomic:0KB active_anon:3500kB inactive_anon:3852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:636kB local_pcp:224kB free_cma:0kB [ 2583.381255][ T9918] lowmem_reserve[]: 0 419 419 419 419 [ 2583.383216][ T9918] Node 0 DMA32 free:40840kB boost:0kB min:20732kB low:25912kB high:31092kB reserved_highatomic:2048KB active_anon:17192kB inactive_anon:27692kB active_file:208kB inactive_file:5528kB unevictable:1536kB writepending:48kB present:1032192kB managed:433264kB mlocked:0kB bounce:0kB free_pcp:13056kB local_pcp:5344kB free_cma:0kB [ 2583.393848][ T9918] lowmem_reserve[]: 0 0 0 0 0 [ 2583.395549][ T9918] Node 1 DMA32 free:519436kB boost:0kB min:46104kB low:57628kB high:69152kB reserved_highatomic:4096KB active_anon:12408kB inactive_anon:15324kB active_file:9300kB inactive_file:8768kB unevictable:1536kB writepending:36kB present:1048436kB managed:954416kB mlocked:0kB bounce:0kB free_pcp:18112kB local_pcp:4044kB free_cma:0kB [ 2583.406176][ T9918] lowmem_reserve[]: 0 0 0 0 0 [ 2583.407932][ T9918] Node 0 DMA: 36*4kB (UME) 22*8kB (UME) 41*16kB (UME) 21*32kB (UE) 19*64kB (UME) 8*128kB (UME) 3*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4656kB [ 2583.413300][ T9918] Node 0 DMA32: 1990*4kB (UMEH) 872*8kB (UMEH) 515*16kB (UMEH) 162*32kB (UMEH) 81*64kB (UMEH) 51*128kB (UMEH) 3*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40840kB [ 2583.419194][ T9918] Node 1 DMA32: 2273*4kB (UMEH) 2993*8kB (UMH) 2096*16kB (UMH) 1704*32kB (UMEH) 1054*64kB (UMEH) 621*128kB (UMEH) 328*256kB (UMH) 141*512kB (UMH) 45*1024kB (UM) 18*2048kB (UM) 3*4096kB (UM) = 519436kB [ 2583.425995][ T9918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2583.429494][ T9918] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2583.432736][ T9918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2583.436094][ T9918] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2583.439436][ T9918] 14057 total pagecache pages [ 2583.441116][ T9918] 6659 pages in swap cache [ 2583.442715][ T9918] Free swap = 82764kB [ 2583.444263][ T9918] Total swap = 124996kB [ 2583.445946][ T9918] 524155 pages RAM [ 2583.447504][ T9918] 0 pages HighMem/MovableOnly [ 2583.449367][ T9918] 173395 pages reserved [ 2583.451024][ T9918] 0 pages cma reserved 21:25:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 4) 21:25:02 executing program 3: r0 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x20}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x1}]}, 0x28}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x7b}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x54) 21:25:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) 21:25:02 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x20}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x1}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x7b}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x54) 21:25:02 executing program 3: openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) 21:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00042bbdce060000df253b00000004006c00"], 0x18}, 0x1, 0x0, 0x0, 0x44001}, 0x4044005) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700020000001700070a000000009ff6ffffff00003f0000000000000004000880"], 0x28}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x51}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfffa}]}, 0x38}}, 0x4000) [ 2583.583041][ T9941] FAULT_INJECTION: forcing a failure. [ 2583.583041][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 2583.588268][ T9941] CPU: 3 PID: 9941 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2583.588288][ T9941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2583.588297][ T9941] Call Trace: [ 2583.588304][ T9941] [ 2583.599474][ T9941] dump_stack_lvl+0x125/0x1b0 [ 2583.601574][ T9941] should_fail_ex+0x496/0x5b0 [ 2583.603696][ T9941] should_failslab+0x9/0x20 [ 2583.605745][ T9941] kmem_cache_alloc_node+0x389/0x3f0 [ 2583.608091][ T9941] ? alloc_vmap_area+0x1af/0x2060 [ 2583.610366][ T9941] alloc_vmap_area+0x1af/0x2060 [ 2583.612516][ T9941] ? free_vmap_area+0x1c40/0x1c40 [ 2583.614780][ T9941] __get_vm_area_node+0x132/0x3d0 [ 2583.617009][ T9941] __vmalloc_node_range+0x27a/0x1540 [ 2583.619316][ T9941] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.621516][ T9941] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.623697][ T9941] ? reacquire_held_locks+0x4b0/0x4b0 [ 2583.626128][ T9941] ? delayed_vfree_work+0x70/0x70 [ 2583.628497][ T9941] ? vsprintf+0x30/0x30 [ 2583.630401][ T9941] ? _raw_spin_unlock+0x28/0x40 [ 2583.632623][ T9941] ? alloc_fd+0x2da/0x6c0 [ 2583.634461][ T9941] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.636542][ T9941] __vmalloc+0x6d/0x90 [ 2583.638004][ T9941] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.639777][ T9941] kvm_dev_ioctl+0x210/0x1c20 [ 2583.641463][ T9941] ? reacquire_held_locks+0x4b0/0x4b0 [ 2583.643413][ T9941] ? bit_wait_timeout+0x160/0x160 [ 2583.645212][ T9941] ? __fget_files+0x279/0x410 [ 2583.646899][ T9941] ? kvm_vcpu_stats_release+0x80/0x80 [ 2583.648826][ T9941] ? __fget_files+0x279/0x410 [ 2583.650494][ T9941] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2583.652265][ T9941] ? kvm_vcpu_stats_release+0x80/0x80 [ 2583.654208][ T9941] __do_compat_sys_ioctl+0x2bf/0x330 [ 2583.656125][ T9941] __do_fast_syscall_32+0x61/0xe0 [ 2583.657928][ T9941] do_fast_syscall_32+0x33/0x70 [ 2583.659673][ T9941] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2583.661957][ T9941] RIP: 0023:0xf7f91579 [ 2583.663423][ T9941] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2583.670456][ T9941] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2583.673447][ T9941] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2583.676273][ T9941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2583.679078][ T9941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2583.681922][ T9941] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2583.684759][ T9941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2583.687623][ T9941] 21:25:02 executing program 3: openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01030300000000000000add6c1489902ba33248ea1474c000a0000000000000000100000"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 21:25:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 5) 21:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00042bbdce060000df253b00000004006c00"], 0x18}, 0x1, 0x0, 0x0, 0x44001}, 0x4044005) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00042bbdce060000df253b00000004006c00"], 0x18}, 0x1, 0x0, 0x0, 0x44001}, 0x4044005) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700020000001700070a000000009ff6ffffff00003f0000000000000004000880"], 0x28}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x51}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfffa}]}, 0x38}}, 0x4000) 21:25:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01030300000000000000add6c1489902ba33248ea1474c000a0000000000000000100000"], 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 21:25:02 executing program 3: openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00042bbdce060000df253b00000004006c00"], 0x18}, 0x1, 0x0, 0x0, 0x44001}, 0x4044005) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700020000001700070a000000009ff6ffffff00003f0000000000000004000880"], 0x28}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x51}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfffa}]}, 0x38}}, 0x4000) (async) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x51}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfffa}]}, 0x38}}, 0x4000) 21:25:02 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 21:25:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01030300000000000000add6c1489902ba33248ea1474c000a0000000000000000100000"], 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 21:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) [ 2583.800913][ T9962] FAULT_INJECTION: forcing a failure. [ 2583.800913][ T9962] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2583.805648][ T9962] CPU: 2 PID: 9962 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2583.809342][ T9962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2583.812979][ T9962] Call Trace: [ 2583.814163][ T9962] [ 2583.815249][ T9962] dump_stack_lvl+0x125/0x1b0 [ 2583.816965][ T9962] should_fail_ex+0x496/0x5b0 [ 2583.818686][ T9962] __should_fail_alloc_page+0xe7/0x130 [ 2583.820676][ T9962] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2583.822922][ T9962] ? kasan_set_track+0x25/0x30 [ 2583.824682][ T9962] ? __kasan_slab_alloc+0x81/0x90 [ 2583.826515][ T9962] __alloc_pages+0x14e/0x4a0 [ 2583.828207][ T9962] ? do_fast_syscall_32+0x33/0x70 [ 2583.830044][ T9962] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2583.832511][ T9962] alloc_pages+0x1a9/0x270 [ 2583.834104][ T9962] ? kasan_depopulate_vmalloc_pte+0x80/0x80 [ 2583.836248][ T9962] __get_free_pages+0xc/0x40 [ 2583.837929][ T9962] kasan_populate_vmalloc_pte+0x29/0x160 [ 2583.839939][ T9962] ? kasan_depopulate_vmalloc_pte+0x80/0x80 [ 2583.842088][ T9962] __apply_to_page_range+0x5ed/0xdb0 [ 2583.844012][ T9962] ? kasan_depopulate_vmalloc_pte+0x80/0x80 [ 2583.846153][ T9962] ? vm_insert_pages+0xce0/0xce0 [ 2583.847953][ T9962] alloc_vmap_area+0x85f/0x2060 [ 2583.849730][ T9962] ? free_vmap_area+0x1c40/0x1c40 [ 2583.851547][ T9962] __get_vm_area_node+0x132/0x3d0 [ 2583.853465][ T9962] __vmalloc_node_range+0x27a/0x1540 [ 2583.855366][ T9962] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.857146][ T9962] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.858926][ T9962] ? reacquire_held_locks+0x4b0/0x4b0 [ 2583.860870][ T9962] ? delayed_vfree_work+0x70/0x70 [ 2583.862727][ T9962] ? vsprintf+0x30/0x30 [ 2583.864246][ T9962] ? _raw_spin_unlock+0x28/0x40 [ 2583.865997][ T9962] ? alloc_fd+0x2da/0x6c0 [ 2583.867561][ T9962] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.869329][ T9962] __vmalloc+0x6d/0x90 [ 2583.870815][ T9962] ? kvm_dev_ioctl+0x210/0x1c20 [ 2583.872635][ T9962] kvm_dev_ioctl+0x210/0x1c20 [ 2583.874345][ T9962] ? reacquire_held_locks+0x4b0/0x4b0 [ 2583.876277][ T9962] ? bit_wait_timeout+0x160/0x160 [ 2583.878088][ T9962] ? __fget_files+0x279/0x410 [ 2583.879790][ T9962] ? kvm_vcpu_stats_release+0x80/0x80 [ 2583.881735][ T9962] ? __fget_files+0x279/0x410 [ 2583.883466][ T9962] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2583.885257][ T9962] ? kvm_vcpu_stats_release+0x80/0x80 [ 2583.887181][ T9962] __do_compat_sys_ioctl+0x2bf/0x330 [ 2583.889089][ T9962] __do_fast_syscall_32+0x61/0xe0 [ 2583.890891][ T9962] do_fast_syscall_32+0x33/0x70 [ 2583.892752][ T9962] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2583.895067][ T9962] RIP: 0023:0xf7f91579 [ 2583.896525][ T9962] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2583.903360][ T9962] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2583.906368][ T9962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2583.909245][ T9962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2583.912107][ T9962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2583.914979][ T9962] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2583.917835][ T9962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2583.920677][ T9962] 21:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 21:25:02 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 21:25:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 6) 21:25:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x339}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="926624d0b58d"}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40895) 21:25:02 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 21:25:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x339}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="926624d0b58d"}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40895) 21:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) [ 2583.996346][ T9981] FAULT_INJECTION: forcing a failure. [ 2583.996346][ T9981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2584.001144][ T9981] CPU: 2 PID: 9981 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 21:25:02 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) [ 2584.004886][ T9981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2584.008686][ T9981] Call Trace: [ 2584.009900][ T9981] [ 2584.010972][ T9981] dump_stack_lvl+0x125/0x1b0 [ 2584.012703][ T9981] should_fail_ex+0x496/0x5b0 [ 2584.014411][ T9981] __should_fail_alloc_page+0xe7/0x130 [ 2584.016421][ T9981] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2584.018658][ T9981] ? kasan_set_track+0x25/0x30 [ 2584.020415][ T9981] ? __kasan_slab_alloc+0x81/0x90 [ 2584.022208][ T9981] __alloc_pages+0x14e/0x4a0 [ 2584.023884][ T9981] ? do_fast_syscall_32+0x33/0x70 [ 2584.025746][ T9981] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2584.028191][ T9981] alloc_pages+0x1a9/0x270 [ 2584.029814][ T9981] ? kasan_depopulate_vmalloc_pte+0x80/0x80 [ 2584.031974][ T9981] __get_free_pages+0xc/0x40 [ 2584.033667][ T9981] kasan_populate_vmalloc_pte+0x29/0x160 [ 2584.035746][ T9981] ? kasan_depopulate_vmalloc_pte+0x80/0x80 [ 2584.037879][ T9981] __apply_to_page_range+0x5ed/0xdb0 [ 2584.039773][ T9981] ? kasan_depopulate_vmalloc_pte+0x80/0x80 [ 2584.041906][ T9981] ? vm_insert_pages+0xce0/0xce0 [ 2584.043697][ T9981] alloc_vmap_area+0x85f/0x2060 [ 2584.045487][ T9981] ? free_vmap_area+0x1c40/0x1c40 [ 2584.047335][ T9981] __get_vm_area_node+0x132/0x3d0 [ 2584.049172][ T9981] __vmalloc_node_range+0x27a/0x1540 [ 2584.051079][ T9981] ? kvm_dev_ioctl+0x210/0x1c20 [ 2584.052874][ T9981] ? kvm_dev_ioctl+0x210/0x1c20 [ 2584.054643][ T9981] ? reacquire_held_locks+0x4b0/0x4b0 [ 2584.056644][ T9981] ? delayed_vfree_work+0x70/0x70 [ 2584.058469][ T9981] ? vsprintf+0x30/0x30 [ 2584.059964][ T9981] ? _raw_spin_unlock+0x28/0x40 [ 2584.061718][ T9981] ? alloc_fd+0x2da/0x6c0 [ 2584.063324][ T9981] ? kvm_dev_ioctl+0x210/0x1c20 [ 2584.065108][ T9981] __vmalloc+0x6d/0x90 [ 2584.066771][ T9981] ? kvm_dev_ioctl+0x210/0x1c20 [ 2584.069051][ T9981] kvm_dev_ioctl+0x210/0x1c20 [ 2584.071235][ T9981] ? reacquire_held_locks+0x4b0/0x4b0 [ 2584.073828][ T9981] ? bit_wait_timeout+0x160/0x160 [ 2584.075942][ T9981] ? __fget_files+0x279/0x410 [ 2584.077665][ T9981] ? kvm_vcpu_stats_release+0x80/0x80 [ 2584.079616][ T9981] ? __fget_files+0x279/0x410 [ 2584.081618][ T9981] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2584.083872][ T9981] ? kvm_vcpu_stats_release+0x80/0x80 [ 2584.086294][ T9981] __do_compat_sys_ioctl+0x2bf/0x330 [ 2584.088680][ T9981] __do_fast_syscall_32+0x61/0xe0 [ 2584.090996][ T9981] do_fast_syscall_32+0x33/0x70 [ 2584.093252][ T9981] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2584.096187][ T9981] RIP: 0023:0xf7f91579 [ 2584.098073][ T9981] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2584.106584][ T9981] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2584.110261][ T9981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2584.113789][ T9981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2584.117374][ T9981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2584.120939][ T9981] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2584.124567][ T9981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2584.128251][ T9981] 21:25:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 7) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x339}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="926624d0b58d"}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40895) 21:25:03 executing program 1: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x22000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c094}, 0x20008884) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 21:25:03 executing program 1: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c094}, 0x20008884) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) [ 2584.265513][T10006] FAULT_INJECTION: forcing a failure. 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x23c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_FRAME_MATCH={0x55, 0x5b, "3a7ad85159ce1f4c54157cbb463813ba85d02bb3b334f6f7160147944d31e9c00f3f54dcb7411adc21e316c615f23fd78de79c0961e50709ffa8b9bcd343b9951a9dc97d935e3fd55c56d530c9ad0b6422"}, @NL80211_ATTR_FRAME_MATCH={0x4c, 0x5b, "5dc73f5818d8dd31ff002f20fb75e0ee7bb4cce6319a4590412a984b3a6daba51fd6728f4d4147d9c19f36165af4b22c980ef8c0ffd786de9709f8eab7499eb5dc4b4970a1095525"}, @NL80211_ATTR_FRAME_MATCH={0xe9, 0x5b, "089291793086db80fbd8ed431fd55bcb6b94fd23e4ebd2ea53c0d805285058a370cc367844b7df817b2d1ec2b4d095913ae6f4351d301127366df6e5f52f71b4dac1937ae00d696ce6f35a3bf2d9884ec6b9fc57227313f0cccf6201a1f45a8d80fbff37d27bdf53b38576d1aaae4f98f56b1e80a80e4f4cc9ad965bf2f7a5e100c565f7a0de54fb8c4aed0c912b061c187045ac36c2e18604d3adaefd2211747b075c494b853c8dcf46ea2b0be550906588bc66523218c0a5f114162a39261965abd2b5a46082f8771884b7cf30c2ea627dee5004003753b8eaf321bbe931d1588422804c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfd47}, @NL80211_ATTR_FRAME_MATCH={0x81, 0x5b, "12ddf7078299e0ca5bf8d9710ede6c9933ee92f22fc6712a82270b2f9c6fb33603da76e7045f5fa114038cb67f15f045907db9e4a8bab676834280ffb9066f1cfc09a5dd4a9913bdf1a049a8a09ee49053bdd0e18fe9512f0547ea943ede16149ea72a2fb71bf98f97775723a5399564b0dcb3d8004b21c5af80a0a7e2"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x20000008) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0xe8, r7, 0x9, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x0, 0x1, 0x67}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4d10960600b73c1747d1d9894b557daa98b27986f3fa94dc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x5d, 0xe7, "9514eaa5a69f859304b2fc72c2ef38aa78d4aa542e42081b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b3893e05130e67ade3c0714004601a51be70185b6f24b06e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbd7ea954707e373e38d0b1c1353173a88fa8136612f0f03"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'macsec0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c01030700"/28], 0x1c}}, 0x0) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eb7cd9e9a3cbabbf041abce6d4"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "c9db06f9fd"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2004880) [ 2584.265513][T10006] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.271791][T10006] CPU: 3 PID: 10006 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2584.276353][T10006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2584.280854][T10006] Call Trace: [ 2584.282362][T10006] [ 2584.282370][T10006] dump_stack_lvl+0x125/0x1b0 [ 2584.282392][T10006] should_fail_ex+0x496/0x5b0 [ 2584.287112][T10006] should_failslab+0x9/0x20 [ 2584.287137][T10006] __kmem_cache_alloc_node+0x2fd/0x350 [ 2584.287166][T10006] ? __vmalloc_node_range+0x3e9/0x1540 [ 2584.287192][T10006] ? __vmalloc_node_range+0x3e9/0x1540 [ 2584.287216][T10006] __kmalloc_node+0x52/0x110 [ 2584.287234][T10006] __vmalloc_node_range+0x3e9/0x1540 [ 2584.287261][T10006] ? kvm_dev_ioctl+0x210/0x1c20 [ 2584.287281][T10006] ? reacquire_held_locks+0x4b0/0x4b0 [ 2584.303022][T10006] ? delayed_vfree_work+0x70/0x70 [ 2584.303042][T10006] ? vsprintf+0x30/0x30 [ 2584.303057][T10006] ? _raw_spin_unlock+0x28/0x40 [ 2584.308731][T10006] ? alloc_fd+0x2da/0x6c0 [ 2584.310312][T10006] ? kvm_dev_ioctl+0x210/0x1c20 [ 2584.312118][T10006] __vmalloc+0x6d/0x90 21:25:03 executing program 1: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c094}, 0x20008884) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) [ 2584.313633][T10006] ? kvm_dev_ioctl+0x210/0x1c20 [ 2584.313646][T10006] kvm_dev_ioctl+0x210/0x1c20 [ 2584.313658][T10006] ? reacquire_held_locks+0x4b0/0x4b0 [ 2584.313672][T10006] ? bit_wait_timeout+0x160/0x160 [ 2584.313684][T10006] ? __fget_files+0x279/0x410 [ 2584.313693][T10006] ? kvm_vcpu_stats_release+0x80/0x80 [ 2584.313705][T10006] ? __fget_files+0x279/0x410 [ 2584.313715][T10006] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2584.313728][T10006] ? kvm_vcpu_stats_release+0x80/0x80 [ 2584.313739][T10006] __do_compat_sys_ioctl+0x2bf/0x330 [ 2584.313750][T10006] __do_fast_syscall_32+0x61/0xe0 [ 2584.313760][T10006] do_fast_syscall_32+0x33/0x70 [ 2584.313769][T10006] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2584.313782][T10006] RIP: 0023:0xf7f91579 [ 2584.313790][T10006] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2584.313800][T10006] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2584.313810][T10006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2584.313817][T10006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2584.313822][T10006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2584.313828][T10006] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2584.313834][T10006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2584.313843][T10006] 21:25:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 8) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x23c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_FRAME_MATCH={0x55, 0x5b, "3a7ad85159ce1f4c54157cbb463813ba85d02bb3b334f6f7160147944d31e9c00f3f54dcb7411adc21e316c615f23fd78de79c0961e50709ffa8b9bcd343b9951a9dc97d935e3fd55c56d530c9ad0b6422"}, @NL80211_ATTR_FRAME_MATCH={0x4c, 0x5b, "5dc73f5818d8dd31ff002f20fb75e0ee7bb4cce6319a4590412a984b3a6daba51fd6728f4d4147d9c19f36165af4b22c980ef8c0ffd786de9709f8eab7499eb5dc4b4970a1095525"}, @NL80211_ATTR_FRAME_MATCH={0xe9, 0x5b, "089291793086db80fbd8ed431fd55bcb6b94fd23e4ebd2ea53c0d805285058a370cc367844b7df817b2d1ec2b4d095913ae6f4351d301127366df6e5f52f71b4dac1937ae00d696ce6f35a3bf2d9884ec6b9fc57227313f0cccf6201a1f45a8d80fbff37d27bdf53b38576d1aaae4f98f56b1e80a80e4f4cc9ad965bf2f7a5e100c565f7a0de54fb8c4aed0c912b061c187045ac36c2e18604d3adaefd2211747b075c494b853c8dcf46ea2b0be550906588bc66523218c0a5f114162a39261965abd2b5a46082f8771884b7cf30c2ea627dee5004003753b8eaf321bbe931d1588422804c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfd47}, @NL80211_ATTR_FRAME_MATCH={0x81, 0x5b, "12ddf7078299e0ca5bf8d9710ede6c9933ee92f22fc6712a82270b2f9c6fb33603da76e7045f5fa114038cb67f15f045907db9e4a8bab676834280ffb9066f1cfc09a5dd4a9913bdf1a049a8a09ee49053bdd0e18fe9512f0547ea943ede16149ea72a2fb71bf98f97775723a5399564b0dcb3d8004b21c5af80a0a7e2"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x20000008) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0xe8, r7, 0x9, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x0, 0x1, 0x67}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4d10960600b73c1747d1d9894b557daa98b27986f3fa94dc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x5d, 0xe7, "9514eaa5a69f859304b2fc72c2ef38aa78d4aa542e42081b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b3893e05130e67ade3c0714004601a51be70185b6f24b06e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbd7ea954707e373e38d0b1c1353173a88fa8136612f0f03"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'macsec0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c01030700"/28], 0x1c}}, 0x0) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eb7cd9e9a3cbabbf041abce6d4"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "c9db06f9fd"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2004880) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x23c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_FRAME_MATCH={0x55, 0x5b, "3a7ad85159ce1f4c54157cbb463813ba85d02bb3b334f6f7160147944d31e9c00f3f54dcb7411adc21e316c615f23fd78de79c0961e50709ffa8b9bcd343b9951a9dc97d935e3fd55c56d530c9ad0b6422"}, @NL80211_ATTR_FRAME_MATCH={0x4c, 0x5b, "5dc73f5818d8dd31ff002f20fb75e0ee7bb4cce6319a4590412a984b3a6daba51fd6728f4d4147d9c19f36165af4b22c980ef8c0ffd786de9709f8eab7499eb5dc4b4970a1095525"}, @NL80211_ATTR_FRAME_MATCH={0xe9, 0x5b, "089291793086db80fbd8ed431fd55bcb6b94fd23e4ebd2ea53c0d805285058a370cc367844b7df817b2d1ec2b4d095913ae6f4351d301127366df6e5f52f71b4dac1937ae00d696ce6f35a3bf2d9884ec6b9fc57227313f0cccf6201a1f45a8d80fbff37d27bdf53b38576d1aaae4f98f56b1e80a80e4f4cc9ad965bf2f7a5e100c565f7a0de54fb8c4aed0c912b061c187045ac36c2e18604d3adaefd2211747b075c494b853c8dcf46ea2b0be550906588bc66523218c0a5f114162a39261965abd2b5a46082f8771884b7cf30c2ea627dee5004003753b8eaf321bbe931d1588422804c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfd47}, @NL80211_ATTR_FRAME_MATCH={0x81, 