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"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "a235c9fa187fd7414d6c1255caeb96d108c3e591efa1de02a88224e59a34a275e4636cbdda5771783bcdd1d6e1d1dd0b02071e9ad207af8d5f25de9b601a0aafccb5b9fa99b0045dfbc81f869ae751339280a064275c0385d2261de410e729f8330c6c8e1485ed6c587d2c66af78a307cb71c26e12fc7de8e69b4d303c07754d"}, @NL80211_FTM_RESP_ATTR_LCI={0xec, 0x2, "da4c277017bd91f4f464af489313aa3e8df30761f802965c456cf9b0816548cdc4b2ff180319c5a4deb407c9d618fb05476661d4175e85532187f33044489095fd9d71b0746ad02ce87bcf67f0d756e62bee037a408f4cd367a9a281d904dbe1b6f3995b3f3be22c0dd8d429baacb97bcc3556f942d20649fb3435f2a0d4acd868c70fcdb584a5dc36793898e53005bb6ec1b79ef0f3ae4d164b6e4fce5173e8391b8f435094d3b0997f04989b4cf920ca545ef45d003ff6c4478da7b48c1b25d08053dd4578230d299cd9a9ff780331fe5ea40f37091efbf9790552e8f22aeadc505161fb797b0e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "d8cb17cf9739c68382bf4c896ed6f8ec88f824334c5ec4a136f5d13daeddf47319dff190448304371ae2bcc33204c609d681b0e649351c8f576601724f9ac3047b1b4820e1c98b3aa81932ee1a0fd8fb1ca58dfd957b2f211f2aa6e0939c7754b8dcee6688865e78f838ec"}]}], @beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x8001, 0xfffa]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xffff, 0x80]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x4f, 0x7f, [@perr={0x84, 0x49, {0x81, 0x5, [@ext={{}, @device_a, 0x89, @device_a, 0x11}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @not_ext={{}, @device_b, 0x3ff, "", 0x7}, @not_ext={{}, @device_a, 0x1, "", 0x3c}, @not_ext={{}, @device_b, 0x7, "", 0x40}]}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x81, 0x2, 0xc0, 0xb5, 0x20, 0x4, 0x2]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_IES={0xac0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x5, 0x7fff, 0xfffb, 0x7fff]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x5b6, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6f}, @device_a, @broadcast, @initial, {0x1, 0x1}}, @ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x100, @default, 0xe501, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x80}, @val={0x5, 0xfa, {0x80, 0x8b, 0x5, "669c29eabbab134e0b003b510b3c57c0ce247dc8230a1b45469e883f64c9b6848d9ea246fa694f9e19a758f644198cefc4b8d9619ea31d32e5dd7e47f2e0dbbf217ce2fc906d289a18e51ba22cc693d9422957e408e0953b39e76f34082702a4a2381fd96491b2faffd58fd458c906e21ccddad35d84e261fad227c5bd052a422e246e99dbd85ed229b0cfa047164216d9ca2698ca0d08d7a85667ea8173f3828d6121eb66531c580a9a1864e52ec0a7e094eed84761533ead7f539c2ffb7b040cdf6340f97819f08a28cccedc46bb01aaa434352632ef01bfe749c1e36949487956a8fa640393c500f8e30cc2c8520545727874355291"}}, @val={0x25, 0x3, {0x0, 0xa, 0xa9}}, @void, @val={0x3c, 0x4, {0x1, 0x1f, 0x95, 0x2}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x200, 0xff, 0x0, 0x20, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x7, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x82, 0x60}}, @void, [{0xdd, 0xe1, "2f1ba106687907faf5e1d0265a35542cd183b28ae8b79548e5ad92380f2e22b60384e9e5068d26a9d93b716f9ede0d52b2e597d9d3190ea5b7384bad8a889b30c16da2db3fc3540516b0c31be85ea28ab9a84859304de457fcd62dc93c71dc02804de037f7371a5604ba3c6d5619df842d3c4bbaf7220a1109d0ecd7ad89674985cddc5e634f7493dbe2ac7c5c206ce198f9e75c9dfc9d024e17fd1ea9adcd785555d3c0221f871467f596de3e515c57034675df6edea36c2d42dec428c1448f1fd846e3d353482015b4a9f176ea8a3bcff139a9ffb91e45aa36d11282f54101c5"}, {0xdd, 0xaf, "250085e0b970780b4ac562180e40cc150fb0031a20689d0fbe457541df6e4733be71a511df4a15fea0952a0763c0cd9b053d08dc52bee7b2422810288a55651485bbde5b05ead8d566339cbc91dce3bb0eb65cc7f1ef7e88486805a61dc0ed6e812980f9262a2bcd3aecaa87961489fae6dadcb8eb44716bfb7c4c7bd11bfc8707afa08087f75232d61bd41cfcf966d1c22003e8324a753e17fb4d14aa602c4d79df6bcbf472193551033261ae8961"}, {0xdd, 0x27, "328155a334b1c1ce99e016eb8b74403c51b207fadc9440102df9a0f05cb76586c7db3987f50135"}, {0xdd, 0x9, "4c54643b3bbbf5a69d"}, {0xdd, 0x22, "8b86764bf1ca880fd6abb227ba48e179beb1e46fcf557645ad93e3ece8ef628b69ba"}, {0xdd, 0x79, "86f0cc76d5b0a7ccc4492e3db70cfc7a9fa3aa7c2ad209a124c339d68541436c7dfcfcf29f2291044c3462e6956ab2f16fa6df6054a32521757c251be14e15f50d96881b1d816df85112205582b16e600cd3aea387aaffd1276b9aa6a53f9359154477a55effa30d802888d868ecd9a2381bf273edd4d19abb"}, {0xdd, 0xe6, "50a91dff84a5e53e9cf7852e1a306160f9d2d8a1e6de6c5ee8c9dc24a4ba131c254e00fa4139ff66888423043f20a4beed34f3cf5065a065b361493119bf1d0f645953895f44bcc124944d8934c418051c13ae47812854ee7fdccc9576f44b1a14fbc484970e5c5d45ccff778a85095ef2d0fc19ce29eb5f4a3f8d0966c43d9a2a927d69b6b213