0x5b, "12ddf7078299e0ca5bf8d9710ede6c9933ee92f22fc6712a82270b2f9c6fb33603da76e7045f5fa114038cb67f15f045907db9e4a8bab676834280ffb9066f1cfc09a5dd4a9913bdf1a049a8a09ee49053bdd0e18fe9512f0547ea943ede16149ea72a2fb71bf98f97775723a5399564b0dcb3d8004b21c5af80a0a7e2"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x20000008) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0xe8, r7, 0x9, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x0, 0x1, 0x67}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4d10960600b73c1747d1d9894b557daa98b27986f3fa94dc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x5d, 0xe7, "9514eaa5a69f859304b2fc72c2ef38aa78d4aa542e42081b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b3893e05130e67ade3c0714004601a51be70185b6f24b06e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbd7ea954707e373e38d0b1c1353173a88fa8136612f0f03"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'macsec0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c01030700"/28], 0x1c}}, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eb7cd9e9a3cbabbf041abce6d4"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "c9db06f9fd"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2004880) (async) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (fail_nth: 1) 21:25:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd1f5, 0x69}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f8ac811ec5"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010) [ 2584.399131][T10023] FAULT_INJECTION: forcing a failure. [ 2584.399131][T10023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2584.404463][T10023] CPU: 0 PID: 10023 Comm: syz-executor.3 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2584.408200][T10023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2584.411781][T10023] Call Trace: [ 2584.413132][T10023] [ 2584.414216][T10023] dump_stack_lvl+0x125/0x1b0 [ 2584.415930][T10023] should_fail_ex+0x496/0x5b0 [ 2584.417631][T10023] _copy_from_user+0x30/0xf0 [ 2584.419300][T10023] ucma_write+0x136/0x340 [ 2584.420872][T10023] ? ucma_query_addr+0x510/0x510 [ 2584.422683][T10023] ? bpf_lsm_file_permission+0x9/0x10 [ 2584.424599][T10023] ? security_file_permission+0x94/0x100 [ 2584.426615][T10023] vfs_write+0x2a4/0xe40 [ 2584.428179][T10023] ? ucma_query_addr+0x510/0x510 [ 2584.429946][T10023] ? kernel_write+0x6c0/0x6c0 [ 2584.431636][T10023] ? __fget_files+0x279/0x410 [ 2584.433338][T10023] ? __fget_light+0xe6/0x260 [ 2584.435005][T10023] ksys_write+0x1f0/0x250 [ 2584.436567][T10023] ? __ia32_sys_read+0xb0/0xb0 [ 2584.438286][T10023] ? rcu_is_watching+0x12/0xb0 [ 2584.440009][T10023] __do_fast_syscall_32+0x61/0xe0 [ 2584.441819][T10023] do_fast_syscall_32+0x33/0x70 [ 2584.443599][T10023] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2584.445847][T10023] RIP: 0023:0xf7ff2579 [ 2584.447298][T10023] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2584.454143][T10023] RSP: 002b:00000000f7fed5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 2584.457136][T10023] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 2584.460005][T10023] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 2584.463150][T10023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2584.466516][T10023] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2584.469750][T10023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2584.472781][T10023] 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x23c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_FRAME_MATCH={0x55, 0x5b, "3a7ad85159ce1f4c54157cbb463813ba85d02bb3b334f6f7160147944d31e9c00f3f54dcb7411adc21e316c615f23fd78de79c0961e50709ffa8b9bcd343b9951a9dc97d935e3fd55c56d530c9ad0b6422"}, @NL80211_ATTR_FRAME_MATCH={0x4c, 0x5b, "5dc73f5818d8dd31ff002f20fb75e0ee7bb4cce6319a4590412a984b3a6daba51fd6728f4d4147d9c19f36165af4b22c980ef8c0ffd786de9709f8eab7499eb5dc4b4970a1095525"}, @NL80211_ATTR_FRAME_MATCH={0xe9, 0x5b, "089291793086db80fbd8ed431fd55bcb6b94fd23e4ebd2ea53c0d805285058a370cc367844b7df817b2d1ec2b4d095913ae6f4351d301127366df6e5f52f71b4dac1937ae00d696ce6f35a3bf2d9884ec6b9fc57227313f0cccf6201a1f45a8d80fbff37d27bdf53b38576d1aaae4f98f56b1e80a80e4f4cc9ad965bf2f7a5e100c565f7a0de54fb8c4aed0c912b061c187045ac36c2e18604d3adaefd2211747b075c494b853c8dcf46ea2b0be550906588bc66523218c0a5f114162a39261965abd2b5a46082f8771884b7cf30c2ea627dee5004003753b8eaf321bbe931d1588422804c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfd47}, @NL80211_ATTR_FRAME_MATCH={0x81, 0x5b, "12ddf7078299e0ca5bf8d9710ede6c9933ee92f22fc6712a82270b2f9c6fb33603da76e7045f5fa114038cb67f15f045907db9e4a8bab676834280ffb9066f1cfc09a5dd4a9913bdf1a049a8a09ee49053bdd0e18fe9512f0547ea943ede16149ea72a2fb71bf98f97775723a5399564b0dcb3d8004b21c5af80a0a7e2"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x20000008) (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0xe8, r7, 0x9, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x0, 0x1, 0x67}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4d10960600b73c1747d1d9894b557daa98b27986f3fa94dc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x5d, 0xe7, "9514eaa5a69f859304b2fc72c2ef38aa78d4aa542e42081b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b3893e05130e67ade3c0714004601a51be70185b6f24b06e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbd7ea954707e373e38d0b1c1353173a88fa8136612f0f03"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'macsec0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c01030700"/28], 0x1c}}, 0x0) (async) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eb7cd9e9a3cbabbf041abce6d4"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "c9db06f9fd"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2004880) 21:25:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd1f5, 0x69}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f8ac811ec5"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (fail_nth: 2) [ 2584.498481][T10045] FAULT_INJECTION: forcing a failure. [ 2584.498481][T10045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2584.503530][T10045] CPU: 1 PID: 10045 Comm: syz-executor.3 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2584.508339][T10045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0x338, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x43}}}}, [@NL80211_ATTR_TID_CONFIG={0x138, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x80, 0x5, 0x6, 0x5, 0x0, 0x6, 0xe9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7}, {0x3, 0x1}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x2}, {0x3, 0x9}, {0x3}, {0x0, 0xa}, {}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x6}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x3, 0x9}, {0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x5}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x8}, {0x5, 0x5}, {0x5, 0x8}]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x56}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d4, 0x11d, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfc01, 0x3, 0x7fff, 0x2, 0x7ff, 0xfff, 0x1, 0x2c]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x0, 0x8}, {0x7, 0x9}, {0x6}, {0x5, 0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0x2}, {0x4}, {0x3, 0x9}, {}, {0x2, 0x2}, {0x5}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x2}, {0x0, 0xa}, {0x6}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x7}, {0x4, 0x3}, {0x3}, {0x6, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {}, {0x7, 0x5}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0x9}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x60, 0x12, 0x3, 0xc, 0x1, 0x36, 0x0, 0x6, 0x36, 0x24, 0x2, 0x9, 0x1, 0x30, 0xc, 0x0, 0x30, 0x5, 0x5, 0x1b, 0x24, 0xc, 0x9, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x8001, 0x4472, 0x2f, 0x13c, 0x40, 0xff]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x7}, {0x5, 0x5}, {0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x2d, 0x30, 0x16, 0x5, 0xd, 0x24, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x1, 0xfff, 0x81, 0x3, 0x7, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1000, 0x3, 0x21b3, 0x4, 0x9, 0x4dab, 0x5]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x2, 0x12, 0x1b, 0x3, 0xc, 0x1, 0x3, 0x4, 0x12, 0x18, 0x48, 0x5, 0x5, 0x12, 0x12, 0x48, 0x5, 0x0, 0x16, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb6fd, 0x5, 0x80, 0x1, 0x8, 0xffff, 0x3c, 0x5]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x2}, {0x3, 0xa}, {0x6}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x6}, {0x5}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x5}, {0x5, 0xa}, {0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x7}, {0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x6, 0xa}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x5, 0x9, 0x1b, 0x6c, 0x1b, 0x9, 0x1, 0x6c, 0x48, 0x6, 0x0, 0x5f, 0x9, 0x60, 0xb]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d03a96b1f4a436b05b950"}]}, 0x34}}, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = getpid() r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1e0001010000009000000000000000000000000000000000000000000000007f000001000000000000000000000000ac1414bb000000000000000000000000e0000002000000000000000000000000e0000002000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/160]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a0000868d97577f9cfe30000000000000000000"], 0x1c}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r14, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r13, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r13, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffc4, 0x52}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x42}, 0x40040) [ 2584.513011][T10045] Call Trace: [ 2584.514885][T10045] [ 2584.516297][T10045] dump_stack_lvl+0x125/0x1b0 [ 2584.518496][T10045] should_fail_ex+0x496/0x5b0 [ 2584.520710][T10045] _copy_to_user+0x30/0xb0 [ 2584.522832][T10045] simple_read_from_buffer+0xd0/0x150 [ 2584.525037][T10045] proc_fail_nth_read+0x1b0/0x290 [ 2584.526845][T10045] ? proc_sessionid_read+0x290/0x290 [ 2584.528755][T10045] ? security_file_permission+0xdc/0x100 [ 2584.530784][T10045] ? proc_sessionid_read+0x290/0x290 [ 2584.532729][T10045] vfs_read+0x1ce/0x930 [ 2584.534226][T10045] ? kernel_read+0x1b0/0x1b0 [ 2584.535895][T10045] ? __fget_files+0x279/0x410 [ 2584.537607][T10045] ksys_read+0x12f/0x250 [ 2584.539127][T10045] ? vfs_write+0xe40/0xe40 [ 2584.540693][T10045] ? rcu_is_watching+0x12/0xb0 [ 2584.542594][T10045] __do_fast_syscall_32+0x61/0xe0 [ 2584.544799][T10045] do_fast_syscall_32+0x33/0x70 [ 2584.547087][T10045] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2584.550011][T10045] RIP: 0023:0xf7ff2579 [ 2584.551954][T10045] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2584.560703][T10045] RSP: 002b:00000000f7fed5e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2584.564336][T10045] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f7fed670 [ 2584.567157][T10045] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 2584.569992][T10045] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2584.572864][T10045] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2584.575642][T10045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2584.578455][T10045] 21:25:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd1f5, 0x69}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f8ac811ec5"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 9) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0x338, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x43}}}}, [@NL80211_ATTR_TID_CONFIG={0x138, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x80, 0x5, 0x6, 0x5, 0x0, 0x6, 0xe9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7}, {0x3, 0x1}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x2}, {0x3, 0x9}, {0x3}, {0x0, 0xa}, {}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x6}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x3, 0x9}, {0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x5}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x8}, {0x5, 0x5}, {0x5, 0x8}]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x56}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d4, 0x11d, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfc01, 0x3, 0x7fff, 0x2, 0x7ff, 0xfff, 0x1, 0x2c]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x0, 0x8}, {0x7, 0x9}, {0x6}, {0x5, 0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0x2}, {0x4}, {0x3, 0x9}, {}, {0x2, 0x2}, {0x5}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x2}, {0x0, 0xa}, {0x6}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x7}, {0x4, 0x3}, {0x3}, {0x6, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {}, {0x7, 0x5}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0x9}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x60, 0x12, 0x3, 0xc, 0x1, 0x36, 0x0, 0x6, 0x36, 0x24, 0x2, 0x9, 0x1, 0x30, 0xc, 0x0, 0x30, 0x5, 0x5, 0x1b, 0x24, 0xc, 0x9, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x8001, 0x4472, 0x2f, 0x13c, 0x40, 0xff]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x7}, {0x5, 0x5}, {0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x2d, 0x30, 0x16, 0x5, 0xd, 0x24, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x1, 0xfff, 0x81, 0x3, 0x7, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1000, 0x3, 0x21b3, 0x4, 0x9, 0x4dab, 0x5]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x2, 0x12, 0x1b, 0x3, 0xc, 0x1, 0x3, 0x4, 0x12, 0x18, 0x48, 0x5, 0x5, 0x12, 0x12, 0x48, 0x5, 0x0, 0x16, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb6fd, 0x5, 0x80, 0x1, 0x8, 0xffff, 0x3c, 0x5]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x2}, {0x3, 0xa}, {0x6}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x6}, {0x5}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x5}, {0x5, 0xa}, {0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x7}, {0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x6, 0xa}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x5, 0x9, 0x1b, 0x6c, 0x1b, 0x9, 0x1, 0x6c, 0x48, 0x6, 0x0, 0x5f, 0x9, 0x60, 0xb]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d03a96b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r7 = getpid() r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async, rerun: 32) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1e0001010000009000000000000000000000000000000000000000000000007f000001000000000000000000000000ac1414bb000000000000000000000000e0000002000000000000000000000000e0000002000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/160]}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a0000868d97577f9cfe30000000000000000000"], 0x1c}}, 0x0) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r14, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r13, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r13, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffc4, 0x52}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x42}, 0x40040) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x16, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x7) 21:25:03 executing program 1: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x7f, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x605, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x48800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x28, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008010}, 0x8c0) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0x338, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x43}}}}, [@NL80211_ATTR_TID_CONFIG={0x138, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x80, 0x5, 0x6, 0x5, 0x0, 0x6, 0xe9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7}, {0x3, 0x1}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x2}, {0x3, 0x9}, {0x3}, {0x0, 0xa}, {}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x6}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x3, 0x9}, {0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x5}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x8}, {0x5, 0x5}, {0x5, 0x8}]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x56}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d4, 0x11d, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfc01, 0x3, 0x7fff, 0x2, 0x7ff, 0xfff, 0x1, 0x2c]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x0, 0x8}, {0x7, 0x9}, {0x6}, {0x5, 0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0x2}, {0x4}, {0x3, 0x9}, {}, {0x2, 0x2}, {0x5}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x2}, {0x0, 0xa}, {0x6}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x7}, {0x4, 0x3}, {0x3}, {0x6, 0xa}, {0x6, 0x6}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {}, {0x7, 0x5}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0x9}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x60, 0x12, 0x3, 0xc, 0x1, 0x36, 0x0, 0x6, 0x36, 0x24, 0x2, 0x9, 0x1, 0x30, 0xc, 0x0, 0x30, 0x5, 0x5, 0x1b, 0x24, 0xc, 0x9, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x8001, 0x4472, 0x2f, 0x13c, 0x40, 0xff]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x7}, {0x5, 0x5}, {0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x2d, 0x30, 0x16, 0x5, 0xd, 0x24, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x1, 0xfff, 0x81, 0x3, 0x7, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1000, 0x3, 0x21b3, 0x4, 0x9, 0x4dab, 0x5]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x2, 0x12, 0x1b, 0x3, 0xc, 0x1, 0x3, 0x4, 0x12, 0x18, 0x48, 0x5, 0x5, 0x12, 0x12, 0x48, 0x5, 0x0, 0x16, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb6fd, 0x5, 0x80, 0x1, 0x8, 0xffff, 0x3c, 0x5]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x2}, {0x3, 0xa}, {0x6}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x6}, {0x5}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x5}, {0x5, 0xa}, {0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x7}, {0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x6, 0xa}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x5, 0x9, 0x1b, 0x6c, 0x1b, 0x9, 0x1, 0x6c, 0x48, 0x6, 0x0, 0x5f, 0x9, 0x60, 0xb]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d03a96b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = getpid() (async) r8 = getpid() sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1e0001010000009000000000000000000000000000000000000000000000007f000001000000000000000000000000ac1414bb000000000000000000000000e0000002000000000000000000000000e0000002000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/160]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a0000868d97577f9cfe30000000000000000000"], 0x1c}}, 0x0) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r14, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r13, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r13, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffc4, 0x52}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x42}, 0x40040) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) 21:25:03 executing program 1: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x7f, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x605, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x48800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x28, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008010}, 0x8c0) 21:25:03 executing program 3: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000140)=0xc) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 10) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = getpid() r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r8, 0x114, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0x8, 0x34, @random="2710d39c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "2590324dd8f1c4e3142c0303477d098b"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r13 = openat$vcsa(0xffffff9c, &(0x7f0000000600), 0x20000, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r13, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x101}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x40}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:03 executing program 1: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x7f, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x605, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x48800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x28, 0x18, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008010}, 0x8c0) 21:25:03 executing program 3: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000140)=0xc) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000140)=0xc) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) 21:25:03 executing program 3: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000140)=0xc) (async) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000010000000000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@report={0x178, 0x20, 0x300, 0x70bd2b, 0x25dfdbfe, {0xff, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@multicast2, 0x4e24, 0x8, 0x4e24, 0x1ff, 0x2, 0x0, 0x80, 0x2b, r3}}, [@srcaddr={0x14, 0xd, @in=@multicast1}, @algo_comp={0x115, 0x3, {{'lzjh\x00'}, 0x668, "afb06a7aebf007822632d5d898b99850bd4164003e5ce8926ee2fde9890711145ed54c2bcdb98de97a846ab2bc735d57a727bc6f9653b1b04fa446dcae98abb81d622d8037f8c2e79cd1030248dbccf3c8750da40cb640712af2e2a9dd58bea51cb0f8b81e9caf2101e3876b7104a5635b1c9bc5fa34ad0a45a079fe619b307c5ae05001b77c5e859625e545b83911cb19c765f2d5bf77cc7afe549b6484a445e810a7ecd52995e3a27716397862089414da980d3af2c14ca05e97b18ca7f270c6f4b44a8760fbaf95656cc55f"}}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x23903b2e74c3f4e0, 0x1, 0x7, {{0x25, 0x4, 0x1, 0x19, 0x94, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, {[@generic={0x44, 0x5, "8fa78a"}, @generic={0x83, 0x9, "2830a08789d4b6"}, @end, @lsrr={0x83, 0x27, 0xe2, [@dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, @private=0xa010100, @local, @multicast1, @empty, @rand_addr=0x64010101, @private=0xa010100, @multicast2]}, @rr={0x7, 0xf, 0xef, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0x5, [{@multicast2, 0xff}, {@private=0xa010102, 0x10001}, {@remote}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xb9, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @rand_addr=0x64010100, @broadcast]}]}}}}}) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f00000004c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r4, 0x25, 0x9}, 0x10) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r5 = getpid() r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r8, 0x114, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0x8, 0x34, @random="2710d39c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "2590324dd8f1c4e3142c0303477d098b"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) (async) r13 = openat$vcsa(0xffffff9c, &(0x7f0000000600), 0x20000, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r13, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x101}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x40}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x2, 0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x2, 0x6, {"98fce0899f5ef39cdea0a36dd0923229"}, 0x4631, 0x8000000000000001, 0x5}}}, 0xa0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5ec09c0759a29e9b}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4004) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008001}, 0x4050) 21:25:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 11) 21:25:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000010000000000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@report={0x178, 0x20, 0x300, 0x70bd2b, 0x25dfdbfe, {0xff, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@multicast2, 0x4e24, 0x8, 0x4e24, 0x1ff, 0x2, 0x0, 0x80, 0x2b, r3}}, [@srcaddr={0x14, 0xd, @in=@multicast1}, @algo_comp={0x115, 0x3, {{'lzjh\x00'}, 0x668, "afb06a7aebf007822632d5d898b99850bd4164003e5ce8926ee2fde9890711145ed54c2bcdb98de97a846ab2bc735d57a727bc6f9653b1b04fa446dcae98abb81d622d8037f8c2e79cd1030248dbccf3c8750da40cb640712af2e2a9dd58bea51cb0f8b81e9caf2101e3876b7104a5635b1c9bc5fa34ad0a45a079fe619b307c5ae05001b77c5e859625e545b83911cb19c765f2d5bf77cc7afe549b6484a445e810a7ecd52995e3a27716397862089414da980d3af2c14ca05e97b18ca7f270c6f4b44a8760fbaf95656cc55f"}}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x23903b2e74c3f4e0, 0x1, 0x7, {{0x25, 0x4, 0x1, 0x19, 0x94, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, {[@generic={0x44, 0x5, "8fa78a"}, @generic={0x83, 0x9, "2830a08789d4b6"}, @end, @lsrr={0x83, 0x27, 0xe2, [@dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, @private=0xa010100, @local, @multicast1, @empty, @rand_addr=0x64010101, @private=0xa010100, @multicast2]}, @rr={0x7, 0xf, 0xef, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0x5, [{@multicast2, 0xff}, {@private=0xa010102, 0x10001}, {@remote}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xb9, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @rand_addr=0x64010100, @broadcast]}]}}}}}) (async) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) (async) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f00000004c0)) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r4, 0x25, 0x9}, 0x10) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = getpid() (async) r6 = getpid() (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r8, 0x114, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0x8, 0x34, @random="2710d39c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "2590324dd8f1c4e3142c0303477d098b"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r9}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r13 = openat$vcsa(0xffffff9c, &(0x7f0000000600), 0x20000, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r13, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x101}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x40}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x2, 0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x2, 0x6, {"98fce0899f5ef39cdea0a36dd0923229"}, 0x4631, 0x8000000000000001, 0x5}}}, 0xa0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5ec09c0759a29e9b}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4004) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008001}, 0x4050) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x2, 0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x2, 0x6, {"98fce0899f5ef39cdea0a36dd0923229"}, 0x4631, 0x8000000000000001, 0x5}}}, 0xa0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5ec09c0759a29e9b}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4004) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008001}, 0x4050) (async) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x2, 0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x2, 0x6, {"98fce0899f5ef39cdea0a36dd0923229"}, 0x4631, 0x8000000000000001, 0x5}}}, 0xa0) (async, rerun: 64) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5ec09c0759a29e9b}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4004) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008001}, 0x4050) 21:25:03 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5452, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000200), 0x240501, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/13) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff5a, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getnexthop={0x4c, 0x6a, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8}, @NHA_OIF={0x8}, @NHA_FDB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xf58a0c624d8142ff) 21:25:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800030700000010000000000a0000000000000000000000080006000000000004000880"], 0x28}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@report={0x178, 0x20, 0x300, 0x70bd2b, 0x25dfdbfe, {0xff, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@multicast2, 0x4e24, 0x8, 0x4e24, 0x1ff, 0x2, 0x0, 0x80, 0x2b, r3}}, [@srcaddr={0x14, 0xd, @in=@multicast1}, @algo_comp={0x115, 0x3, {{'lzjh\x00'}, 0x668, "afb06a7aebf007822632d5d898b99850bd4164003e5ce8926ee2fde9890711145ed54c2bcdb98de97a846ab2bc735d57a727bc6f9653b1b04fa446dcae98abb81d622d8037f8c2e79cd1030248dbccf3c8750da40cb640712af2e2a9dd58bea51cb0f8b81e9caf2101e3876b7104a5635b1c9bc5fa34ad0a45a079fe619b307c5ae05001b77c5e859625e545b83911cb19c765f2d5bf77cc7afe549b6484a445e810a7ecd52995e3a27716397862089414da980d3af2c14ca05e97b18ca7f270c6f4b44a8760fbaf95656cc55f"}}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x23903b2e74c3f4e0, 0x1, 0x7, {{0x25, 0x4, 0x1, 0x19, 0x94, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, {[@generic={0x44, 0x5, "8fa78a"}, @generic={0x83, 0x9, "2830a08789d4b6"}, @end, @lsrr={0x83, 0x27, 0xe2, [@dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, @private=0xa010100, @local, @multicast1, @empty, @rand_addr=0x64010101, @private=0xa010100, @multicast2]}, @rr={0x7, 0xf, 0xef, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0x5, [{@multicast2, 0xff}, {@private=0xa010102, 0x10001}, {@remote}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xb9, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @rand_addr=0x64010100, @broadcast]}]}}}}}) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) (async) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f00000004c0)) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r4, 0x25, 0x9}, 0x10) 21:25:03 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5452, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000200), 0x240501, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/13) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff5a, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getnexthop={0x4c, 0x6a, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8}, @NHA_OIF={0x8}, @NHA_FDB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xf58a0c624d8142ff) 21:25:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 12) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x36, 0xfa00, {&(0x7f0000000040)}}, 0x18) 21:25:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = getpid() r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x80, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x480, 0x63}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xd9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x48005) 21:25:03 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5452, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000200), 0x240501, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/13) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff5a, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getnexthop={0x4c, 0x6a, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8}, @NHA_OIF={0x8}, @NHA_FDB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xf58a0c624d8142ff) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x36, 0xfa00, {&(0x7f0000000040)}}, 0x18) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x36, 0xfa00, {&(0x7f0000000040)}}, 0x18) 21:25:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 13) 21:25:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = getpid() getpid() (async) r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x80, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x480, 0x63}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xd9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x48005) 21:25:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8, 0x8000, 0x8, 0x7, {{0x2f, 0x4, 0x2, 0xf, 0xbc, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0xe, [0x800]}, @lsrr={0x83, 0x7, 0x99, [@empty]}, @timestamp={0x44, 0x14, 0xba, 0x0, 0x5, [0x0, 0x7944, 0x6, 0x7]}, @timestamp_prespec={0x44, 0x24, 0x48, 0x3, 0x2, [{@local}, {@remote, 0x8}, {@local, 0xfd}, {@rand_addr=0x64010102, 0x2}]}, @ssrr={0x89, 0x17, 0x7, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @private=0xa010102, @private=0xa010102, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000000}, {@local, 0x8}, {@multicast1, 0x4}]}, @timestamp_addr={0x44, 0x24, 0x89, 0x1, 0x4, [{@broadcast, 0x9}, {@remote, 0x8280}, {@empty, 0x2}, {@empty, 0x1b}]}]}}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)=@polexpire={0x4f0, 0x1b, 0x4, 0x70bd2d, 0x25dfdbfc, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e21, 0x9, 0x4e22, 0x8, 0x2, 0x10, 0xa0, 0x11}, {0x9, 0x3, 0x8, 0x3f, 0x20, 0x4f5, 0x3, 0x4}, {0x7ff, 0x8, 0x45b92c5, 0x9}, 0x1ff, 0x6e6bb6, 0x1, 0x0, 0x3, 0x2}, 0x20}, [@algo_comp={0x13f, 0x3, {{'lzjh\x00'}, 0x7b8, "d52d1d32f60ee0872710dc325723d4a99531acff7cf3ab8c05410ec869d57afacb334cbeac2e7f54a6965ade94295045f89a82f50145177240f7d2a7445e9b09006adc2e47400fb07025f92d8d07c8268c72934382a011609166db830b4b1df7542f3d7cf6d8342ca139dbc1234798fe94f0111d34564ae0c33c3931c2f1ae5f7e44eba1bfdb0970bfb839a00433c494a351f429c1a8bae3275f93df1beaefe9938e3612b15f39b45e4909820fb9436ed073fa6210a6aa7a142028d6de53d488d7cccda59dc6caf6df0c9ca890f71afab5b7b1a084f738c9badf47a1be5f035f5a522afd454e36613bc1d53899a6c67d266bb8b4c32d08"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @algo_aead={0x8e, 0x12, {{'aegis256-aesni\x00'}, 0x210, 0x180, "8c47febb2996ad1b71689403c0f8295e444840045612ad8ed0e6aa65ddf63d1b9438e467cb58730f0d7fb5f9763c556ea98cb74f5f51265824f4a23d2234671f8d3c"}}, @tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d2, 0xff}, 0x2, @in=@broadcast, 0x0, 0x0, 0x1, 0x3, 0x8, 0xfffffffd, 0xe81e}]}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @migrate={0x180, 0x11, [{@in=@remote, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in6=@loopback, @in6=@mcast1, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x0, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x6c, 0x1, 0x0, 0x3500, 0x2, 0x2}, {@in6=@mcast1, @in6=@remote, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@loopback, @in6=@remote, @in6=@local, @in=@empty, 0x2b, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {r1, 0x3}}, @migrate={0x50, 0x11, [{@in=@multicast2, @in6=@empty, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x0, 0x0, 0x3503, 0x2, 0x2}]}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd27, 0x70bd26, 0x70bd27, 0x70bd2a, 0x1, [0x5, 0x0, 0x8001, 0x3, 0x3f, 0x5, 0x7]}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x20000015}, 0x800) 21:25:03 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x85) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc44}, 0x810) 21:25:03 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8, 0x8000, 0x8, 0x7, {{0x2f, 0x4, 0x2, 0xf, 0xbc, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0xe, [0x800]}, @lsrr={0x83, 0x7, 0x99, [@empty]}, @timestamp={0x44, 0x14, 0xba, 0x0, 0x5, [0x0, 0x7944, 0x6, 0x7]}, @timestamp_prespec={0x44, 0x24, 0x48, 0x3, 0x2, [{@local}, {@remote, 0x8}, {@local, 0xfd}, {@rand_addr=0x64010102, 0x2}]}, @ssrr={0x89, 0x17, 0x7, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @private=0xa010102, @private=0xa010102, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000000}, {@local, 0x8}, {@multicast1, 0x4}]}, @timestamp_addr={0x44, 0x24, 0x89, 0x1, 0x4, [{@broadcast, 0x9}, {@remote, 0x8280}, {@empty, 0x2}, {@empty, 0x1b}]}]}}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)=@polexpire={0x4f0, 0x1b, 0x4, 0x70bd2d, 0x25dfdbfc, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e21, 0x9, 0x4e22, 0x8, 0x2, 0x10, 0xa0, 0x11}, {0x9, 0x3, 0x8, 0x3f, 0x20, 0x4f5, 0x3, 0x4}, {0x7ff, 0x8, 0x45b92c5, 0x9}, 0x1ff, 0x6e6bb6, 0x1, 0x0, 0x3, 0x2}, 0x20}, [@algo_comp={0x13f, 0x3, {{'lzjh\x00'}, 0x7b8, "d52d1d32f60ee0872710dc325723d4a99531acff7cf3ab8c05410ec869d57afacb334cbeac2e7f54a6965ade94295045f89a82f50145177240f7d2a7445e9b09006adc2e47400fb07025f92d8d07c8268c72934382a011609166db830b4b1df7542f3d7cf6d8342ca139dbc1234798fe94f0111d34564ae0c33c3931c2f1ae5f7e44eba1bfdb0970bfb839a00433c494a351f429c1a8bae3275f93df1beaefe9938e3612b15f39b45e4909820fb9436ed073fa6210a6aa7a142028d6de53d488d7cccda59dc6caf6df0c9ca890f71afab5b7b1a084f738c9badf47a1be5f035f5a522afd454e36613bc1d53899a6c67d266bb8b4c32d08"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @algo_aead={0x8e, 0x12, {{'aegis256-aesni\x00'}, 0x210, 0x180, "8c47febb2996ad1b71689403c0f8295e444840045612ad8ed0e6aa65ddf63d1b9438e467cb58730f0d7fb5f9763c556ea98cb74f5f51265824f4a23d2234671f8d3c"}}, @tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d2, 0xff}, 0x2, @in=@broadcast, 0x0, 0x0, 0x1, 0x3, 0x8, 0xfffffffd, 0xe81e}]}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @migrate={0x180, 0x11, [{@in=@remote, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in6=@loopback, @in6=@mcast1, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x0, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x6c, 0x1, 0x0, 0x3500, 0x2, 0x2}, {@in6=@mcast1, @in6=@remote, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@loopback, @in6=@remote, @in6=@local, @in=@empty, 0x2b, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {r1, 0x3}}, @migrate={0x50, 0x11, [{@in=@multicast2, @in6=@empty, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x0, 0x0, 0x3503, 0x2, 0x2}]}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd27, 0x70bd26, 0x70bd27, 0x70bd2a, 0x1, [0x5, 0x0, 0x8001, 0x3, 0x3f, 0x5, 0x7]}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x20000015}, 0x800) 21:25:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x85) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc44}, 0x810) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8, 0x8000, 0x8, 0x7, {{0x2f, 0x4, 0x2, 0xf, 0xbc, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0xe, [0x800]}, @lsrr={0x83, 0x7, 0x99, [@empty]}, @timestamp={0x44, 0x14, 0xba, 0x0, 0x5, [0x0, 0x7944, 0x6, 0x7]}, @timestamp_prespec={0x44, 0x24, 0x48, 0x3, 0x2, [{@local}, {@remote, 0x8}, {@local, 0xfd}, {@rand_addr=0x64010102, 0x2}]}, @ssrr={0x89, 0x17, 0x7, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @private=0xa010102, @private=0xa010102, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000000}, {@local, 0x8}, {@multicast1, 0x4}]}, @timestamp_addr={0x44, 0x24, 0x89, 0x1, 0x4, [{@broadcast, 0x9}, {@remote, 0x8280}, {@empty, 0x2}, {@empty, 0x1b}]}]}}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)=@polexpire={0x4f0, 0x1b, 0x4, 0x70bd2d, 0x25dfdbfc, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e21, 0x9, 0x4e22, 0x8, 0x2, 0x10, 0xa0, 0x11}, {0x9, 0x3, 0x8, 0x3f, 0x20, 0x4f5, 0x3, 0x4}, {0x7ff, 0x8, 0x45b92c5, 0x9}, 0x1ff, 0x6e6bb6, 0x1, 0x0, 0x3, 0x2}, 0x20}, [@algo_comp={0x13f, 0x3, {{'lzjh\x00'}, 0x7b8, "d52d1d32f60ee0872710dc325723d4a99531acff7cf3ab8c05410ec869d57afacb334cbeac2e7f54a6965ade94295045f89a82f50145177240f7d2a7445e9b09006adc2e47400fb07025f92d8d07c8268c72934382a011609166db830b4b1df7542f3d7cf6d8342ca139dbc1234798fe94f0111d34564ae0c33c3931c2f1ae5f7e44eba1bfdb0970bfb839a00433c494a351f429c1a8bae3275f93df1beaefe9938e3612b15f39b45e4909820fb9436ed073fa6210a6aa7a142028d6de53d488d7cccda59dc6caf6df0c9ca890f71afab5b7b1a084f738c9badf47a1be5f035f5a522afd454e36613bc1d53899a6c67d266bb8b4c32d08"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @algo_aead={0x8e, 0x12, {{'aegis256-aesni\x00'}, 0x210, 0x180, "8c47febb2996ad1b71689403c0f8295e444840045612ad8ed0e6aa65ddf63d1b9438e467cb58730f0d7fb5f9763c556ea98cb74f5f51265824f4a23d2234671f8d3c"}}, @tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d2, 0xff}, 0x2, @in=@broadcast, 0x0, 0x0, 0x1, 0x3, 0x8, 0xfffffffd, 0xe81e}]}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @migrate={0x180, 0x11, [{@in=@remote, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in6=@loopback, @in6=@mcast1, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x0, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x6c, 0x1, 0x0, 0x3500, 0x2, 0x2}, {@in6=@mcast1, @in6=@remote, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@loopback, @in6=@remote, @in6=@local, @in=@empty, 0x2b, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {r1, 0x3}}, @migrate={0x50, 0x11, [{@in=@multicast2, @in6=@empty, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x0, 0x0, 0x3503, 0x2, 0x2}]}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd27, 0x70bd26, 0x70bd27, 0x70bd2a, 0x1, [0x5, 0x0, 0x8001, 0x3, 0x3f, 0x5, 0x7]}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x20000015}, 0x800) 21:25:04 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 14) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc0fc4111, &(0x7f0000000140)={0x5, [0x2, 0x80000001, 0xc0000], [{0x40, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x2, 0x1}, {0x6, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x0, 0x1}, {0x8, 0xac, 0x1}, {0xffff, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xff, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xc76, 0x1, 0x1, 0x0, 0x1}, {0x2128ad0b, 0x8, 0x1, 0x1, 0x1, 0x1}], 0x100}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 64) r3 = getpid() r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async, rerun: 32) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) (async) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x80, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x480, 0x63}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xd9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x48005) 21:25:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x85) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc44}, 0x810) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc0fc4111, &(0x7f0000000140)={0x5, [0x2, 0x80000001, 0xc0000], [{0x40, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x2, 0x1}, {0x6, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x0, 0x1}, {0x8, 0xac, 0x1}, {0xffff, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xff, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xc76, 0x1, 0x1, 0x0, 0x1}, {0x2128ad0b, 0x8, 0x1, 0x1, 0x1, 0x1}], 0x100}) (async, rerun: 32) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (rerun: 32) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc0fc4111, &(0x7f0000000140)={0x5, [0x2, 0x80000001, 0xc0000], [{0x40, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x2, 0x1}, {0x6, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x0, 0x1}, {0x8, 0xac, 0x1}, {0xffff, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xff, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xc76, 0x1, 0x1, 0x0, 0x1}, {0x2128ad0b, 0x8, 0x1, 0x1, 0x1, 0x1}], 0x100}) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x28, 0x80, 0x3, 0x1, {{0x1e, 0x4, 0x1, 0x35, 0x78, 0x67, 0x0, 0x80, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x38, 0x3, 0x4, [{@multicast2, 0x8359}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@remote, 0x81d}, {@loopback, 0x200}]}, @cipso={0x86, 0x9, 0x1, [{0x5, 0x3, '\''}]}, @generic={0x89, 0x10, "d77bb6b84c2727e5dffd6c61efa8"}, @noop, @cipso={0x86, 0x9, 0x3, [{0x5, 0x3, 'M'}]}, @cipso={0x86, 0x13, 0x3, [{0x6, 0xd, "5ef4c1ec0dd31987771731"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @private}, &(0x7f0000000240)=0xc) r2 = socket$inet(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@RTM_DELMDB={0x18, 0x55, 0x2, 0x70bd2d, 0x25dfdbfc, {0x7, r1}}, 0x18}}, 0x0) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 21:25:04 executing program 3: socketpair(0x8, 0x1, 0xffff, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8e9309ea22e96b23}, 0x400c004) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 15) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x28, 0x80, 0x3, 0x1, {{0x1e, 0x4, 0x1, 0x35, 0x78, 0x67, 0x0, 0x80, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x38, 0x3, 0x4, [{@multicast2, 0x8359}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@remote, 0x81d}, {@loopback, 0x200}]}, @cipso={0x86, 0x9, 0x1, [{0x5, 0x3, '\''}]}, @generic={0x89, 0x10, "d77bb6b84c2727e5dffd6c61efa8"}, @noop, @cipso={0x86, 0x9, 0x3, [{0x5, 0x3, 'M'}]}, @cipso={0x86, 0x13, 0x3, [{0x6, 0xd, "5ef4c1ec0dd31987771731"}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @private}, &(0x7f0000000240)=0xc) (async) r2 = socket$inet(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@RTM_DELMDB={0x18, 0x55, 0x2, 0x70bd2d, 0x25dfdbfc, {0x7, r1}}, 0x18}}, 0x0) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x28, 0x80, 0x3, 0x1, {{0x1e, 0x4, 0x1, 0x35, 0x78, 0x67, 0x0, 0x80, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x38, 0x3, 0x4, [{@multicast2, 0x8359}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@remote, 0x81d}, {@loopback, 0x200}]}, @cipso={0x86, 0x9, 0x1, [{0x5, 0x3, '\''}]}, @generic={0x89, 0x10, "d77bb6b84c2727e5dffd6c61efa8"}, @noop, @cipso={0x86, 0x9, 0x3, [{0x5, 0x3, 'M'}]}, @cipso={0x86, 0x13, 0x3, [{0x6, 0xd, "5ef4c1ec0dd31987771731"}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @private}, &(0x7f0000000240)=0xc) (async) r2 = socket$inet(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@RTM_DELMDB={0x18, 0x55, 0x2, 0x70bd2d, 0x25dfdbfc, {0x7, r1}}, 0x18}}, 0x0) 21:25:04 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 21:25:04 executing program 3: socketpair(0x8, 0x1, 0xffff, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8e9309ea22e96b23}, 0x400c004) (async) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}}}, 0x38) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = getpid() migrate_pages(r3, 0x101, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x3) syz_open_procfs$namespace(r3, &(0x7f0000001300)='ns/time_for_children\x00') sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1114, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x51}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x62, 0xfa, "b8bf1ec0fc5d0af2f0f665939629ba8f4f205dec7d9b9722e4d491cc132dd9b211749f68900a6a9fc7a09b095e97913f4f7324cbf90e676170d9d504001f8b5ec402005aa4b30a699686883ddb58e39910262c2fc0db902011f4d20bf242"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x351}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "ef728d"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0x69, 0xfc, "2fcd1a3183faf9a33d382b311fdf3620ae1fa468786b79a1df49cb6e5d6d90081fcafa4888670aa53718fcb9a1e9273a9f0554f07836731ddd1a7535e7e985c90ae2a4092d9ce8a4be43b962990c362528de55e05aca63eefa83b122dee2b677a2409019ca"}]]}, 0x1114}, 0x1, 0x0, 0x0, 0x9c}, 0x4008081) 21:25:04 executing program 3: socketpair(0x8, 0x1, 0xffff, &(0x7f0000000140)) (async) socketpair(0x8, 0x1, 0xffff, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8e9309ea22e96b23}, 0x400c004) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf256700080001ea00ffeb0008000600514f97840800c40000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r3 = getpid() migrate_pages(r3, 0x101, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x3) (async) syz_open_procfs$namespace(r3, &(0x7f0000001300)='ns/time_for_children\x00') sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1114, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x51}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x62, 0xfa, "b8bf1ec0fc5d0af2f0f665939629ba8f4f205dec7d9b9722e4d491cc132dd9b211749f68900a6a9fc7a09b095e97913f4f7324cbf90e676170d9d504001f8b5ec402005aa4b30a699686883ddb58e39910262c2fc0db902011f4d20bf242"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x351}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "ef728d"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0x69, 0xfc, "2fcd1a3183faf9a33d382b311fdf3620ae1fa468786b79a1df49cb6e5d6d90081fcafa4888670aa53718fcb9a1e9273a9f0554f07836731ddd1a7535e7e985c90ae2a4092d9ce8a4be43b962990c362528de55e05aca63eefa83b122dee2b677a2409019ca"}]]}, 0x1114}, 0x1, 0x0, 0x0, 0x9c}, 0x4008081) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000), 0x8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf256700080001ea00ffeb0008000600514f97840800c40000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf256700080001ea00ffeb0008000600514f97840800c40000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r3 = getpid() migrate_pages(r3, 0x101, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x3) syz_open_procfs$namespace(r3, &(0x7f0000001300)='ns/time_for_children\x00') (async, rerun: 32) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1114, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x51}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x62, 0xfa, "b8bf1ec0fc5d0af2f0f665939629ba8f4f205dec7d9b9722e4d491cc132dd9b211749f68900a6a9fc7a09b095e97913f4f7324cbf90e676170d9d504001f8b5ec402005aa4b30a699686883ddb58e39910262c2fc0db902011f4d20bf242"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x351}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "ef728d"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0x69, 0xfc, "2fcd1a3183faf9a33d382b311fdf3620ae1fa468786b79a1df49cb6e5d6d90081fcafa4888670aa53718fcb9a1e9273a9f0554f07836731ddd1a7535e7e985c90ae2a4092d9ce8a4be43b962990c362528de55e05aca63eefa83b122dee2b677a2409019ca"}]]}, 0x1114}, 0x1, 0x0, 0x0, 0x9c}, 0x4008081) (rerun: 32) 21:25:04 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 16) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf256700080001ea00ffeb0008000600514f97840800c40000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf256700080001ea00ffeb0008000600514f97840800c40000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000), 0x8) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c0103070000000000000000"], 0x1c}}, 0x0) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b00000018000307000000000000000000000008000600000000001dd062ca551646ecfd8a2df69404000880"], 0x28}}, 0x0) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000), 0x8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c0103070000000000000000"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c0103070000000000000000"], 0x1c}}, 0x0) 21:25:04 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b00000018000307000000000000000000000008000600000000001dd062ca551646ecfd8a2df69404000880"], 0x28}}, 0x0) 21:25:04 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 17) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c0103070000000000000000"], 0x1c}}, 0x0) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b00000018000307000000000000000000000008000600000000001dd062ca551646ecfd8a2df69404000880"], 0x28}}, 0x0) 21:25:04 executing program 3: openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffffffffffda4, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) 21:25:04 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 18) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffffffffffda4, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) 21:25:04 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000003c0)=""/121) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x2a2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf82d, 0x6f}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1298}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40008800}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x70, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x20}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x101}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2a0}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x35f}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6a6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x24004000) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffffffffffda4, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffffffffffda4, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20) (async) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a0000000000000500000000"], 0x1c}}, 0x0) [ 2585.478023][T10313] FAULT_INJECTION: forcing a failure. [ 2585.478023][T10313] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.482470][T10313] CPU: 2 PID: 10313 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a0000000000000500000000"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a0000000000000500000000"], 0x1c}}, 0x0) (async) [ 2585.486168][T10313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2585.490083][T10313] Call Trace: [ 2585.491301][T10313] [ 2585.491306][T10313] dump_stack_lvl+0x125/0x1b0 [ 2585.491321][T10313] should_fail_ex+0x496/0x5b0 [ 2585.496110][T10313] should_failslab+0x9/0x20 [ 2585.496125][T10313] __kmem_cache_alloc_node+0x2fd/0x350 [ 2585.496141][T10313] ? init_srcu_struct_fields+0x8da/0xdc0 [ 2585.496158][T10313] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 2585.496171][T10313] kmalloc_trace+0x25/0xe0 [ 2585.496188][T10313] init_srcu_struct_fields+0x8da/0xdc0 [ 2585.496205][T10313] kvm_dev_ioctl+0x75e/0x1c20 [ 2585.496218][T10313] ? reacquire_held_locks+0x4b0/0x4b0 [ 2585.496231][T10313] ? bit_wait_timeout+0x160/0x160 [ 2585.496243][T10313] ? __fget_files+0x279/0x410 [ 2585.496253][T10313] ? kvm_vcpu_stats_release+0x80/0x80 [ 2585.496265][T10313] ? __fget_files+0x279/0x410 [ 2585.496275][T10313] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2585.496288][T10313] ? kvm_vcpu_stats_release+0x80/0x80 [ 2585.496299][T10313] __do_compat_sys_ioctl+0x2bf/0x330 [ 2585.496309][T10313] __do_fast_syscall_32+0x61/0xe0 [ 2585.496319][T10313] do_fast_syscall_32+0x33/0x70 [ 2585.496328][T10313] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2585.496341][T10313] RIP: 0023:0xf7f91579 [ 2585.496349][T10313] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2585.496359][T10313] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2585.496369][T10313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2585.496375][T10313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2585.496381][T10313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2585.496387][T10313] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2585.496392][T10313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2585.496401][T10313] 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a0000000000000500000000"], 0x1c}}, 0x0) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x80000002, r1, 0x80001}) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = getpid() r6 = getpid() sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r7}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf257b00000008000300", @ANYRES32=r10, @ANYBLOB="1400020196bef4cb72e1573dfed81ae6c82dba200a000600080211000001000014000201f5d3600fca2d0af9ec7b85c41349cba60a00060008021100000000000a00060008021100000100001400fe0055943a8d53307379c7fdaef1cfabb166"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8090) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:04 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 19) 21:25:04 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000003c0)=""/121) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x2a2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf82d, 0x6f}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1298}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40008800}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x70, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x20}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x101}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2a0}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x35f}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6a6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x24004000) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001ccd94bcc215966b0e0000000a00"/28], 0x1c}}, 0x0) [ 2585.587849][T10333] FAULT_INJECTION: forcing a failure. [ 2585.587849][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.592344][T10333] CPU: 2 PID: 10333 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2585.596063][T10333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2585.596071][T10333] Call Trace: [ 2585.596075][T10333] 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001ccd94bcc215966b0e0000000a00"/28], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001ccd94bcc215966b0e0000000a00"/28], 0x1c}}, 0x0) (async) [ 2585.596080][T10333] dump_stack_lvl+0x125/0x1b0 [ 2585.604918][T10333] should_fail_ex+0x496/0x5b0 [ 2585.607098][T10333] should_failslab+0x9/0x20 [ 2585.609119][T10333] __kmem_cache_alloc_node+0x2fd/0x350 21:25:04 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000003c0)=""/121) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x2a2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf82d, 0x6f}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1298}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40008800}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x70, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x20}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x101}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2a0}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x35f}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6a6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x24004000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000003c0)=""/121) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x2a2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf82d, 0x6f}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1298}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40008800}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x70, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x20}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x101}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2a0}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x35f}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6a6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x24004000) (async) [ 2585.611545][T10333] ? init_srcu_struct_fields+0x8da/0xdc0 [ 2585.614259][T10333] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 2585.616793][T10333] kmalloc_trace+0x25/0xe0 [ 2585.618605][T10333] init_srcu_struct_fields+0x8da/0xdc0 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001ccd94bcc215966b0e0000000a00"/28], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001ccd94bcc215966b0e0000000a00"/28], 0x1c}}, 0x0) [ 2585.620758][T10333] kvm_dev_ioctl+0x75e/0x1c20 [ 2585.622759][T10333] ? reacquire_held_locks+0x4b0/0x4b0 [ 2585.624890][T10333] ? bit_wait_timeout+0x160/0x160 [ 2585.626878][T10333] ? __fget_files+0x279/0x410 [ 2585.628748][T10333] ? kvm_vcpu_stats_release+0x80/0x80 [ 2585.628764][T10333] ? __fget_files+0x279/0x410 [ 2585.628776][T10333] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2585.628791][T10333] ? kvm_vcpu_stats_release+0x80/0x80 [ 2585.637103][T10333] __do_compat_sys_ioctl+0x2bf/0x330 [ 2585.637128][T10333] __do_fast_syscall_32+0x61/0xe0 [ 2585.637149][T10333] do_fast_syscall_32+0x33/0x70 [ 2585.637166][T10333] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2585.637190][T10333] RIP: 0023:0xf7f91579 [ 2585.637204][T10333] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2585.637220][T10333] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2585.637238][T10333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2585.637249][T10333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2585.637261][T10333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2585.637294][T10333] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2585.637304][T10333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2585.637321][T10333] 21:25:04 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 20) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x80000002, r1, 0x80001}) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) (async) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) getpid() (async) r5 = getpid() r6 = getpid() sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r7}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r7}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf257b00000008000300", @ANYRES32=r10, @ANYBLOB="1400020196bef4cb72e1573dfed81ae6c82dba200a000600080211000001000014000201f5d3600fca2d0af9ec7b85c41349cba60a00060008021100000000000a00060008021100000100001400fe0055943a8d53307379c7fdaef1cfabb166"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8090) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:04 executing program 3: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x48}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "268e9b545416f5b89ca5c09b1d730388"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x801) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 21:25:04 executing program 3: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x48}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "268e9b545416f5b89ca5c09b1d730388"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x801) (async, rerun: 64) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) [ 2585.771261][T10360] FAULT_INJECTION: forcing a failure. [ 2585.771261][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.776373][T10360] CPU: 3 PID: 10360 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 21:25:04 executing program 3: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x48}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "268e9b545416f5b89ca5c09b1d730388"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x801) (async) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) [ 2585.780508][T10360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2585.784532][T10360] Call Trace: [ 2585.785936][T10360] [ 2585.787121][T10360] dump_stack_lvl+0x125/0x1b0 [ 2585.789005][T10360] should_fail_ex+0x496/0x5b0 [ 2585.790948][T10360] should_failslab+0x9/0x20 [ 2585.792920][T10360] __kmem_cache_alloc_node+0x2fd/0x350 [ 2585.795274][T10360] ? init_srcu_struct_fields+0x8da/0xdc0 [ 2585.797665][T10360] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 2585.799958][T10360] kmalloc_trace+0x25/0xe0 [ 2585.801813][T10360] init_srcu_struct_fields+0x8da/0xdc0 [ 2585.804081][T10360] kvm_dev_ioctl+0x75e/0x1c20 [ 2585.805991][T10360] ? reacquire_held_locks+0x4b0/0x4b0 [ 2585.808314][T10360] ? bit_wait_timeout+0x160/0x160 [ 2585.810431][T10360] ? __fget_files+0x279/0x410 [ 2585.812398][T10360] ? kvm_vcpu_stats_release+0x80/0x80 [ 2585.814692][T10360] ? __fget_files+0x279/0x410 [ 2585.816715][T10360] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2585.818855][T10360] ? kvm_vcpu_stats_release+0x80/0x80 [ 2585.821141][T10360] __do_compat_sys_ioctl+0x2bf/0x330 [ 2585.823068][T10360] __do_fast_syscall_32+0x61/0xe0 [ 2585.824814][T10360] do_fast_syscall_32+0x33/0x70 [ 2585.826455][T10360] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2585.828845][T10360] RIP: 0023:0xf7f91579 [ 2585.830222][T10360] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2585.836835][T10360] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2585.839637][T10360] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2585.842355][T10360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2585.845040][T10360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2585.847857][T10360] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2585.850571][T10360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2585.853294][T10360] 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 21:25:04 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 21) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}]}, 0x24}}, 0x48000) 21:25:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x80000002, r1, 0x80001}) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) (async) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = getpid() (async) r6 = getpid() sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x10000, r7}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf257b00000008000300", @ANYRES32=r10, @ANYBLOB="1400020196bef4cb72e1573dfed81ae6c82dba200a000600080211000001000014000201f5d3600fca2d0af9ec7b85c41349cba60a00060008021100000000000a00060008021100000100001400fe0055943a8d53307379c7fdaef1cfabb166"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8090) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0xd) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0xd) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0xd) (async) 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}]}, 0x24}}, 0x48000) 21:25:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0xd) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0xd) (async) [ 2585.942728][T10390] FAULT_INJECTION: forcing a failure. [ 2585.942728][T10390] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.947610][T10390] CPU: 2 PID: 10390 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 21:25:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}]}, 0x24}}, 0x48000) [ 2585.947624][T10390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2585.947630][T10390] Call Trace: [ 2585.947634][T10390] [ 2585.947637][T10390] dump_stack_lvl+0x125/0x1b0 [ 2585.947652][T10390] should_fail_ex+0x496/0x5b0 [ 2585.947668][T10390] should_failslab+0x9/0x20 [ 2585.947679][T10390] __kmem_cache_alloc_node+0x2fd/0x350 [ 2585.947694][T10390] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 2585.947709][T10390] kmalloc_trace+0x25/0xe0 [ 2585.947724][T10390] kvm_dev_ioctl+0x9b6/0x1c20 [ 2585.947736][T10390] ? bit_wait_timeout+0x160/0x160 [ 2585.947748][T10390] ? __fget_files+0x279/0x410 [ 2585.947757][T10390] ? kvm_vcpu_stats_release+0x80/0x80 [ 2585.947769][T10390] ? __fget_files+0x279/0x410 [ 2585.947779][T10390] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2585.947791][T10390] ? kvm_vcpu_stats_release+0x80/0x80 [ 2585.947801][T10390] __do_compat_sys_ioctl+0x2bf/0x330 [ 2585.947812][T10390] __do_fast_syscall_32+0x61/0xe0 [ 2585.947822][T10390] do_fast_syscall_32+0x33/0x70 [ 2585.947831][T10390] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2585.947843][T10390] RIP: 0023:0xf7f91579 [ 2585.947851][T10390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2585.947860][T10390] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2585.947870][T10390] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2585.947876][T10390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2585.947882][T10390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2586.013879][T10390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2586.013894][T10390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2586.013910][T10390] 21:25:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 22) 21:25:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1b0000001800030700000000000000000a00000000000000000000000800060000000000040008806c1c7d2f881c3ecdbfe3e408af9a27efa2f0514db78fc89e1140b9a57d515d0e1336935b9e9fed5153dfe6137d861700d8e9698189cbe500d0b27b93a6bb8f72ff1a0a56b52d313afac42b2c1185cbc57662e47e5c4e3fb2fde40888ffe3114e625dd5c78082393c2d2e3610b5c30aca1ddabbf8bc8a1d827fcb06279459704dc762826a014224571bdd2319e903"], 0x28}}, 0x0) socketpair(0x2d, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) io_setup(0x1ff, &(0x7f0000000000)=0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0]) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x400000, 0x0) r9 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000007c0)={0x4000000000000000, r3, 0x2}) io_submit(r5, 0x3, &(0x7f0000000840)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x7987, r7, &(0x7f0000000540)="21eef430b2754a183847f4ba53c7d5eda479754a8f99363d9abf574e91cd2bdb91f8e5c4b700d04b8972980244bde5f1540c2af90fe3b09d0b70eb25d23b04a3a4edf4b3e9d9cc86ff175b3e3bd72534cd4bc35b19bda790a941b4b72f9a6b0cc9c86e5db91603ece544b6ccc64183f8f52f35cc72aa0f19a078f31cf9bc01a0486db96709996ff2232407b0c73b8bd9563fc0899b66beb6eeb70fed1a09", 0x9e, 0x1, 0x0, 0x0, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x1cda, r9, &(0x7f0000000640)="536800ba9e59cb16e5482f044d34b70abf02232fe718ba9237bfe80551a1dd82d0f839e92e9a21e1f6e8c69aa275c40ad6f11dc89083527876ecb5ef33cec138cf9e5a2b2984c8ff8cd6696968430b2e02b53de413427685", 0x58, 0xfffffffffffffffe, 0x0, 0x2, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x4000, r3, &(0x7f0000000700)="172595fa83a929385b8bdfeccbdab3074dc20088c171d78dc142174d4bdb3f8dd284a910d444727171ff58a681d40078ac69fc840baa39a3479badc66a955edfee41e956c0ecc2494e4104b732cb8ad10b0dde542288c8033ffabba1878547d9c7130f20a01f6c707ec8b4ecd9530bb6f28e8c8c28a3b5e998413c9566558ee5fbfeef9169d589dc454df36e2866553cf0ea666e3ffe4157366e02", 0x9b, 0x7, 0x0, 0x2, r10}]) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x45}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r11, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x51}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = getpid() r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x62c, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5a670ccc, 0x6d}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x4, 0x32, 0x5, 0x10e0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x1, 0x4, 0xb, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa1}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x8000, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0x1, 0x1, 0x1, r2], &(0x7f00000002c0)=[{0x0, 0x5, 0x7, 0x12}, {0x1, 0x5, 0x2, 0xc}, {0x4, 0x1, 0x0, 0x9}, {0x1, 0x2, 0x5, 0x9}], 0x10, 0xffffffff}, 0x90) 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x4, 0x32, 0x5, 0x10e0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x1, 0x4, 0xb, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa1}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x8000, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0x1, 0x1, 0x1, r2], &(0x7f00000002c0)=[{0x0, 0x5, 0x7, 0x12}, {0x1, 0x5, 0x2, 0xc}, {0x4, 0x1, 0x0, 0x9}, {0x1, 0x2, 0x5, 0x9}], 0x10, 0xffffffff}, 0x90) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x51}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = getpid() r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x62c, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5a670ccc, 0x6d}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) [ 2586.094932][T10415] FAULT_INJECTION: forcing a failure. 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x4, 0x32, 0x5, 0x10e0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x1, 0x4, 0xb, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa1}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x8000, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0x1, 0x1, 0x1, r2], &(0x7f00000002c0)=[{0x0, 0x5, 0x7, 0x12}, {0x1, 0x5, 0x2, 0xc}, {0x4, 0x1, 0x0, 0x9}, {0x1, 0x2, 0x5, 0x9}], 0x10, 0xffffffff}, 0x90) [ 2586.094932][T10415] name failslab, interval 1, probability 0, space 0, times 0 [ 2586.100147][T10415] CPU: 3 PID: 10415 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2586.103962][T10415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2586.103970][T10415] Call Trace: [ 2586.103974][T10415] [ 2586.103978][T10415] dump_stack_lvl+0x125/0x1b0 [ 2586.103992][T10415] should_fail_ex+0x496/0x5b0 [ 2586.114445][T10415] should_failslab+0x9/0x20 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x51}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = getpid() r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x62c, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5a670ccc, 0x6d}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x51}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) getpid() (async) getpid() (async) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000300)={0x10000, r5}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x62c, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5a670ccc, 0x6d}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) [ 2586.114461][T10415] __kmem_cache_alloc_node+0x2fd/0x350 [ 2586.114476][T10415] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 2586.120476][T10415] kmalloc_trace+0x25/0xe0 [ 2586.120494][T10415] kvm_dev_ioctl+0x9b6/0x1c20 [ 2586.120507][T10415] ? bit_wait_timeout+0x160/0x160 [ 2586.120519][T10415] ? __fget_files+0x279/0x410 [ 2586.120529][T10415] ? kvm_vcpu_stats_release+0x80/0x80 [ 2586.120541][T10415] ? __fget_files+0x279/0x410 [ 2586.120551][T10415] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2586.120564][T10415] ? kvm_vcpu_stats_release+0x80/0x80 [ 2586.137154][T10415] __do_compat_sys_ioctl+0x2bf/0x330 [ 2586.137179][T10415] __do_fast_syscall_32+0x61/0xe0 [ 2586.137195][T10415] do_fast_syscall_32+0x33/0x70 [ 2586.137209][T10415] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2586.137227][T10415] RIP: 0023:0xf7f91579 [ 2586.148095][T10415] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2586.148112][T10415] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2586.148126][T10415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2586.148132][T10415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2586.148142][T10415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2586.148147][T10415] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2586.148153][T10415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2586.148162][T10415] 21:25:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 23) 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x4, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="101d00000b0a3637fa40755176411505632a0e2d4c600a3e7743e004249f76771eb53e803afc826964b0e14cee9d7f2395ad35ce19c70373ab21541ee4e021", @ANYRES16=r3, @ANYBLOB="300029bd7000fcdbdf255500000008000100670000000c0099000000008031000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8021) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40020}, 0x20000880) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000868dd7000fd7591c6875cdbc1007f0000a10f0741a90f3b90ec47444755339543dd214f409dee751414214ef889", @ANYRES32, @ANYBLOB="060048004a000000060048001a00000014005500b787b68dfe25e3e580c0fec8434300190a00f50008021100000100002200340011d3d8aa5e63acae2ca0780d6ce089baf11dfad9e6c558ce1e0745783f730000140055006c44b4e3854c4762547c4689f79a2f210600480024000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044081) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000)={0xffffffffffffffff}, 0x3, {0xa, 0x4e23, 0x7, @local, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0xffffff16, 0xfa00, {&(0x7f0000000100), r7}}, 0xb) 21:25:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0xc0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1b0000001800030700000000000000000a00000000000000000000000800060000000000040008806c1c7d2f881c3ecdbfe3e408af9a27efa2f0514db78fc89e1140b9a57d515d0e1336935b9e9fed5153dfe6137d861700d8e9698189cbe500d0b27b93a6bb8f72ff1a0a56b52d313afac42b2c1185cbc57662e47e5c4e3fb2fde40888ffe3114e625dd5c78082393c2d2e3610b5c30aca1ddabbf8bc8a1d827fcb06279459704dc762826a014224571bdd2319e903"], 0x28}}, 0x0) socketpair(0x2d, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) io_setup(0x1ff, &(0x7f0000000000)=0x0) (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0]) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x400000, 0x0) r9 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000007c0)={0x4000000000000000, r3, 0x2}) io_submit(r5, 0x3, &(0x7f0000000840)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x7987, r7, &(0x7f0000000540)="21eef430b2754a183847f4ba53c7d5eda479754a8f99363d9abf574e91cd2bdb91f8e5c4b700d04b8972980244bde5f1540c2af90fe3b09d0b70eb25d23b04a3a4edf4b3e9d9cc86ff175b3e3bd72534cd4bc35b19bda790a941b4b72f9a6b0cc9c86e5db91603ece544b6ccc64183f8f52f35cc72aa0f19a078f31cf9bc01a0486db96709996ff2232407b0c73b8bd9563fc0899b66beb6eeb70fed1a09", 0x9e, 0x1, 0x0, 0x0, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x1cda, r9, &(0x7f0000000640)="536800ba9e59cb16e5482f044d34b70abf02232fe718ba9237bfe80551a1dd82d0f839e92e9a21e1f6e8c69aa275c40ad6f11dc89083527876ecb5ef33cec138cf9e5a2b2984c8ff8cd6696968430b2e02b53de413427685", 0x58, 0xfffffffffffffffe, 0x0, 0x2, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x4000, r3, &(0x7f0000000700)="172595fa83a929385b8bdfeccbdab3074dc20088c171d78dc142174d4bdb3f8dd284a910d444727171ff58a681d40078ac69fc840baa39a3479badc66a955edfee41e956c0ecc2494e4104b732cb8ad10b0dde542288c8033ffabba1878547d9c7130f20a01f6c707ec8b4ecd9530bb6f28e8c8c28a3b5e998413c9566558ee5fbfeef9169d589dc454df36e2866553cf0ea666e3ffe4157366e02", 0x9b, 0x7, 0x0, 0x2, r10}]) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x45}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r11, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_GET_TSC(0x19, &(0x7f0000000480)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xffffff69, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0x0, 0x99, {0x101, 0x1f}}}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8aa66b5d008cafe4}, 0x4008000) socketpair(0x1d, 0x80000, 0xfffff000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$vcsa(0xffffff9c, &(0x7f00000004c0), 0xc401, 0x0) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000500)={0x48d3c5a5, r5}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)={0x2b8, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xb7, 0x5b, "707f3f4790c7d7943d25bf37b689195f297741731fa02102d37ce38bc2ce9127386f70cfa4e8c9b7bfea0fc74d50aa6476fbb6c7aed82a05ea6c0e89707df303ed441f8b59ef6f058e4d533386113528c3517d18c2eec2858fc76e94f9daa919e57db6e04e38856b4dc88942809053e1a8f6c0656ca7234624322eef53360452ce7876b1a3b6eaa005c8620135aebe31500da31ca9131f1b8407dab631acc1a85d2dfebd00855f364870e93b18aa18c537ef6a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe8}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0xc9, 0x5b, "aca3b3754c90e44dc9efd21867a0dac3626e87095dd48b0d418764de74c9899f52f5604b4e49e462333550889c7dd11729b8c0eec0bb9907b409445b41d1d7737e091bc8d8d5465ed9b20391a81a5736e9b77c0b0fd0d3e876417587a91135c85e7bab54eac883e5135d5725e5ff46c52d2cd1c16cc22e5b1f39e8e50fe3d415b5718511514487e24ef1a89633b0187ebb9e46b830da64d625c7ae973fb3ac374e549bb2ae2b6abcdfd94472b157e62302398199a1f95f2aef213e9d9305393fc659dc5ea6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x2b8}, 0x1, 0x0, 0x0, 0xc1}, 0x40010) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_GET_TSC(0x19, &(0x7f0000000480)) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xffffff69, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0x0, 0x99, {0x101, 0x1f}}}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8aa66b5d008cafe4}, 0x4008000) socketpair(0x1d, 0x80000, 0xfffff000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$vcsa(0xffffff9c, &(0x7f00000004c0), 0xc401, 0x0) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000500)={0x48d3c5a5, r5}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)={0x2b8, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xb7, 0x5b, "707f3f4790c7d7943d25bf37b689195f297741731fa02102d37ce38bc2ce9127386f70cfa4e8c9b7bfea0fc74d50aa6476fbb6c7aed82a05ea6c0e89707df303ed441f8b59ef6f058e4d533386113528c3517d18c2eec2858fc76e94f9daa919e57db6e04e38856b4dc88942809053e1a8f6c0656ca7234624322eef53360452ce7876b1a3b6eaa005c8620135aebe31500da31ca9131f1b8407dab631acc1a85d2dfebd00855f364870e93b18aa18c537ef6a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe8}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "2115a17802a66b62c18183efd1565b93a488bef8df7aac3940f0640e9aeb773c175cce522d255b1528f99bcd166f425cac5e8187ca60fce834da8c4eceac1129301d2dcaa6219e2c320f9cb9f7577895021d1d85e1c0c67372d785d2708eaebb11beb47a0a2a4e3bb8d41fccf8f868c6b656aa35341c0cec2323bceb658a20931fd1033cf5b9483ee59eb378cd69624def81ffd07b493ddfaf5014fb789a9662b2fe3b9b2d8bfa6790c57facb5dc31c4f93c38b7ef5c3a956f6f97f676530394384e988bf5ab8647dc6a3a7a1bc8f61f660f5cc61d22d96a24969e3e213c987ff1c2d860ecfa950815b1aff65d60e315825f655953fe2cb4e2b396"}, @NL80211_ATTR_FRAME_MATCH={0xc9, 0x5b, "aca3b3754c90e44dc9efd21867a0dac3626e87095dd48b0d418764de74c9899f52f5604b4e49e462333550889c7dd11729b8c0eec0bb9907b409445b41d1d7737e091bc8d8d5465ed9b20391a81a5736e9b77c0b0fd0d3e876417587a91135c85e7bab54eac883e5135d5725e5ff46c52d2cd1c16cc22e5b1f39e8e50fe3d415b5718511514487e24ef1a89633b0187ebb9e46b830da64d625c7ae973fb3ac374e549bb2ae2b6abcdfd94472b157e62302398199a1f95f2aef213e9d9305393fc659dc5ea6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x2b8}, 0x1, 0x0, 0x0, 0xc1}, 0x40010) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000480)) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xffffff69, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0x0, 0x99, {0x101, 0x1f}}}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8aa66b5d008cafe4}, 0x4008000) (async) socketpair(0x1d, 0x80000, 0xfffff000, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) openat$vcsa(0xffffff9c, &(0x7f00000004c0), 0xc401, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000500)={0x48d3c5a5, r5}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)={0x2b8, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xb7, 0x5b, "707f3f4790c7d7943d25bf37b689195f297741731fa02102d37ce38bc2ce9127386f70cfa4e8c9b7bfea0fc74d50aa6476fbb6c7aed82a05ea6c0e89707df303ed441f8b59ef6f058e4d533386113528c3517d18c2eec2858fc76e94f9daa919e57db6e04e38856b4dc88942809053e1a8f6c0656ca7234624322eef53360452ce7876b1a3b6eaa005c8620135aebe31500da31ca9131f1b8407dab631acc1a85d2dfebd00855f364870e93b18aa18c537ef6a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe8}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0xc9, 0x5b, "aca3b3754c90e44dc9efd21867a0dac3626e87095dd48b0d418764de74c9899f52f5604b4e49e462333550889c7dd11729b8c0eec0bb9907b409445b41d1d7737e091bc8d8d5465ed9b20391a81a5736e9b77c0b0fd0d3e876417587a91135c85e7bab54eac883e5135d5725e5ff46c52d2cd1c16cc22e5b1f39e8e50fe3d415b5718511514487e24ef1a89633b0187ebb9e46b830da64d625c7ae973fb3ac374e549bb2ae2b6abcdfd94472b157e62302398199a1f95f2aef213e9d9305393fc659dc5ea6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x2b8}, 0x1, 0x0, 0x0, 0xc1}, 0x40010) (async) 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x4, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="101d00000b0a3637fa40755176411505632a0e2d4c600a3e7743e004249f76771eb53e803afc826964b0e14cee9d7f2395ad35ce19c70373ab21541ee4e021", @ANYRES16=r3, @ANYBLOB="300029bd7000fcdbdf255500000008000100670000000c0099000000008031000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8021) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40020}, 0x20000880) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000868dd7000fd7591c6875cdbc1007f0000a10f0741a90f3b90ec47444755339543dd214f409dee751414214ef889", @ANYRES32, @ANYBLOB="060048004a000000060048001a00000014005500b787b68dfe25e3e580c0fec8434300190a00f50008021100000100002200340011d3d8aa5e63acae2ca0780d6ce089baf11dfad9e6c558ce1e0745783f730000140055006c44b4e3854c4762547c4689f79a2f210600480024000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044081) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000)={0xffffffffffffffff}, 0x3, {0xa, 0x4e23, 0x7, @local, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0xffffff16, 0xfa00, {&(0x7f0000000100), r7}}, 0xb) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x4, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="101d00000b0a3637fa40755176411505632a0e2d4c600a3e7743e004249f76771eb53e803afc826964b0e14cee9d7f2395ad35ce19c70373ab21541ee4e021", @ANYRES16=r3, @ANYBLOB="300029bd7000fcdbdf255500000008000100670000000c0099000000008031000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8021) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40020}, 0x20000880) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000868dd7000fd7591c6875cdbc1007f0000a10f0741a90f3b90ec47444755339543dd214f409dee751414214ef889", @ANYRES32, @ANYBLOB="060048004a000000060048001a00000014005500b787b68dfe25e3e580c0fec8434300190a00f50008021100000100002200340011d3d8aa5e63acae2ca0780d6ce089baf11dfad9e6c558ce1e0745783f730000140055006c44b4e3854c4762547c4689f79a2f210600480024000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044081) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e23, 0x7, @local, 0x9}}}, 0x38) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0xffffff16, 0xfa00, {&(0x7f0000000100), r7}}, 0xb) (async) [ 2586.248723][T10440] FAULT_INJECTION: forcing a failure. [ 2586.248723][T10440] name failslab, interval 1, probability 0, space 0, times 0 [ 2586.255852][T10440] CPU: 0 PID: 10440 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 21:25:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0xc0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1b0000001800030700000000000000000a00000000000000000000000800060000000000040008806c1c7d2f881c3ecdbfe3e408af9a27efa2f0514db78fc89e1140b9a57d515d0e1336935b9e9fed5153dfe6137d861700d8e9698189cbe500d0b27b93a6bb8f72ff1a0a56b52d313afac42b2c1185cbc57662e47e5c4e3fb2fde40888ffe3114e625dd5c78082393c2d2e3610b5c30aca1ddabbf8bc8a1d827fcb06279459704dc762826a014224571bdd2319e903"], 0x28}}, 0x0) socketpair(0x2d, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) io_setup(0x1ff, &(0x7f0000000000)=0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0]) (async) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0]) socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x400000, 0x0) r9 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000007c0)={0x4000000000000000, r3, 0x2}) io_submit(r5, 0x3, &(0x7f0000000840)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x7987, r7, &(0x7f0000000540)="21eef430b2754a183847f4ba53c7d5eda479754a8f99363d9abf574e91cd2bdb91f8e5c4b700d04b8972980244bde5f1540c2af90fe3b09d0b70eb25d23b04a3a4edf4b3e9d9cc86ff175b3e3bd72534cd4bc35b19bda790a941b4b72f9a6b0cc9c86e5db91603ece544b6ccc64183f8f52f35cc72aa0f19a078f31cf9bc01a0486db96709996ff2232407b0c73b8bd9563fc0899b66beb6eeb70fed1a09", 0x9e, 0x1, 0x0, 0x0, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x1cda, r9, &(0x7f0000000640)="536800ba9e59cb16e5482f044d34b70abf02232fe718ba9237bfe80551a1dd82d0f839e92e9a21e1f6e8c69aa275c40ad6f11dc89083527876ecb5ef33cec138cf9e5a2b2984c8ff8cd6696968430b2e02b53de413427685", 0x58, 0xfffffffffffffffe, 0x0, 0x2, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x4000, r3, &(0x7f0000000700)="172595fa83a929385b8bdfeccbdab3074dc20088c171d78dc142174d4bdb3f8dd284a910d444727171ff58a681d40078ac69fc840baa39a3479badc66a955edfee41e956c0ecc2494e4104b732cb8ad10b0dde542288c8033ffabba1878547d9c7130f20a01f6c707ec8b4ecd9530bb6f28e8c8c28a3b5e998413c9566558ee5fbfeef9169d589dc454df36e2866553cf0ea666e3ffe4157366e02", 0x9b, 0x7, 0x0, 0x2, r10}]) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x45}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r11, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 2586.260523][T10440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2586.260536][T10440] Call Trace: [ 2586.260544][T10440] [ 2586.260550][T10440] dump_stack_lvl+0x125/0x1b0 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_GET_TSC(0x19, &(0x7f0000000480)) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xffffff69, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0x0, 0x99, {0x101, 0x1f}}}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8aa66b5d008cafe4}, 0x4008000) socketpair(0x1d, 0x80000, 0xfffff000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r4 = openat$vcsa(0xffffff9c, &(0x7f00000004c0), 0xc401, 0x0) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000500)={0x48d3c5a5, r5}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)={0x2b8, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xb7, 0x5b, "707f3f4790c7d7943d25bf37b689195f297741731fa02102d37ce38bc2ce9127386f70cfa4e8c9b7bfea0fc74d50aa6476fbb6c7aed82a05ea6c0e89707df303ed441f8b59ef6f058e4d533386113528c3517d18c2eec2858fc76e94f9daa919e57db6e04e38856b4dc88942809053e1a8f6c0656ca7234624322eef53360452ce7876b1a3b6eaa005c8620135aebe31500da31ca9131f1b8407dab631acc1a85d2dfebd00855f364870e93b18aa18c537ef6a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe8}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "2115a17802a66b62c18183efd1565b93a488bef8df7aac3940f0640e9aeb773c175cce522d255b1528f99bcd166f425cac5e8187ca60fce834da8c4eceac1129301d2dcaa6219e2c320f9cb9f7577895021d1d85e1c0c67372d785d2708eaebb11beb47a0a2a4e3bb8d41fccf8f868c6b656aa35341c0cec2323bceb658a20931fd1033cf5b9483ee59eb378cd69624def81ffd07b493ddfaf5014fb789a9662b2fe3b9b2d8bfa6790c57facb5dc31c4f93c38b7ef5c3a956f6f97f676530394384e988bf5ab8647dc6a3a7a1bc8f61f660f5cc61d22d96a24969e3e213c987ff1c2d860ecfa950815b1aff65d60e315825f655953fe2cb4e2b396"}, @NL80211_ATTR_FRAME_MATCH={0xc9, 0x5b, "aca3b3754c90e44dc9efd21867a0dac3626e87095dd48b0d418764de74c9899f52f5604b4e49e462333550889c7dd11729b8c0eec0bb9907b409445b41d1d7737e091bc8d8d5465ed9b20391a81a5736e9b77c0b0fd0d3e876417587a91135c85e7bab54eac883e5135d5725e5ff46c52d2cd1c16cc22e5b1f39e8e50fe3d415b5718511514487e24ef1a89633b0187ebb9e46b830da64d625c7ae973fb3ac374e549bb2ae2b6abcdfd94472b157e62302398199a1f95f2aef213e9d9305393fc659dc5ea6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x2b8}, 0x1, 0x0, 0x0, 0xc1}, 0x40010) [ 2586.260573][T10440] should_fail_ex+0x496/0x5b0 [ 2586.260606][T10440] should_failslab+0x9/0x20 [ 2586.260624][T10440] __kmem_cache_alloc_node+0x2fd/0x350 [ 2586.260652][T10440] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 2586.260676][T10440] kmalloc_trace+0x25/0xe0 [ 2586.260703][T10440] kvm_dev_ioctl+0x9b6/0x1c20 [ 2586.260726][T10440] ? bit_wait_timeout+0x160/0x160 [ 2586.260748][T10440] ? __fget_files+0x279/0x410 [ 2586.260765][T10440] ? kvm_vcpu_stats_release+0x80/0x80 [ 2586.260787][T10440] ? __fget_files+0x279/0x410 [ 2586.260807][T10440] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2586.260829][T10440] ? kvm_vcpu_stats_release+0x80/0x80 [ 2586.260850][T10440] __do_compat_sys_ioctl+0x2bf/0x330 [ 2586.260870][T10440] __do_fast_syscall_32+0x61/0xe0 [ 2586.260888][T10440] do_fast_syscall_32+0x33/0x70 [ 2586.260906][T10440] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2586.260930][T10440] RIP: 0023:0xf7f91579 [ 2586.260944][T10440] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2586.260962][T10440] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2586.260979][T10440] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2586.260991][T10440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 21:25:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 24) [ 2586.261007][T10440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2586.261019][T10440] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2586.261030][T10440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2586.261048][T10440] 21:25:05 executing program 1: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf25070000000800010063000003080005000300000008000500080000000400cc000800050001000000"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x703, 0x0, 0x0, {0xa, 0x10}, [@RTA_IIF={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x0) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getuid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newroute={0x70, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_GATEWAY={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_PREF={0x5, 0x14, 0x40}, @RTA_OIF={0x8}, @RTA_EXPIRES={0x8, 0x17, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @broadcast}}, @RTA_MULTIPATH={0xc, 0x9, {0xcbc, 0x26, 0x3}}, @RTA_UID={0x8, 0x19, r1}]}, 0x70}}, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) [ 2586.353057][T10467] FAULT_INJECTION: forcing a failure. 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x4, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="101d00000b0a3637fa40755176411505632a0e2d4c600a3e7743e004249f76771eb53e803afc826964b0e14cee9d7f2395ad35ce19c70373ab21541ee4e021", @ANYRES16=r3, @ANYBLOB="300029bd7000fcdbdf255500000008000100670000000c0099000000008031000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8021) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40020}, 0x20000880) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000868dd7000fd7591c6875cdbc1007f0000a10f0741a90f3b90ec47444755339543dd214f409dee751414214ef889", @ANYRES32, @ANYBLOB="060048004a000000060048001a00000014005500b787b68dfe25e3e580c0fec8434300190a00f50008021100000100002200340011d3d8aa5e63acae2ca0780d6ce089baf11dfad9e6c558ce1e0745783f730000140055006c44b4e3854c4762547c4689f79a2f210600480024000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044081) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000)={0xffffffffffffffff}, 0x3, {0xa, 0x4e23, 0x7, @local, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0xffffff16, 0xfa00, {&(0x7f0000000100), r7}}, 0xb) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x4, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="101d00000b0a3637fa40755176411505632a0e2d4c600a3e7743e004249f76771eb53e803afc826964b0e14cee9d7f2395ad35ce19c70373ab21541ee4e021", @ANYRES16=r3, @ANYBLOB="300029bd7000fcdbdf255500000008000100670000000c0099000000008031000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8021) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40020}, 0x20000880) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000868dd7000fd7591c6875cdbc1007f0000a10f0741a90f3b90ec47444755339543dd214f409dee751414214ef889", @ANYRES32, @ANYBLOB="060048004a000000060048001a00000014005500b787b68dfe25e3e580c0fec8434300190a00f50008021100000100002200340011d3d8aa5e63acae2ca0780d6ce089baf11dfad9e6c558ce1e0745783f730000140055006c44b4e3854c4762547c4689f79a2f210600480024000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044081) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e23, 0x7, @local, 0x9}}}, 0x38) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0xffffff16, 0xfa00, {&(0x7f0000000100), r7}}, 0xb) (async) [ 2586.353057][T10467] name failslab, interval 1, probability 0, space 0, times 0 [ 2586.358131][T10467] CPU: 2 PID: 10467 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2586.361924][T10467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2586.365711][T10467] Call Trace: [ 2586.367055][T10467] [ 2586.368208][T10467] dump_stack_lvl+0x125/0x1b0 [ 2586.370061][T10467] should_fail_ex+0x496/0x5b0 [ 2586.371906][T10467] should_failslab+0x9/0x20 [ 2586.373631][T10467] __kmem_cache_alloc_node+0x2fd/0x350 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getuid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newroute={0x70, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_GATEWAY={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_PREF={0x5, 0x14, 0x40}, @RTA_OIF={0x8}, @RTA_EXPIRES={0x8, 0x17, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @broadcast}}, @RTA_MULTIPATH={0xc, 0x9, {0xcbc, 0x26, 0x3}}, @RTA_UID={0x8, 0x19, r1}]}, 0x70}}, 0x0) (async) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) [ 2586.373650][T10467] ? alloc_workqueue+0x1d4/0x1490 [ 2586.373667][T10467] kmalloc_trace+0x25/0xe0 [ 2586.373684][T10467] alloc_workqueue+0x1d4/0x1490 21:25:05 executing program 1: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf25070000000800010063000003080005000300000008000500080000000400cc000800050001000000"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x703, 0x0, 0x0, {0xa, 0x10}, [@RTA_IIF={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf25070000000800010063000003080005000300000008000500080000000400cc000800050001000000"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x703, 0x0, 0x0, {0xa, 0x10}, [@RTA_IIF={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x0) (async) [ 2586.381800][T10467] ? workqueue_sysfs_register+0x400/0x400 [ 2586.384187][T10467] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2586.386120][T10467] kvm_mmu_init_vm+0x248/0x2e0 [ 2586.386139][T10467] kvm_arch_init_vm+0x39/0x720 [ 2586.389805][T10467] ? __kasan_kmalloc+0xa2/0xb0 [ 2586.389826][T10467] kvm_dev_ioctl+0xa31/0x1c20 [ 2586.393889][T10467] ? bit_wait_timeout+0x160/0x160 [ 2586.393906][T10467] ? __fget_files+0x279/0x410 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getuid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newroute={0x70, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_GATEWAY={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_PREF={0x5, 0x14, 0x40}, @RTA_OIF={0x8}, @RTA_EXPIRES={0x8, 0x17, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @broadcast}}, @RTA_MULTIPATH={0xc, 0x9, {0xcbc, 0x26, 0x3}}, @RTA_UID={0x8, 0x19, r1}]}, 0x70}}, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) (async) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) [ 2586.393917][T10467] ? kvm_vcpu_stats_release+0x80/0x80 [ 2586.400160][T10467] ? __fget_files+0x279/0x410 [ 2586.400175][T10467] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2586.404134][T10467] ? kvm_vcpu_stats_release+0x80/0x80 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10}, 0x18) [ 2586.406145][T10467] __do_compat_sys_ioctl+0x2bf/0x330 [ 2586.408174][T10467] __do_fast_syscall_32+0x61/0xe0 [ 2586.409973][T10467] do_fast_syscall_32+0x33/0x70 [ 2586.411731][T10467] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2586.413993][T10467] RIP: 0023:0xf7f91579 [ 2586.415460][T10467] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2586.422403][T10467] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2586.425375][T10467] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2586.428213][T10467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2586.431057][T10467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2586.433921][T10467] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2586.436749][T10467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2586.439567][T10467] 21:25:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 25) 21:25:05 executing program 1: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf25070000000800010063000003080005000300000008000500080000000400cc000800050001000000"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x703, 0x0, 0x0, {0xa, 0x10}, [@RTA_IIF={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x0) 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10}, 0x18) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10}, 0x18) (async) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x8004) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x2002c801) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:25:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001500000126bd7000fddbdf250a08c8fd", @ANYRES32=0x0, @ANYBLOB="080009000300000008000a000400000014000600030000000001000007000000010000801400060001000000060053e1f67b1ed2d9b1000008000900e90500000800080005020000"], 0x60}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000040) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x8004) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x2002c801) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10}, 0x18) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10}, 0x18) [ 2586.534863][T10503] FAULT_INJECTION: forcing a failure. [ 2586.534863][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 2586.541653][T10503] CPU: 1 PID: 10503 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 21:25:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001500000126bd7000fddbdf250a08c8fd", @ANYRES32=0x0, @ANYBLOB="080009000300000008000a000400000014000600030000000001000007000000010000801400060001000000060053e1f67b1ed2d9b1000008000900e90500000800080005020000"], 0x60}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000040) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001500000126bd7000fddbdf250a08c8fd", @ANYRES32=0x0, @ANYBLOB="080009000300000008000a000400000014000600030000000001000007000000010000801400060001000000060053e1f67b1ed2d9b1000008000900e90500000800080005020000"], 0x60}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000040) (async) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) [ 2586.546317][T10503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2586.550905][T10503] Call Trace: [ 2586.550914][T10503] [ 2586.550921][T10503] dump_stack_lvl+0x125/0x1b0 [ 2586.550945][T10503] should_fail_ex+0x496/0x5b0 [ 2586.550976][T10503] should_failslab+0x9/0x20 [ 2586.550995][T10503] __kmem_cache_alloc_node+0x2fd/0x350 [ 2586.551020][T10503] ? kasprintf+0xc8/0x100 [ 2586.551038][T10503] ? kasprintf+0xc8/0x100 [ 2586.551054][T10503] __kmalloc_node_track_caller+0x50/0x100 [ 2586.551071][T10503] kvasprintf+0xbd/0x150 [ 2586.551093][T10503] ? bust_spinlocks+0xe0/0xe0 [ 2586.551112][T10503] ? fill_ptr_key+0x30/0x30 [ 2586.551131][T10503] ? preempt_count_add+0x72/0x140 [ 2586.551150][T10503] kasprintf+0xc8/0x100 [ 2586.551168][T10503] ? kvasprintf_const+0x190/0x190 [ 2586.551187][T10503] ? free_zapped_rcu+0x290/0x290 [ 2586.551207][T10503] ? lockdep_init_map_type+0x16d/0x7c0 [ 2586.551230][T10503] alloc_workqueue+0x590/0x1490 [ 2586.551256][T10503] ? workqueue_sysfs_register+0x400/0x400 [ 2586.551282][T10503] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2586.551299][T10503] kvm_mmu_init_vm+0x248/0x2e0 [ 2586.551322][T10503] kvm_arch_init_vm+0x39/0x720 [ 2586.551341][T10503] ? __kasan_kmalloc+0xa2/0xb0 [ 2586.551364][T10503] kvm_dev_ioctl+0xa31/0x1c20 [ 2586.601160][T10503] ? bit_wait_timeout+0x160/0x160 [ 2586.603358][T10503] ? __fget_files+0x279/0x410 [ 2586.605480][T10503] ? kvm_vcpu_stats_release+0x80/0x80 [ 2586.607831][T10503] ? __fget_files+0x279/0x410 [ 2586.609930][T10503] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2586.612146][T10503] ? kvm_vcpu_stats_release+0x80/0x80 [ 2586.614478][T10503] __do_compat_sys_ioctl+0x2bf/0x330 [ 2586.616768][T10503] __do_fast_syscall_32+0x61/0xe0 [ 2586.618639][T10503] do_fast_syscall_32+0x33/0x70 [ 2586.620843][T10503] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2586.623267][T10503] RIP: 0023:0xf7f91579 [ 2586.624736][T10503] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2586.632821][T10503] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2586.635791][T10503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2586.639198][T10503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2586.642621][T10503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2586.646120][T10503] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2586.649606][T10503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2586.653152][T10503] 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0x18) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x8004) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x2002c801) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:25:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001500000126bd7000fddbdf250a08c8fd", @ANYRES32=0x0, @ANYBLOB="080009000300000008000a000400000014000600030000000001000007000000010000801400060001000000060053e1f67b1ed2d9b1000008000900e90500000800080005020000"], 0x60}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000040) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1b, 0x18, 0x703, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) 21:25:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 26) 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0x18) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '{:\xf2\x00'}, 0xa) 21:25:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001800030700000000000000000a000000000000000000000800060000000000040008806df93a3281b1ca6aea7fe34fae22a6c7b963a913ae2eb7783e9a1976f8e787fc0d0892d3ca0b82a0410b2206c112a7e96672b780b49ee84ff441180d680809b4f8b8a6e38d4301da661c50ecec1f0f76a180230f1789c3fde38ac1bd77ad8b0998125c417c125b8ede22cba0c31fdd52ed55620eff8c348bc5f5ea9b13ff50ff118aad872beee66b9cf9df19a1ad93257578f47b64dac5bd"], 0x28}}, 0x0) 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '{:\xf2\x00'}, 0xa) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x80400, 0x0) (async) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) (async) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '{:\xf2\x00'}, 0xa) (async) [ 2586.816207][T10535] FAULT_INJECTION: forcing a failure. [ 2586.816207][T10535] name failslab, interval 1, probability 0, space 0, times 0 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10}, 0x18) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1) [ 2586.821288][T10535] CPU: 2 PID: 10535 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2586.825290][T10535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2586.828882][T10535] Call Trace: [ 2586.830089][T10535] 21:25:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001800030700000000000000000a000000000000000000000800060000000000040008806df93a3281b1ca6aea7fe34fae22a6c7b963a913ae2eb7783e9a1976f8e787fc0d0892d3ca0b82a0410b2206c112a7e96672b780b49ee84ff441180d680809b4f8b8a6e38d4301da661c50ecec1f0f76a180230f1789c3fde38ac1bd77ad8b0998125c417c125b8ede22cba0c31fdd52ed55620eff8c348bc5f5ea9b13ff50ff118aad872beee66b9cf9df19a1ad93257578f47b64dac5bd"], 0x28}}, 0x0) [ 2586.831158][T10535] dump_stack_lvl+0x125/0x1b0 [ 2586.833054][T10535] should_fail_ex+0x496/0x5b0 [ 2586.834847][T10535] should_failslab+0x9/0x20 [ 2586.834860][T10535] __kmem_cache_alloc_node+0x2fd/0x350 [ 2586.834877][T10535] ? kasprintf+0xc8/0x100 [ 2586.834891][T10535] ? kasprintf+0xc8/0x100 [ 2586.834902][T10535] __kmalloc_node_track_caller+0x50/0x100 [ 2586.844093][T10535] kvasprintf+0xbd/0x150 [ 2586.844111][T10535] ? bust_spinlocks+0xe0/0xe0 21:25:05 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) io_submit(0x0, 0x3, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)="6d313f7a4e5661448711b666eacf6f1785e919b6ef82b3fb03ce4c9df46a0445c9195e67de8d90e90a8bc9b720553f3ab0fdcdcca457d5331d8282fb12a645a039823fce65a42d76f18694196dabc84d73093eaccf0218402fa0c4645ea41e22fbde5398da9d", 0x66, 0x9, 0x0, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x40, r2, &(0x7f00000001c0)="4f4fc0497dc498e5b08cd8a38dbc74e6068fe74b5681ba101fb611b9240e6267678a5533fb42c86847d53fa3d7fc05f9ece5b35d48697522f8b932c806b7c787306d2098b32dede3d946f43bcdb471711a98e6eb1283af59e050b870717ff6e59de444df30d1586d419113d5b0abd0bf3fd4e55a4d3108dddaf770d9e545bf17699904f2f62a", 0x86, 0x9, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000280)="b127152106a1d02e34d8875cf1e8537dac2d4c84d85cdbc96de8c14956bb17203676874916", 0x25, 0x400, 0x0, 0x1}]) [ 2586.844124][T10535] ? fill_ptr_key+0x30/0x30 [ 2586.844138][T10535] ? preempt_count_add+0x72/0x140 [ 2586.851491][T10535] kasprintf+0xc8/0x100 [ 2586.853024][T10535] ? kvasprintf_const+0x190/0x190 [ 2586.854842][T10535] ? free_zapped_rcu+0x290/0x290 [ 2586.856734][T10535] ? lockdep_init_map_type+0x16d/0x7c0 [ 2586.858779][T10535] alloc_workqueue+0x590/0x1490 [ 2586.860556][T10535] ? workqueue_sysfs_register+0x400/0x400 [ 2586.860576][T10535] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2586.860588][T10535] kvm_mmu_init_vm+0x248/0x2e0 [ 2586.866567][T10535] kvm_arch_init_vm+0x39/0x720 [ 2586.866582][T10535] ? __kasan_kmalloc+0xa2/0xb0 [ 2586.866598][T10535] kvm_dev_ioctl+0xa31/0x1c20 [ 2586.866611][T10535] ? bit_wait_timeout+0x160/0x160 [ 2586.866625][T10535] ? __fget_files+0x279/0x410 [ 2586.866635][T10535] ? kvm_vcpu_stats_release+0x80/0x80 [ 2586.877764][T10535] ? __fget_files+0x279/0x410 [ 2586.879481][T10535] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2586.881382][T10535] ? kvm_vcpu_stats_release+0x80/0x80 [ 2586.883347][T10535] __do_compat_sys_ioctl+0x2bf/0x330 [ 2586.885411][T10535] __do_fast_syscall_32+0x61/0xe0 [ 2586.887278][T10535] do_fast_syscall_32+0x33/0x70 [ 2586.889158][T10535] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2586.891504][T10535] RIP: 0023:0xf7f91579 [ 2586.893033][T10535] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2586.900025][T10535] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2586.903114][T10535] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2586.906081][T10535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2586.909060][T10535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2586.912225][T10535] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2586.915374][T10535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2586.918291][T10535] 21:25:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 27) 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) io_submit(0x0, 0x3, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)="6d313f7a4e5661448711b666eacf6f1785e919b6ef82b3fb03ce4c9df46a0445c9195e67de8d90e90a8bc9b720553f3ab0fdcdcca457d5331d8282fb12a645a039823fce65a42d76f18694196dabc84d73093eaccf0218402fa0c4645ea41e22fbde5398da9d", 0x66, 0x9, 0x0, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x40, r2, &(0x7f00000001c0)="4f4fc0497dc498e5b08cd8a38dbc74e6068fe74b5681ba101fb611b9240e6267678a5533fb42c86847d53fa3d7fc05f9ece5b35d48697522f8b932c806b7c787306d2098b32dede3d946f43bcdb471711a98e6eb1283af59e050b870717ff6e59de444df30d1586d419113d5b0abd0bf3fd4e55a4d3108dddaf770d9e545bf17699904f2f62a", 0x86, 0x9, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000280)="b127152106a1d02e34d8875cf1e8537dac2d4c84d85cdbc96de8c14956bb17203676874916", 0x25, 0x400, 0x0, 0x1}]) 21:25:06 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '{:\xf2\x00'}, 0xa) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001800030700000000000000000a000000000000000000000800060000000000040008806df93a3281b1ca6aea7fe34fae22a6c7b963a913ae2eb7783e9a1976f8e787fc0d0892d3ca0b82a0410b2206c112a7e96672b780b49ee84ff441180d680809b4f8b8a6e38d4301da661c50ecec1f0f76a180230f1789c3fde38ac1bd77ad8b0998125c417c125b8ede22cba0c31fdd52ed55620eff8c348bc5f5ea9b13ff50ff118aad872beee66b9cf9df19a1ad93257578f47b64dac5bd"], 0x28}}, 0x0) 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) io_submit(0x0, 0x3, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)="6d313f7a4e5661448711b666eacf6f1785e919b6ef82b3fb03ce4c9df46a0445c9195e67de8d90e90a8bc9b720553f3ab0fdcdcca457d5331d8282fb12a645a039823fce65a42d76f18694196dabc84d73093eaccf0218402fa0c4645ea41e22fbde5398da9d", 0x66, 0x9, 0x0, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x40, r2, &(0x7f00000001c0)="4f4fc0497dc498e5b08cd8a38dbc74e6068fe74b5681ba101fb611b9240e6267678a5533fb42c86847d53fa3d7fc05f9ece5b35d48697522f8b932c806b7c787306d2098b32dede3d946f43bcdb471711a98e6eb1283af59e050b870717ff6e59de444df30d1586d419113d5b0abd0bf3fd4e55a4d3108dddaf770d9e545bf17699904f2f62a", 0x86, 0x9, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000280)="b127152106a1d02e34d8875cf1e8537dac2d4c84d85cdbc96de8c14956bb17203676874916", 0x25, 0x400, 0x0, 0x1}]) 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newroute={0xac, 0x18, 0x703, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x87, 0x8, 0x0, 0x1, "76cac28ac807c1c66881c4f7c462d7e0c9e357345f5e845e69ce83e14fec41941248fe3cb46cc48103830f40672458456dc32fa46de0b6dbbcf360464bd279542c03f88eac0f5f3a15812e6d2349f17a374f6bb095b5f04b43b2e0f4a93b4a9a53cacd8da261c3a5dbf3b61180ddaae5a277c0017af645ec2fd4c769e343e4720029f8"}]}, 0xac}}, 0x8080) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r11 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r11, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x44}, 0x1, 0x0, 0x0, 0x8082}, 0x40) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250a0000000c009900010000003700000005000800010000000800090001ac0f00"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc004) [ 2587.122877][T10566] FAULT_INJECTION: forcing a failure. 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) [ 2587.122877][T10566] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.128417][T10566] CPU: 2 PID: 10566 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2587.128432][T10566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2587.128441][T10566] Call Trace: [ 2587.128446][T10566] [ 2587.128449][T10566] dump_stack_lvl+0x125/0x1b0 [ 2587.128482][T10566] should_fail_ex+0x496/0x5b0 [ 2587.128500][T10566] should_failslab+0x9/0x20 [ 2587.128511][T10566] __kmem_cache_alloc_node+0x2fd/0x350 [ 2587.128529][T10566] ? kasprintf+0xc8/0x100 [ 2587.128542][T10566] ? kasprintf+0xc8/0x100 [ 2587.128555][T10566] __kmalloc_node_track_caller+0x50/0x100 [ 2587.128567][T10566] kvasprintf+0xbd/0x150 [ 2587.128578][T10566] ? bust_spinlocks+0xe0/0xe0 [ 2587.128590][T10566] ? __is_kernel_percpu_address+0xac/0x2a0 [ 2587.128603][T10566] ? preempt_count_add+0x72/0x140 [ 2587.128615][T10566] kasprintf+0xc8/0x100 [ 2587.128626][T10566] ? kvasprintf_const+0x190/0x190 [ 2587.128637][T10566] ? free_zapped_rcu+0x290/0x290 [ 2587.128650][T10566] ? lockdep_init_map_type+0x16d/0x7c0 [ 2587.128664][T10566] alloc_workqueue+0x590/0x1490 [ 2587.128680][T10566] ? workqueue_sysfs_register+0x400/0x400 [ 2587.128697][T10566] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2587.128709][T10566] kvm_mmu_init_vm+0x248/0x2e0 [ 2587.128724][T10566] kvm_arch_init_vm+0x39/0x720 [ 2587.128736][T10566] ? __kasan_kmalloc+0xa2/0xb0 [ 2587.128750][T10566] kvm_dev_ioctl+0xa31/0x1c20 [ 2587.128762][T10566] ? bit_wait_timeout+0x160/0x160 [ 2587.128774][T10566] ? __fget_files+0x279/0x410 [ 2587.128784][T10566] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.128796][T10566] ? __fget_files+0x279/0x410 [ 2587.128806][T10566] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2587.128818][T10566] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.128829][T10566] __do_compat_sys_ioctl+0x2bf/0x330 [ 2587.128840][T10566] __do_fast_syscall_32+0x61/0xe0 [ 2587.128850][T10566] do_fast_syscall_32+0x33/0x70 [ 2587.128859][T10566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2587.128872][T10566] RIP: 0023:0xf7f91579 [ 2587.128880][T10566] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2587.128889][T10566] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2587.128899][T10566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2587.128905][T10566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2587.128911][T10566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2587.128917][T10566] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2587.128922][T10566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2587.128931][T10566] 21:25:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 28) 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x250, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_FRAME={0x22e, 0x33, @beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xa}, @device_b, @broadcast, @initial, {0x8, 0x1}}, @ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x1}}, 0x71, @random=0x100, 0x3182, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x5, 0x9, 0x2, 0x200}}, @val={0x6, 0x2, 0x8}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0xd5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x2, 0x5}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xc6, "4b30293b0a60efb672cd393bc89145aef9bc87c7e936c19eab8058134ccd41442ce67f3aa7ce8a1bf75ed75e8e8fc23626cbb9369294f8d35982aa069d7603fa8dfb35e46008a0b5898700182786404937bca538936e569e362eb8e84016de8ae1ceb2365cbe190a37121aca5b344a6e55bcfd179cd4cdb5c88b1efb060461841edbfced841b6b98ada4a8e3da0f893d844503be59f25d433769712447068c3663f0473cb068f199199133d1defd82c40f231a69a8a0916de641f35fcc7c0bdfc884a7749c00"}, {0xdd, 0x36, "57cb6bab9090376f0085c4e0bd44bb4188a6c1d480f92a7c921170a0b361a8e4feef93da8ce983454848455a2ae6d7405ce541953936"}, {0xdd, 0xcd, "aff8f646a5905801653073aab323de88488cebe4e84cd2585c6a5b4d950045d7c5f192ff74060e363359ac7ddfeef35792af08658313a4f718cba589689c3c5e552f1e064dcb32aea91666d120989a4c55e7a8a065ddb90a45c5df3a4bd2ea18762b0693de74b9a3c62104c01567aaee2002b14a2de9de7a613101379e675f96a8a7f66334fab151d3b5b8de0ee963949b7a894443338731c0f415e5d189170908b1e420018a17a8472eba11d5bece5f6f63562f93ce198da9d2e8dd77a764855a7d18d1e89700640b4cdc9285"}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0xc044}, 0x20000000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000140)=0x53a, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = getpid() r7 = getpid() sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000300)={0x10000, r8}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003b80)={&(0x7f0000000640)={0x4c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200480c5}, 0x20002090) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x2, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x38) 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async, rerun: 32) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newroute={0xac, 0x18, 0x703, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x87, 0x8, 0x0, 0x1, "76cac28ac807c1c66881c4f7c462d7e0c9e357345f5e845e69ce83e14fec41941248fe3cb46cc48103830f40672458456dc32fa46de0b6dbbcf360464bd279542c03f88eac0f5f3a15812e6d2349f17a374f6bb095b5f04b43b2e0f4a93b4a9a53cacd8da261c3a5dbf3b61180ddaae5a277c0017af645ec2fd4c769e343e4720029f8"}]}, 0xac}}, 0x8080) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r4 = getpid() (async) r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) r11 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r11, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x44}, 0x1, 0x0, 0x0, 0x8082}, 0x40) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250a0000000c009900010000003700000005000800010000000800090001ac0f00"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc004) 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) [ 2587.299119][T10591] FAULT_INJECTION: forcing a failure. 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x250, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_FRAME={0x22e, 0x33, @beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xa}, @device_b, @broadcast, @initial, {0x8, 0x1}}, @ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x1}}, 0x71, @random=0x100, 0x3182, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x5, 0x9, 0x2, 0x200}}, @val={0x6, 0x2, 0x8}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0xd5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x2, 0x5}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xc6, "4b30293b0a60efb672cd393bc89145aef9bc87c7e936c19eab8058134ccd41442ce67f3aa7ce8a1bf75ed75e8e8fc23626cbb9369294f8d35982aa069d7603fa8dfb35e46008a0b5898700182786404937bca538936e569e362eb8e84016de8ae1ceb2365cbe190a37121aca5b344a6e55bcfd179cd4cdb5c88b1efb060461841edbfced841b6b98ada4a8e3da0f893d844503be59f25d433769712447068c3663f0473cb068f199199133d1defd82c40f231a69a8a0916de641f35fcc7c0bdfc884a7749c00"}, {0xdd, 0x36, "57cb6bab9090376f0085c4e0bd44bb4188a6c1d480f92a7c921170a0b361a8e4feef93da8ce983454848455a2ae6d7405ce541953936"}, {0xdd, 0xcd, "aff8f646a5905801653073aab323de88488cebe4e84cd2585c6a5b4d950045d7c5f192ff74060e363359ac7ddfeef35792af08658313a4f718cba589689c3c5e552f1e064dcb32aea91666d120989a4c55e7a8a065ddb90a45c5df3a4bd2ea18762b0693de74b9a3c62104c01567aaee2002b14a2de9de7a613101379e675f96a8a7f66334fab151d3b5b8de0ee963949b7a894443338731c0f415e5d189170908b1e420018a17a8472eba11d5bece5f6f63562f93ce198da9d2e8dd77a764855a7d18d1e89700640b4cdc9285"}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0xc044}, 0x20000000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000140)=0x53a, 0x8) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) (async) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r6 = getpid() r7 = getpid() sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000300)={0x10000, r8}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003b80)={&(0x7f0000000640)={0x4c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200480c5}, 0x20002090) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async, rerun: 32) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x2, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x38) (rerun: 32) [ 2587.299119][T10591] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.304047][T10591] CPU: 2 PID: 10591 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2587.307822][T10591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2587.311855][T10591] Call Trace: [ 2587.313328][T10591] [ 2587.314543][T10591] dump_stack_lvl+0x125/0x1b0 [ 2587.314569][T10591] should_fail_ex+0x496/0x5b0 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) [ 2587.314601][T10591] should_failslab+0x9/0x20 [ 2587.314619][T10591] __kmem_cache_alloc_node+0x2fd/0x350 [ 2587.314647][T10591] ? apply_wqattrs_prepare+0x137/0xa90 [ 2587.314682][T10591] kmalloc_trace+0x25/0xe0 [ 2587.314711][T10591] apply_wqattrs_prepare+0x137/0xa90 [ 2587.314739][T10591] ? preempt_count_sub+0x150/0x150 [ 2587.330024][T10591] apply_workqueue_attrs_locked+0xcb/0x150 [ 2587.330047][T10591] alloc_workqueue+0xdae/0x1490 [ 2587.330064][T10591] ? workqueue_sysfs_register+0x400/0x400 [ 2587.336408][T10591] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2587.336425][T10591] kvm_mmu_init_vm+0x248/0x2e0 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) [ 2587.336440][T10591] kvm_arch_init_vm+0x39/0x720 [ 2587.336453][T10591] ? __kasan_kmalloc+0xa2/0xb0 [ 2587.336468][T10591] kvm_dev_ioctl+0xa31/0x1c20 [ 2587.336481][T10591] ? bit_wait_timeout+0x160/0x160 [ 2587.336493][T10591] ? __fget_files+0x279/0x410 [ 2587.336503][T10591] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.336515][T10591] ? __fget_files+0x279/0x410 [ 2587.336525][T10591] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2587.336538][T10591] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.336549][T10591] __do_compat_sys_ioctl+0x2bf/0x330 [ 2587.336560][T10591] __do_fast_syscall_32+0x61/0xe0 [ 2587.336570][T10591] do_fast_syscall_32+0x33/0x70 [ 2587.336579][T10591] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2587.336592][T10591] RIP: 0023:0xf7f91579 [ 2587.336600][T10591] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2587.336611][T10591] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2587.336621][T10591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2587.336628][T10591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2587.336634][T10591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2587.336639][T10591] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2587.336645][T10591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2587.336654][T10591] 21:25:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 29) 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x250, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_FRAME={0x22e, 0x33, @beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xa}, @device_b, @broadcast, @initial, {0x8, 0x1}}, @ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x1}}, 0x71, @random=0x100, 0x3182, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x5, 0x9, 0x2, 0x200}}, @val={0x6, 0x2, 0x8}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0xd5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x2, 0x5}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xc6, "4b30293b0a60efb672cd393bc89145aef9bc87c7e936c19eab8058134ccd41442ce67f3aa7ce8a1bf75ed75e8e8fc23626cbb9369294f8d35982aa069d7603fa8dfb35e46008a0b5898700182786404937bca538936e569e362eb8e84016de8ae1ceb2365cbe190a37121aca5b344a6e55bcfd179cd4cdb5c88b1efb060461841edbfced841b6b98ada4a8e3da0f893d844503be59f25d433769712447068c3663f0473cb068f199199133d1defd82c40f231a69a8a0916de641f35fcc7c0bdfc884a7749c00"}, {0xdd, 0x36, "57cb6bab9090376f0085c4e0bd44bb4188a6c1d480f92a7c921170a0b361a8e4feef93da8ce983454848455a2ae6d7405ce541953936"}, {0xdd, 0xcd, "aff8f646a5905801653073aab323de88488cebe4e84cd2585c6a5b4d950045d7c5f192ff74060e363359ac7ddfeef35792af08658313a4f718cba589689c3c5e552f1e064dcb32aea91666d120989a4c55e7a8a065ddb90a45c5df3a4bd2ea18762b0693de74b9a3c62104c01567aaee2002b14a2de9de7a613101379e675f96a8a7f66334fab151d3b5b8de0ee963949b7a894443338731c0f415e5d189170908b1e420018a17a8472eba11d5bece5f6f63562f93ce198da9d2e8dd77a764855a7d18d1e89700640b4cdc9285"}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0xc044}, 0x20000000) (async, rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000140)=0x53a, 0x8) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x10000000}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c9576379fe3d033e6b1f4a436b05b950"}]}, 0x34}}, 0x0) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = getpid() r7 = getpid() sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000300)={0x10000, r8}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003b80)={&(0x7f0000000640)={0x4c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200480c5}, 0x20002090) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x2, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x38) 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)=""/31) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x3bbc1bd6ef06a3a3}}, 0x1c}}, 0x0) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newroute={0xac, 0x18, 0x703, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x87, 0x8, 0x0, 0x1, "76cac28ac807c1c66881c4f7c462d7e0c9e357345f5e845e69ce83e14fec41941248fe3cb46cc48103830f40672458456dc32fa46de0b6dbbcf360464bd279542c03f88eac0f5f3a15812e6d2349f17a374f6bb095b5f04b43b2e0f4a93b4a9a53cacd8da261c3a5dbf3b61180ddaae5a277c0017af645ec2fd4c769e343e4720029f8"}]}, 0xac}}, 0x8080) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newroute={0xac, 0x18, 0x703, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1}, [@RTA_PRIORITY={0x8}, @RTA_METRICS={0x87, 0x8, 0x0, 0x1, "76cac28ac807c1c66881c4f7c462d7e0c9e357345f5e845e69ce83e14fec41941248fe3cb46cc48103830f40672458456dc32fa46de0b6dbbcf360464bd279542c03f88eac0f5f3a15812e6d2349f17a374f6bb095b5f04b43b2e0f4a93b4a9a53cacd8da261c3a5dbf3b61180ddaae5a277c0017af645ec2fd4c769e343e4720029f8"}]}, 0xac}}, 0x8080) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = getpid() getpid() (async) r5 = getpid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETNSID={0x2c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@private}, {@loopback}, {@remote}, {@multicast2}, {@multicast2}, {@remote}, {@empty}, {}, {@broadcast}]}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x10000, r6}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x4040050) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x82060080}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x8, 0x843, @device_b, 0x0, "", 0x84ba, 0xfff, 0x4, [{{0x1}, @broadcast, 0x7fff}, {{0x1}, @device_b, 0x9}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b}]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r11 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r11, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x44}, 0x1, 0x0, 0x0, 0x8082}, 0x40) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250a0000000c009900010000003700000005000800010000000800090001ac0f00"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc004) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250a0000000c009900010000003700000005000800010000000800090001ac0f00"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc004) 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)=""/31) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)=""/31) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x3bbc1bd6ef06a3a3}}, 0x1c}}, 0x0) 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}}}, 0x38) [ 2587.427962][T10618] FAULT_INJECTION: forcing a failure. [ 2587.427962][T10618] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.433660][T10618] CPU: 3 PID: 10618 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}}}, 0x38) [ 2587.433680][T10618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2587.441959][T10618] Call Trace: [ 2587.443507][T10618] 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)=""/31) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x3bbc1bd6ef06a3a3}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)=""/31) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703, 0x0, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x3bbc1bd6ef06a3a3}}, 0x1c}}, 0x0) (async) [ 2587.444818][T10618] dump_stack_lvl+0x125/0x1b0 [ 2587.446882][T10618] should_fail_ex+0x496/0x5b0 [ 2587.448650][T10618] should_failslab+0x9/0x20 [ 2587.450429][T10618] __kmem_cache_alloc_node+0x2fd/0x350 [ 2587.452868][T10618] ? apply_wqattrs_prepare+0x137/0xa90 [ 2587.455054][T10618] kmalloc_trace+0x25/0xe0 [ 2587.456918][T10618] apply_wqattrs_prepare+0x137/0xa90 [ 2587.459295][T10618] ? preempt_count_sub+0x150/0x150 [ 2587.461578][T10618] apply_workqueue_attrs_locked+0xcb/0x150 [ 2587.464281][T10618] alloc_workqueue+0xdae/0x1490 [ 2587.464317][T10618] ? workqueue_sysfs_register+0x400/0x400 [ 2587.468468][T10618] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2587.468485][T10618] kvm_mmu_init_vm+0x248/0x2e0 [ 2587.472380][T10618] kvm_arch_init_vm+0x39/0x720 [ 2587.474286][T10618] ? __kasan_kmalloc+0xa2/0xb0 [ 2587.476156][T10618] kvm_dev_ioctl+0xa31/0x1c20 [ 2587.478162][T10618] ? bit_wait_timeout+0x160/0x160 [ 2587.478187][T10618] ? __fget_files+0x279/0x410 [ 2587.478205][T10618] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.478228][T10618] ? __fget_files+0x279/0x410 [ 2587.478247][T10618] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2587.478269][T10618] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.478288][T10618] __do_compat_sys_ioctl+0x2bf/0x330 [ 2587.478308][T10618] __do_fast_syscall_32+0x61/0xe0 [ 2587.478326][T10618] do_fast_syscall_32+0x33/0x70 [ 2587.478344][T10618] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2587.478367][T10618] RIP: 0023:0xf7f91579 [ 2587.478381][T10618] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2587.478399][T10618] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2587.478416][T10618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2587.478428][T10618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2587.478438][T10618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2587.478450][T10618] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2587.478460][T10618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2587.478477][T10618] 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}}}, 0x38) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x28}}, 0x0) 21:25:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 30) 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a00000000000000007cf00c84370a65000000"], 0x1c}}, 0x0) 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a00000000000000007cf00c84370a65000000"], 0x1c}}, 0x0) 21:25:06 executing program 3: openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x44801, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f}}, 0x20) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x795282, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x28}}, 0x0) (async) [ 2587.558717][T10649] FAULT_INJECTION: forcing a failure. [ 2587.558717][T10649] name failslab, interval 1, probability 0, space 0, times 0 21:25:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a00000000000000007cf00c84370a65000000"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c01030700000000000000000a00000000000000007cf00c84370a65000000"], 0x1c}}, 0x0) [ 2587.563566][T10649] CPU: 0 PID: 10649 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2587.567587][T10649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2587.571409][T10649] Call Trace: [ 2587.572685][T10649] [ 2587.573800][T10649] dump_stack_lvl+0x125/0x1b0 [ 2587.575788][T10649] should_fail_ex+0x496/0x5b0 [ 2587.577912][T10649] should_failslab+0x9/0x20 [ 2587.579663][T10649] kmem_cache_alloc_node+0x389/0x3f0 [ 2587.581610][T10649] ? alloc_unbound_pwq+0x41e/0xd00 [ 2587.583489][T10649] alloc_unbound_pwq+0x41e/0xd00 [ 2587.585582][T10649] apply_wqattrs_prepare+0x696/0xa90 [ 2587.587982][T10649] apply_workqueue_attrs_locked+0xcb/0x150 [ 2587.590108][T10649] alloc_workqueue+0xdae/0x1490 [ 2587.591939][T10649] ? workqueue_sysfs_register+0x400/0x400 [ 2587.594441][T10649] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2587.596338][T10649] kvm_mmu_init_vm+0x248/0x2e0 [ 2587.598341][T10649] kvm_arch_init_vm+0x39/0x720 [ 2587.600142][T10649] ? __kasan_kmalloc+0xa2/0xb0 [ 2587.601896][T10649] kvm_dev_ioctl+0xa31/0x1c20 [ 2587.603645][T10649] ? bit_wait_timeout+0x160/0x160 [ 2587.605657][T10649] ? __fget_files+0x279/0x410 [ 2587.607428][T10649] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.609475][T10649] ? __fget_files+0x279/0x410 [ 2587.611340][T10649] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2587.613555][T10649] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.616026][T10649] __do_compat_sys_ioctl+0x2bf/0x330 [ 2587.618431][T10649] __do_fast_syscall_32+0x61/0xe0 [ 2587.620586][T10649] do_fast_syscall_32+0x33/0x70 [ 2587.622379][T10649] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2587.624769][T10649] RIP: 0023:0xf7f91579 [ 2587.626259][T10649] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2587.633332][T10649] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2587.636349][T10649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2587.639365][T10649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2587.642266][T10649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2587.645185][T10649] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2587.648294][T10649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2587.651479][T10649] 21:25:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 31) 21:25:06 executing program 3: openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x44801, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f}}, 0x20) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x795282, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x44801, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f}}, 0x20) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x795282, 0x0) (async) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) (async) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x28}}, 0x0) 21:25:06 executing program 0: sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x19d8, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x94, 0xd, 0x0, 0x1, [{0x8e, 0x0, "0027277502c43d45b8dee511ddef647b09aec3be4471a96b7dd7e439a24ddba681a10a81222b632dc7f2f6684a56fc8d097a5188f430d6e33ec5c5aee45e627066cc9b56abed0054a51bd9bb17a67004d01f2291438276e02dc63dd89b09fd6df058ff8738583a567058f7bf2cea629d7ffce14581048f162ee878bf5436db18c3277a7c808702934c88"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2fc, 0xd, 0x0, 0x1, [{0xea, 0x0, "5a015316517898f071becfb3fcbe5d6d4c3c336afdea1fc6dac4ed6dfd3ab16ef31b772331983699cc4fef69d41e1f74c157a0e228ee0a652be013de1e21205aa7b9bb5fb8a3a5dee965447f2b8f21ee1db6acb081ab27979ded0bf5fe4d201dbb6c895149a2b9ac3e2392a8d8dd68b37559df7b191ae0cd667c0188ad0dd1124363cd88473b078ca12f23484eb80c7499f2013c256fa6597385dc49b22fa9bfa3e832a24688b0c5705bab582a947b90c50d154f390ae9c6c4c8d5243704867f04780042ed89728a128cf7f851e86be1951f2850050d9d38002698a7ac1f12ab3452ab750136"}, {0x54, 0x0, "c08fced8dfa12faf154b6122a8d84d905b6f5448efaa126df16ed42e6efb4cc21b87ae2fa8a3022889c9a25c972c58491ef5bfc5a19a70d966f557a2401deef364d8aed8f3d3562218def96fe8dfec8c"}, {0x93, 0x0, "dcaa5b6544e72d806914c21a690d90fa14c61c2346d54aa5caca3c96031983cf0df2fbb757dd0b1ed45caf6f32b41358775c204e17129f89a95435920f215a59c0f991e9e0cdcf820201397cf00fa69a702663492bb1951e27f588b473c5d4b1669017298d5eeca5fbc17c9eddc96a83102d7409ec70a7903133850971a761b98c3a47d57b87b397640152d54c5f79"}, {0xbd, 0x0, "20d39a507a760701a715a7b0523e8aa628ea473f86dccc1a49b7a134d797807368f89e2671259a593ae157cd107812edda110f06063bbdf6280aabf3ddab66130d489046156c50933aa940732a1ae3564f067bf7a12ac63976f546fefad4c649bfed17ce2b808b7260baf359f7626c510157b8c41fba04501820062816de3da8edf81436b78d997f5a85f3eafb68dc6e9cdec6bb639a7d38556087cf0b415cf8a176a4e6e3c1c9adaae3230774ee7f52e64eab6bd899be0ab0"}, {0x64, 0x0, "dbb9d8ea32fa6315e0589e116a4d542c861becd0907e836c75b44494b3f268134099d4b5f58a9206b77aebfee625ef9a7ebeaba61ce5b3c3db5ee6d95ad6136cb561f05c541913668a00e31e71bceb11cb05f5285f3c7f9dbf56bab38940a354"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7f}]}, @NL80211_ATTR_NAN_FUNC={0x1318, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x21}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1308, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}, {0xf2, 0x0, "6c4f70fe5622fb43d3ab5b3cd521b2ac557436cdf22a970e2737d14d19da0e0db62357dd141dfa93d3ab2cc558ea541b2afbbe7812d118b2c11fc1796575d57bfc9706aa0d9b9452c9c12a06cccfa63e7e5054ed5da297def50c617c7dd20de4ca6efc58b2d07941ad8cf0181ddae62e673e19fdf5062e683f6813e2426048865c4fdbcf59cae808b5041a56455cb5a3859a82d55203b4b218b63b2229a9a68ace591906e7f1dfecabb7f3d9f4c5f858d954966f03415d6c0f1bc6b78bb0ef20cd5307ca4d0161cfe47cb5075ff8f30619165ce47bab5f2d8061bb426cfba6818c7bd70d0e696b47c74708caf3a6"}, {0x85, 0x0, "ce03125551be038c064634bbed002fd96522f14fbecd52885db31e640cc8c725836a0c83eb9f28c56ea35f2295cac63122debd2f8c36867351ead830c8c14063fa318fcd10621666f2287e6a9d0da140db834d9714cb7e2e4396e23ac3316db4e0cfd5e78c16a195f9e22cc5a1ec0900c0cb4bf6345fc8af3388e273898a55448f"}, {0x1004, 0x0, "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"}, {0x3c, 0x0, "929ddd02dd7468b6ab57857a2519976a5178aa8fe48e0949990375aec12c811e1845e191811876c543c05d8b22b84597f0de0f45f79c1942"}, {0x45, 0x0, "e40abfd8b73cae354fb62183ea2db65bc9cc21b2b83eb083919e5dcfdbbd61f1e9f6edd513a158d3980797ad97bf2645ceeabd2341e171305efe8f6f5889118899"}]}]}, @NL80211_ATTR_NAN_FUNC={0x124, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xd2}, @NL80211_NAN_FUNC_SRF={0x118, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}]}]}, @NL80211_ATTR_NAN_FUNC={0xc8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xaa, 0xb, "dbca0c65597eeb182dd7083492f360665d50494575b97e8bc52e2aca0b36da18c3b51cf456a7b4f571b856c20614da882f5de3d24e2a1c3c2df4698bef75758245a63e0eb129d9fb7d3c70ce8f0f22d101d50bcad3385d4ac8670b702f9df202d62ac9c6186887f922fa2bbb8e978ab4d1fb9cc6c384b49e8ddc4f427d086b397c478552222785e7d36f55827224d84c14f90c9bfded94e49356d89ceb41bb51d9f54afd8bb8"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xbd}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x11}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}]}]}, @NL80211_ATTR_NAN_FUNC={0xa4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1e}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xfc}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b37cf96055f7"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "cdb244355b82"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4bd0beae5ede"}, @NL80211_NAN_FUNC_SRF={0x48, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6f48e821e7ee"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}]}, 0x19d8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_getnetconf={0x3c, 0x52, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x100}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2b4}]}, 0x3c}}, 0x0) 21:25:06 executing program 3: openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x44801, 0x0) (async) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x44801, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f}}, 0x20) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x795282, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) 21:25:06 executing program 0: sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x19d8, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x94, 0xd, 0x0, 0x1, [{0x8e, 0x0, "0027277502c43d45b8dee511ddef647b09aec3be4471a96b7dd7e439a24ddba681a10a81222b632dc7f2f6684a56fc8d097a5188f430d6e33ec5c5aee45e627066cc9b56abed0054a51bd9bb17a67004d01f2291438276e02dc63dd89b09fd6df058ff8738583a567058f7bf2cea629d7ffce14581048f162ee878bf5436db18c3277a7c808702934c88"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2fc, 0xd, 0x0, 0x1, [{0xea, 0x0, "5a015316517898f071becfb3fcbe5d6d4c3c336afdea1fc6dac4ed6dfd3ab16ef31b772331983699cc4fef69d41e1f74c157a0e228ee0a652be013de1e21205aa7b9bb5fb8a3a5dee965447f2b8f21ee1db6acb081ab27979ded0bf5fe4d201dbb6c895149a2b9ac3e2392a8d8dd68b37559df7b191ae0cd667c0188ad0dd1124363cd88473b078ca12f23484eb80c7499f2013c256fa6597385dc49b22fa9bfa3e832a24688b0c5705bab582a947b90c50d154f390ae9c6c4c8d5243704867f04780042ed89728a128cf7f851e86be1951f2850050d9d38002698a7ac1f12ab3452ab750136"}, {0x54, 0x0, "c08fced8dfa12faf154b6122a8d84d905b6f5448efaa126df16ed42e6efb4cc21b87ae2fa8a3022889c9a25c972c58491ef5bfc5a19a70d966f557a2401deef364d8aed8f3d3562218def96fe8dfec8c"}, {0x93, 0x0, "dcaa5b6544e72d806914c21a690d90fa14c61c2346d54aa5caca3c96031983cf0df2fbb757dd0b1ed45caf6f32b41358775c204e17129f89a95435920f215a59c0f991e9e0cdcf820201397cf00fa69a702663492bb1951e27f588b473c5d4b1669017298d5eeca5fbc17c9eddc96a83102d7409ec70a7903133850971a761b98c3a47d57b87b397640152d54c5f79"}, {0xbd, 0x0, "20d39a507a760701a715a7b0523e8aa628ea473f86dccc1a49b7a134d797807368f89e2671259a593ae157cd107812edda110f06063bbdf6280aabf3ddab66130d489046156c50933aa940732a1ae3564f067bf7a12ac63976f546fefad4c649bfed17ce2b808b7260baf359f7626c510157b8c41fba04501820062816de3da8edf81436b78d997f5a85f3eafb68dc6e9cdec6bb639a7d38556087cf0b415cf8a176a4e6e3c1c9adaae3230774ee7f52e64eab6bd899be0ab0"}, {0x64, 0x0, "dbb9d8ea32fa6315e0589e116a4d542c861becd0907e836c75b44494b3f268134099d4b5f58a9206b77aebfee625ef9a7ebeaba61ce5b3c3db5ee6d95ad6136cb561f05c541913668a00e31e71bceb11cb05f5285f3c7f9dbf56bab38940a354"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7f}]}, @NL80211_ATTR_NAN_FUNC={0x1318, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x21}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1308, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}, {0xf2, 0x0, "6c4f70fe5622fb43d3ab5b3cd521b2ac557436cdf22a970e2737d14d19da0e0db62357dd141dfa93d3ab2cc558ea541b2afbbe7812d118b2c11fc1796575d57bfc9706aa0d9b9452c9c12a06cccfa63e7e5054ed5da297def50c617c7dd20de4ca6efc58b2d07941ad8cf0181ddae62e673e19fdf5062e683f6813e2426048865c4fdbcf59cae808b5041a56455cb5a3859a82d55203b4b218b63b2229a9a68ace591906e7f1dfecabb7f3d9f4c5f858d954966f03415d6c0f1bc6b78bb0ef20cd5307ca4d0161cfe47cb5075ff8f30619165ce47bab5f2d8061bb426cfba6818c7bd70d0e696b47c74708caf3a6"}, {0x85, 0x0, "ce03125551be038c064634bbed002fd96522f14fbecd52885db31e640cc8c725836a0c83eb9f28c56ea35f2295cac63122debd2f8c36867351ead830c8c14063fa318fcd10621666f2287e6a9d0da140db834d9714cb7e2e4396e23ac3316db4e0cfd5e78c16a195f9e22cc5a1ec0900c0cb4bf6345fc8af3388e273898a55448f"}, {0x1004, 0x0, "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"}, {0x3c, 0x0, "929ddd02dd7468b6ab57857a2519976a5178aa8fe48e0949990375aec12c811e1845e191811876c543c05d8b22b84597f0de0f45f79c1942"}, {0x45, 0x0, "e40abfd8b73cae354fb62183ea2db65bc9cc21b2b83eb083919e5dcfdbbd61f1e9f6edd513a158d3980797ad97bf2645ceeabd2341e171305efe8f6f5889118899"}]}]}, @NL80211_ATTR_NAN_FUNC={0x124, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xd2}, @NL80211_NAN_FUNC_SRF={0x118, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}]}]}, @NL80211_ATTR_NAN_FUNC={0xc8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xaa, 0xb, "dbca0c65597eeb182dd7083492f360665d50494575b97e8bc52e2aca0b36da18c3b51cf456a7b4f571b856c20614da882f5de3d24e2a1c3c2df4698bef75758245a63e0eb129d9fb7d3c70ce8f0f22d101d50bcad3385d4ac8670b702f9df202d62ac9c6186887f922fa2bbb8e978ab4d1fb9cc6c384b49e8ddc4f427d086b397c478552222785e7d36f55827224d84c14f90c9bfded94e49356d89ceb41bb51d9f54afd8bb8"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xbd}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x11}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}]}]}, @NL80211_ATTR_NAN_FUNC={0xa4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1e}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xfc}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b37cf96055f7"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "cdb244355b82"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4bd0beae5ede"}, @NL80211_NAN_FUNC_SRF={0x48, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6f48e821e7ee"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}]}, 0x19d8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x19d8, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x94, 0xd, 0x0, 0x1, [{0x8e, 0x0, "0027277502c43d45b8dee511ddef647b09aec3be4471a96b7dd7e439a24ddba681a10a81222b632dc7f2f6684a56fc8d097a5188f430d6e33ec5c5aee45e627066cc9b56abed0054a51bd9bb17a67004d01f2291438276e02dc63dd89b09fd6df058ff8738583a567058f7bf2cea629d7ffce14581048f162ee878bf5436db18c3277a7c808702934c88"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2fc, 0xd, 0x0, 0x1, [{0xea, 0x0, "5a015316517898f071becfb3fcbe5d6d4c3c336afdea1fc6dac4ed6dfd3ab16ef31b772331983699cc4fef69d41e1f74c157a0e228ee0a652be013de1e21205aa7b9bb5fb8a3a5dee965447f2b8f21ee1db6acb081ab27979ded0bf5fe4d201dbb6c895149a2b9ac3e2392a8d8dd68b37559df7b191ae0cd667c0188ad0dd1124363cd88473b078ca12f23484eb80c7499f2013c256fa6597385dc49b22fa9bfa3e832a24688b0c5705bab582a947b90c50d154f390ae9c6c4c8d5243704867f04780042ed89728a128cf7f851e86be1951f2850050d9d38002698a7ac1f12ab3452ab750136"}, {0x54, 0x0, "c08fced8dfa12faf154b6122a8d84d905b6f5448efaa126df16ed42e6efb4cc21b87ae2fa8a3022889c9a25c972c58491ef5bfc5a19a70d966f557a2401deef364d8aed8f3d3562218def96fe8dfec8c"}, {0x93, 0x0, "dcaa5b6544e72d806914c21a690d90fa14c61c2346d54aa5caca3c96031983cf0df2fbb757dd0b1ed45caf6f32b41358775c204e17129f89a95435920f215a59c0f991e9e0cdcf820201397cf00fa69a702663492bb1951e27f588b473c5d4b1669017298d5eeca5fbc17c9eddc96a83102d7409ec70a7903133850971a761b98c3a47d57b87b397640152d54c5f79"}, {0xbd, 0x0, "20d39a507a760701a715a7b0523e8aa628ea473f86dccc1a49b7a134d797807368f89e2671259a593ae157cd107812edda110f06063bbdf6280aabf3ddab66130d489046156c50933aa940732a1ae3564f067bf7a12ac63976f546fefad4c649bfed17ce2b808b7260baf359f7626c510157b8c41fba04501820062816de3da8edf81436b78d997f5a85f3eafb68dc6e9cdec6bb639a7d38556087cf0b415cf8a176a4e6e3c1c9adaae3230774ee7f52e64eab6bd899be0ab0"}, {0x64, 0x0, "dbb9d8ea32fa6315e0589e116a4d542c861becd0907e836c75b44494b3f268134099d4b5f58a9206b77aebfee625ef9a7ebeaba61ce5b3c3db5ee6d95ad6136cb561f05c541913668a00e31e71bceb11cb05f5285f3c7f9dbf56bab38940a354"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7f}]}, @NL80211_ATTR_NAN_FUNC={0x1318, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x21}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1308, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}, {0xf2, 0x0, "6c4f70fe5622fb43d3ab5b3cd521b2ac557436cdf22a970e2737d14d19da0e0db62357dd141dfa93d3ab2cc558ea541b2afbbe7812d118b2c11fc1796575d57bfc9706aa0d9b9452c9c12a06cccfa63e7e5054ed5da297def50c617c7dd20de4ca6efc58b2d07941ad8cf0181ddae62e673e19fdf5062e683f6813e2426048865c4fdbcf59cae808b5041a56455cb5a3859a82d55203b4b218b63b2229a9a68ace591906e7f1dfecabb7f3d9f4c5f858d954966f03415d6c0f1bc6b78bb0ef20cd5307ca4d0161cfe47cb5075ff8f30619165ce47bab5f2d8061bb426cfba6818c7bd70d0e696b47c74708caf3a6"}, {0x85, 0x0, "ce03125551be038c064634bbed002fd96522f14fbecd52885db31e640cc8c725836a0c83eb9f28c56ea35f2295cac63122debd2f8c36867351ead830c8c14063fa318fcd10621666f2287e6a9d0da140db834d9714cb7e2e4396e23ac3316db4e0cfd5e78c16a195f9e22cc5a1ec0900c0cb4bf6345fc8af3388e273898a55448f"}, {0x1004, 0x0, "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"}, {0x3c, 0x0, "929ddd02dd7468b6ab57857a2519976a5178aa8fe48e0949990375aec12c811e1845e191811876c543c05d8b22b84597f0de0f45f79c1942"}, {0x45, 0x0, "e40abfd8b73cae354fb62183ea2db65bc9cc21b2b83eb083919e5dcfdbbd61f1e9f6edd513a158d3980797ad97bf2645ceeabd2341e171305efe8f6f5889118899"}]}]}, @NL80211_ATTR_NAN_FUNC={0x124, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xd2}, @NL80211_NAN_FUNC_SRF={0x118, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}]}]}, @NL80211_ATTR_NAN_FUNC={0xc8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xaa, 0xb, "dbca0c65597eeb182dd7083492f360665d50494575b97e8bc52e2aca0b36da18c3b51cf456a7b4f571b856c20614da882f5de3d24e2a1c3c2df4698bef75758245a63e0eb129d9fb7d3c70ce8f0f22d101d50bcad3385d4ac8670b702f9df202d62ac9c6186887f922fa2bbb8e978ab4d1fb9cc6c384b49e8ddc4f427d086b397c478552222785e7d36f55827224d84c14f90c9bfded94e49356d89ceb41bb51d9f54afd8bb8"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xbd}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x11}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}]}]}, @NL80211_ATTR_NAN_FUNC={0xa4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1e}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xfc}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b37cf96055f7"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "cdb244355b82"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4bd0beae5ede"}, @NL80211_NAN_FUNC_SRF={0x48, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6f48e821e7ee"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}]}, 0x19d8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:06 executing program 0: sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x19d8, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x94, 0xd, 0x0, 0x1, [{0x8e, 0x0, "0027277502c43d45b8dee511ddef647b09aec3be4471a96b7dd7e439a24ddba681a10a81222b632dc7f2f6684a56fc8d097a5188f430d6e33ec5c5aee45e627066cc9b56abed0054a51bd9bb17a67004d01f2291438276e02dc63dd89b09fd6df058ff8738583a567058f7bf2cea629d7ffce14581048f162ee878bf5436db18c3277a7c808702934c88"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2fc, 0xd, 0x0, 0x1, [{0xea, 0x0, "5a015316517898f071becfb3fcbe5d6d4c3c336afdea1fc6dac4ed6dfd3ab16ef31b772331983699cc4fef69d41e1f74c157a0e228ee0a652be013de1e21205aa7b9bb5fb8a3a5dee965447f2b8f21ee1db6acb081ab27979ded0bf5fe4d201dbb6c895149a2b9ac3e2392a8d8dd68b37559df7b191ae0cd667c0188ad0dd1124363cd88473b078ca12f23484eb80c7499f2013c256fa6597385dc49b22fa9bfa3e832a24688b0c5705bab582a947b90c50d154f390ae9c6c4c8d5243704867f04780042ed89728a128cf7f851e86be1951f2850050d9d38002698a7ac1f12ab3452ab750136"}, {0x54, 0x0, "c08fced8dfa12faf154b6122a8d84d905b6f5448efaa126df16ed42e6efb4cc21b87ae2fa8a3022889c9a25c972c58491ef5bfc5a19a70d966f557a2401deef364d8aed8f3d3562218def96fe8dfec8c"}, {0x93, 0x0, "dcaa5b6544e72d806914c21a690d90fa14c61c2346d54aa5caca3c96031983cf0df2fbb757dd0b1ed45caf6f32b41358775c204e17129f89a95435920f215a59c0f991e9e0cdcf820201397cf00fa69a702663492bb1951e27f588b473c5d4b1669017298d5eeca5fbc17c9eddc96a83102d7409ec70a7903133850971a761b98c3a47d57b87b397640152d54c5f79"}, {0xbd, 0x0, "20d39a507a760701a715a7b0523e8aa628ea473f86dccc1a49b7a134d797807368f89e2671259a593ae157cd107812edda110f06063bbdf6280aabf3ddab66130d489046156c50933aa940732a1ae3564f067bf7a12ac63976f546fefad4c649bfed17ce2b808b7260baf359f7626c510157b8c41fba04501820062816de3da8edf81436b78d997f5a85f3eafb68dc6e9cdec6bb639a7d38556087cf0b415cf8a176a4e6e3c1c9adaae3230774ee7f52e64eab6bd899be0ab0"}, {0x64, 0x0, "dbb9d8ea32fa6315e0589e116a4d542c861becd0907e836c75b44494b3f268134099d4b5f58a9206b77aebfee625ef9a7ebeaba61ce5b3c3db5ee6d95ad6136cb561f05c541913668a00e31e71bceb11cb05f5285f3c7f9dbf56bab38940a354"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7f}]}, @NL80211_ATTR_NAN_FUNC={0x1318, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x21}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1308, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}, {0xf2, 0x0, "6c4f70fe5622fb43d3ab5b3cd521b2ac557436cdf22a970e2737d14d19da0e0db62357dd141dfa93d3ab2cc558ea541b2afbbe7812d118b2c11fc1796575d57bfc9706aa0d9b9452c9c12a06cccfa63e7e5054ed5da297def50c617c7dd20de4ca6efc58b2d07941ad8cf0181ddae62e673e19fdf5062e683f6813e2426048865c4fdbcf59cae808b5041a56455cb5a3859a82d55203b4b218b63b2229a9a68ace591906e7f1dfecabb7f3d9f4c5f858d954966f03415d6c0f1bc6b78bb0ef20cd5307ca4d0161cfe47cb5075ff8f30619165ce47bab5f2d8061bb426cfba6818c7bd70d0e696b47c74708caf3a6"}, {0x85, 0x0, "ce03125551be038c064634bbed002fd96522f14fbecd52885db31e640cc8c725836a0c83eb9f28c56ea35f2295cac63122debd2f8c36867351ead830c8c14063fa318fcd10621666f2287e6a9d0da140db834d9714cb7e2e4396e23ac3316db4e0cfd5e78c16a195f9e22cc5a1ec0900c0cb4bf6345fc8af3388e273898a55448f"}, {0x1004, 0x0, "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"}, {0x3c, 0x0, "929ddd02dd7468b6ab57857a2519976a5178aa8fe48e0949990375aec12c811e1845e191811876c543c05d8b22b84597f0de0f45f79c1942"}, {0x45, 0x0, "e40abfd8b73cae354fb62183ea2db65bc9cc21b2b83eb083919e5dcfdbbd61f1e9f6edd513a158d3980797ad97bf2645ceeabd2341e171305efe8f6f5889118899"}]}]}, @NL80211_ATTR_NAN_FUNC={0x124, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xd2}, @NL80211_NAN_FUNC_SRF={0x118, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}]}]}, @NL80211_ATTR_NAN_FUNC={0xc8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xaa, 0xb, "dbca0c65597eeb182dd7083492f360665d50494575b97e8bc52e2aca0b36da18c3b51cf456a7b4f571b856c20614da882f5de3d24e2a1c3c2df4698bef75758245a63e0eb129d9fb7d3c70ce8f0f22d101d50bcad3385d4ac8670b702f9df202d62ac9c6186887f922fa2bbb8e978ab4d1fb9cc6c384b49e8ddc4f427d086b397c478552222785e7d36f55827224d84c14f90c9bfded94e49356d89ceb41bb51d9f54afd8bb8"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xbd}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x11}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}]}]}, @NL80211_ATTR_NAN_FUNC={0xa4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1e}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xfc}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b37cf96055f7"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "cdb244355b82"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4bd0beae5ede"}, @NL80211_NAN_FUNC_SRF={0x48, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6f48e821e7ee"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}]}, 0x19d8}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) [ 2587.759445][T10669] FAULT_INJECTION: forcing a failure. [ 2587.759445][T10669] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.764946][T10669] CPU: 0 PID: 10669 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2587.769529][T10669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2587.773957][T10669] Call Trace: [ 2587.775465][T10669] [ 2587.776767][T10669] dump_stack_lvl+0x125/0x1b0 [ 2587.778557][T10669] should_fail_ex+0x496/0x5b0 [ 2587.780261][T10669] should_failslab+0x9/0x20 [ 2587.781891][T10669] kmem_cache_alloc_node+0x389/0x3f0 [ 2587.783926][T10669] ? alloc_unbound_pwq+0x41e/0xd00 [ 2587.786137][T10669] alloc_unbound_pwq+0x41e/0xd00 [ 2587.788296][T10669] apply_wqattrs_prepare+0x696/0xa90 [ 2587.790566][T10669] apply_workqueue_attrs_locked+0xcb/0x150 [ 2587.793251][T10669] alloc_workqueue+0xdae/0x1490 [ 2587.795462][T10669] ? workqueue_sysfs_register+0x400/0x400 [ 2587.797861][T10669] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2587.799709][T10669] kvm_mmu_init_vm+0x248/0x2e0 [ 2587.801443][T10669] kvm_arch_init_vm+0x39/0x720 [ 2587.803306][T10669] ? __kasan_kmalloc+0xa2/0xb0 [ 2587.805185][T10669] kvm_dev_ioctl+0xa31/0x1c20 [ 2587.806894][T10669] ? bit_wait_timeout+0x160/0x160 [ 2587.808728][T10669] ? __fget_files+0x279/0x410 [ 2587.810427][T10669] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.812377][T10669] ? __fget_files+0x279/0x410 [ 2587.814087][T10669] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2587.815887][T10669] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.817828][T10669] __do_compat_sys_ioctl+0x2bf/0x330 [ 2587.819748][T10669] __do_fast_syscall_32+0x61/0xe0 [ 2587.821590][T10669] do_fast_syscall_32+0x33/0x70 [ 2587.823368][T10669] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2587.825692][T10669] RIP: 0023:0xf7f91579 [ 2587.827173][T10669] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2587.834139][T10669] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2587.837157][T10669] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2587.840024][T10669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2587.842899][T10669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2587.845761][T10669] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2587.848635][T10669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2587.851498][T10669] 21:25:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 32) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_getnetconf={0x3c, 0x52, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x100}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2b4}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_getnetconf={0x3c, 0x52, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x100}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2b4}]}, 0x3c}}, 0x0) (async) 21:25:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000240)={0x34, r1, 0x400, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="a8c6afff2d5c75ffbd1af3ac88261892a2ea51476faf93d2590cc819"}]}, 0x34}}, 0x40885) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf4, 0x1}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400005d}, 0x40086) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x7, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:06 executing program 3: openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x7, 0xfa00, {&(0x7f0000000100)}}, 0xb) 21:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_getnetconf={0x3c, 0x52, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x100}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2b4}]}, 0x3c}}, 0x0) 21:25:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000240)={0x34, r1, 0x400, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="a8c6afff2d5c75ffbd1af3ac88261892a2ea51476faf93d2590cc819"}]}, 0x34}}, 0x40885) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf4, 0x1}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400005d}, 0x40086) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000240)={0x34, r1, 0x400, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="a8c6afff2d5c75ffbd1af3ac88261892a2ea51476faf93d2590cc819"}]}, 0x34}}, 0x40885) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf4, 0x1}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400005d}, 0x40086) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x1c, 0x11c, 0x703}, 0x1c}}, 0x0) (async) [ 2587.930080][T10690] FAULT_INJECTION: forcing a failure. [ 2587.930080][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.934703][T10690] CPU: 0 PID: 10690 Comm: syz-executor.2 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2587.938504][T10690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2587.942151][T10690] Call Trace: 21:25:06 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x7, 0xfa00, {&(0x7f0000000100)}}, 0xb) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x7, 0xfa00, {&(0x7f0000000100)}}, 0xb) (async) [ 2587.943371][T10690] [ 2587.944612][T10690] dump_stack_lvl+0x125/0x1b0 [ 2587.946325][T10690] should_fail_ex+0x496/0x5b0 [ 2587.948098][T10690] should_failslab+0x9/0x20 [ 2587.949741][T10690] kmem_cache_alloc_node+0x389/0x3f0 [ 2587.951648][T10690] ? alloc_unbound_pwq+0x41e/0xd00 [ 2587.953503][T10690] alloc_unbound_pwq+0x41e/0xd00 [ 2587.955295][T10690] apply_wqattrs_prepare+0x696/0xa90 [ 2587.957222][T10690] apply_workqueue_attrs_locked+0xcb/0x150 [ 2587.959368][T10690] alloc_workqueue+0xdae/0x1490 [ 2587.961166][T10690] ? workqueue_sysfs_register+0x400/0x400 [ 2587.963238][T10690] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2587.965108][T10690] kvm_mmu_init_vm+0x248/0x2e0 [ 2587.966846][T10690] kvm_arch_init_vm+0x39/0x720 [ 2587.968617][T10690] ? __kasan_kmalloc+0xa2/0xb0 [ 2587.970372][T10690] kvm_dev_ioctl+0xa31/0x1c20 [ 2587.972103][T10690] ? bit_wait_timeout+0x160/0x160 [ 2587.973931][T10690] ? __fget_files+0x279/0x410 [ 2587.975642][T10690] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.977588][T10690] ? __fget_files+0x279/0x410 [ 2587.979322][T10690] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2587.981133][T10690] ? kvm_vcpu_stats_release+0x80/0x80 [ 2587.983432][T10690] __do_compat_sys_ioctl+0x2bf/0x330 [ 2587.985774][T10690] __do_fast_syscall_32+0x61/0xe0 [ 2587.988022][T10690] do_fast_syscall_32+0x33/0x70 [ 2587.990107][T10690] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2587.992812][T10690] RIP: 0023:0xf7f91579 [ 2587.994614][T10690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2588.003006][T10690] RSP: 002b:00000000f7f8c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2588.006532][T10690] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2588.009933][T10690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2588.013099][T10690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2588.015985][T10690] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2588.018852][T10690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2588.021687][T10690] [ 2588.024644][ T3] ================================================================== [ 2588.027539][ T3] BUG: KASAN: slab-use-after-free in pwq_release_workfn+0x339/0x380 [ 2588.031050][ T3] Read of size 4 at addr ffff888023c86dc0 by task pool_workqueue_/3 [ 2588.034325][ T3] [ 2588.035304][ T3] CPU: 1 PID: 3 Comm: pool_workqueue_ Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2588.040558][ T3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2588.044959][ T3] Call Trace: [ 2588.046307][ T3] [ 2588.047485][ T3] dump_stack_lvl+0xd9/0x1b0 [ 2588.049332][ T3] print_report+0xc4/0x620 [ 2588.051136][ T3] ? __virt_addr_valid+0x5e/0x2d0 [ 2588.053195][ T3] ? __phys_addr+0xc6/0x140 [ 2588.055039][ T3] kasan_report+0xda/0x110 [ 2588.056886][ T3] ? pwq_release_workfn+0x339/0x380 [ 2588.058870][ T3] ? pwq_release_workfn+0x339/0x380 [ 2588.060933][ T3] pwq_release_workfn+0x339/0x380 [ 2588.062923][ T3] kthread_worker_fn+0x2fc/0xa80 [ 2588.064935][ T3] ? put_unbound_pool+0x7c0/0x7c0 [ 2588.067024][ T3] ? kthread_freezable_should_stop+0x190/0x190 [ 2588.069427][ T3] kthread+0x33a/0x430 [ 2588.071037][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 2588.073225][ T3] ret_from_fork+0x45/0x80 [ 2588.074947][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 2588.077113][ T3] ret_from_fork_asm+0x11/0x20 [ 2588.078991][ T3] [ 2588.080211][ T3] [ 2588.081128][ T3] Allocated by task 10690: [ 2588.082831][ T3] kasan_save_stack+0x33/0x50 [ 2588.084617][ T3] kasan_set_track+0x25/0x30 [ 2588.086392][ T3] __kasan_kmalloc+0xa2/0xb0 [ 2588.088190][ T3] alloc_workqueue+0x16f/0x1490 [ 2588.090047][ T3] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2588.092087][ T3] kvm_mmu_init_vm+0x248/0x2e0 [ 2588.093948][ T3] kvm_arch_init_vm+0x39/0x720 [ 2588.095756][ T3] kvm_dev_ioctl+0xa31/0x1c20 [ 2588.097608][ T3] __do_compat_sys_ioctl+0x2bf/0x330 [ 2588.099652][ T3] __do_fast_syscall_32+0x61/0xe0 [ 2588.101647][ T3] do_fast_syscall_32+0x33/0x70 [ 2588.103500][ T3] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2588.105947][ T3] [ 2588.106898][ T3] Freed by task 10690: [ 2588.108439][ T3] kasan_save_stack+0x33/0x50 [ 2588.110306][ T3] kasan_set_track+0x25/0x30 [ 2588.112115][ T3] kasan_save_free_info+0x2b/0x40 [ 2588.114115][ T3] ____kasan_slab_free+0x15b/0x1b0 [ 2588.116170][ T3] slab_free_freelist_hook+0x114/0x1e0 [ 2588.118369][ T3] __kmem_cache_free+0xb8/0x2f0 [ 2588.120352][ T3] alloc_workqueue+0xe76/0x1490 [ 2588.122333][ T3] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 2588.124419][ T3] kvm_mmu_init_vm+0x248/0x2e0 [ 2588.126373][ T3] kvm_arch_init_vm+0x39/0x720 [ 2588.128332][ T3] kvm_dev_ioctl+0xa31/0x1c20 [ 2588.130241][ T3] __do_compat_sys_ioctl+0x2bf/0x330 [ 2588.132404][ T3] __do_fast_syscall_32+0x61/0xe0 [ 2588.134448][ T3] do_fast_syscall_32+0x33/0x70 [ 2588.136430][ T3] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2588.138986][ T3] [ 2588.139966][ T3] Last potentially related work creation: [ 2588.142245][ T3] kasan_save_stack+0x33/0x50 [ 2588.144174][ T3] __kasan_record_aux_stack+0xbc/0xd0 [ 2588.146338][ T3] insert_work+0x38/0x230 [ 2588.148116][ T3] __queue_work+0xb7e/0x1060 [ 2588.149987][ T3] call_timer_fn+0x1a0/0x580 [ 2588.151892][ T3] __run_timers+0x585/0xb10 [ 2588.153749][ T3] run_timer_softirq+0x58/0xd0 [ 2588.155697][ T3] __do_softirq+0x218/0x965 [ 2588.157571][ T3] [ 2588.158546][ T3] Second to last potentially related work creation: [ 2588.161194][ T3] kasan_save_stack+0x33/0x50 [ 2588.163122][ T3] __kasan_record_aux_stack+0xbc/0xd0 [ 2588.165303][ T3] __call_rcu_common.constprop.0+0x9a/0x790 [ 2588.167712][ T3] pwq_release_workfn+0x244/0x380 [ 2588.169791][ T3] kthread_worker_fn+0x2fc/0xa80 [ 2588.171809][ T3] kthread+0x33a/0x430 [ 2588.173475][ T3] ret_from_fork+0x45/0x80 [ 2588.175295][ T3] ret_from_fork_asm+0x11/0x20 [ 2588.177267][ T3] [ 2588.178253][ T3] The buggy address belongs to the object at ffff888023c86c00 [ 2588.178253][ T3] which belongs to the cache kmalloc-512 of size 512 [ 2588.183805][ T3] The buggy address is located 448 bytes inside of [ 2588.183805][ T3] freed 512-byte region [ffff888023c86c00, ffff888023c86e00) [ 2588.189257][ T3] [ 2588.190231][ T3] The buggy address belongs to the physical page: [ 2588.192809][ T3] page:ffffea00008f2100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23c84 [ 2588.196863][ T3] head:ffffea00008f2100 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2588.200446][ T3] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2588.203300][ T3] page_type: 0xffffffff() [ 2588.204856][ T3] raw: 00fff00000000840 ffff888012c42c80 dead000000000100 dead000000000122 [ 2588.207918][ T3] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 2588.210943][ T3] page dumped because: kasan: bad access detected [ 2588.213231][ T3] page_owner tracks the page as allocated [ 2588.215251][ T3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7629, tgid 7627 (syz-executor.1), ts 1414621587284, free_ts 1414613450948 [ 2588.223357][ T3] post_alloc_hook+0x2cf/0x340 [ 2588.225093][ T3] get_page_from_freelist+0xee0/0x2f20 [ 2588.227046][ T3] __alloc_pages+0x1d0/0x4a0 [ 2588.228706][ T3] alloc_pages+0x1a9/0x270 [ 2588.230305][ T3] allocate_slab+0x251/0x380 [ 2588.231988][ T3] ___slab_alloc+0x8be/0x1570 [ 2588.233676][ T3] __slab_alloc.constprop.0+0x56/0xa0 [ 2588.235577][ T3] __kmem_cache_alloc_node+0x137/0x350 [ 2588.237614][ T3] kmalloc_trace+0x25/0xe0 [ 2588.239213][ T3] device_add+0xd18/0x1ac0 [ 2588.240811][ T3] netdev_register_kobject+0x183/0x3f0 [ 2588.242757][ T3] register_netdevice+0xbcb/0x1490 [ 2588.244609][ T3] __ip_tunnel_create+0x4a1/0x670 [ 2588.246507][ T3] ip_tunnel_init_net+0x237/0x5e0 [ 2588.248655][ T3] ops_init+0xb9/0x650 [ 2588.250098][ T3] setup_net+0x422/0xa40 [ 2588.251596][ T3] page last free stack trace: [ 2588.253281][ T3] free_unref_page_prepare+0x476/0xa40 [ 2588.255213][ T3] free_unref_page+0x33/0x3b0 [ 2588.256885][ T3] __unfreeze_partials+0x21d/0x240 [ 2588.258703][ T3] qlist_free_all+0x6a/0x170 [ 2588.260359][ T3] kasan_quarantine_reduce+0x18b/0x1d0 [ 2588.262291][ T3] __kasan_slab_alloc+0x65/0x90 [ 2588.264086][ T3] kmem_cache_alloc_node+0x185/0x3f0 [ 2588.265965][ T3] __alloc_skb+0x287/0x330 [ 2588.267582][ T3] inet6_netconf_notify_devconf+0x87/0x180 [ 2588.269662][ T3] __addrconf_sysctl_register+0x293/0x3f0 [ 2588.271677][ T3] addrconf_init_net+0x526/0x8f0 [ 2588.273471][ T3] ops_init+0xb9/0x650 [ 2588.274924][ T3] setup_net+0x422/0xa40 [ 2588.276447][ T3] copy_net_ns+0x2fa/0x670 [ 2588.278040][ T3] create_new_namespaces+0x3ea/0xb10 [ 2588.279930][ T3] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2588.281929][ T3] [ 2588.282789][ T3] Memory state around the buggy address: [ 2588.284780][ T3] ffff888023c86c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2588.287630][ T3] ffff888023c86d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2588.290466][ T3] >ffff888023c86d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2588.293315][ T3] ^ [ 2588.295496][ T3] ffff888023c86e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2588.298337][ T3] ffff888023c86e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2588.301259][ T3] ================================================================== [ 2588.306016][ T3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2588.308637][ T3] CPU: 1 PID: 3 Comm: pool_workqueue_ Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 [ 2588.312214][ T3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2588.315773][ T3] Call Trace: [ 2588.316978][ T3] [ 2588.318055][ T3] dump_stack_lvl+0xd9/0x1b0 [ 2588.319707][ T3] panic+0x6a6/0x750 [ 2588.321135][ T3] ? panic_smp_self_stop+0xa0/0xa0 [ 2588.323051][ T3] ? preempt_schedule_thunk+0x1a/0x30 [ 2588.325046][ T3] ? preempt_schedule_common+0x45/0xc0 [ 2588.327021][ T3] check_panic_on_warn+0xab/0xb0 [ 2588.328811][ T3] end_report+0x108/0x150 [ 2588.330348][ T3] kasan_report+0xea/0x110 [ 2588.331946][ T3] ? pwq_release_workfn+0x339/0x380 [ 2588.333866][ T3] ? pwq_release_workfn+0x339/0x380 [ 2588.335713][ T3] pwq_release_workfn+0x339/0x380 [ 2588.337511][ T3] kthread_worker_fn+0x2fc/0xa80 [ 2588.339272][ T3] ? put_unbound_pool+0x7c0/0x7c0 [ 2588.341144][ T3] ? kthread_freezable_should_stop+0x190/0x190 [ 2588.343352][ T3] kthread+0x33a/0x430 [ 2588.344804][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 2588.346834][ T3] ret_from_fork+0x45/0x80 [ 2588.348535][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 2588.350531][ T3] ret_from_fork_asm+0x11/0x20 [ 2588.352318][ T3] [ 2588.354184][ T3] Kernel Offset: disabled [ 2588.355715][ T3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:25:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000e07bfc RBX=0000000000000000 RCX=ffffffff8a3ef0ae RDX=ffffed10058c6dbe RSI=ffffffff8ae92820 RDI=ffffffff8162d78e RBP=fffffbfff1912b08 RSP=ffffffff8c807e20 R8 =0000000000000000 R9 =ffffed10058c6dbd R10=ffff88802c636deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8c895840 R14=ffffffff8ece2550 R15=0000000000000000 RIP=ffffffff8a3f02ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f8bffc CR3=000000001ea91000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004200000 Opmask01=00000000fffffffa Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2bd88b20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a000a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff849bd2e5 RDI=ffffffff92556d40 RBP=ffffffff92556d00 RSP=ffffc90000357868 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=502031203a555043 R12=0000000000000000 R13=0000000000000061 R14=ffffffff849bd280 R15=0000000000000000 RIP=ffffffff849bd30f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f737c0c4 CR3=000000001ea91000 CR4=00352ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000018c00000 Opmask01=0000000000024000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2bd88b20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3220313120302d20 303020303020000a 30000a312030322f 31202c293020302d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000fe4774 RBX=0000000000000002 RCX=ffffffff8a3ef0ae RDX=ffffed1005906dbe RSI=ffffffff8ae92820 RDI=ffffffff8162d78e RBP=ffffed1002858480 RSP=ffffc90000467e10 R8 =0000000000000000 R9 =ffffed1005906dbd R10=ffff88802c836deb R11=0000000000000000 R12=0000000000000002 R13=ffff8880142c2400 R14=ffffffff8ece2550 R15=0000000000000000 RIP=ffffffff8a3f02ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002ea24000 CR3=000000001ce97000 CR4=00352ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfeff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd00b33640 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 91fe8d2a0b852313 7373262932f8fd75 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756765722f657261 776d7269662f302e 79726f74616c7567 65722f6d726f6674 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000061 0000000000000000 0000000000000062 642e79726f74616c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697a787c69303b7e 69305f474f5b647c 693038243d273f39 7b27697a787c7a30 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88801940c800 RSI=ffffffff817c5eae RDI=0000000000000005 RBP=ffffc90029db7cb8 RSP=ffffc90029db7ba0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88802c73d620 R12=1ffff920053b6f78 R13=0000000000000000 R14=0000000000000001 R15=ffff88802c73d600 RIP=ffffffff817c5eb0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7355b6c CR3=0000000066563000 CR4=00352ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4bf1d7423b056cd6 9ab3bd05b11e7e99 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f5f54b802cf53c2 378132a5974b3a42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b0300f2e0344f06 fa54d6c6cf9e5eb3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d17028e7f271dc9 5bd3ee207e152ad6 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000002e380 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bcac1d840022a49f 000000000000061f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 001ff835c8755a50 0000850dc87f68d0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bccca8200000061f 000000000000061f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000061f 000448a100000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dfa67abb075e06a0 82df2f4f005d2766 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a5252c9f1dc02caf 2c192f28b2bfeb59 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000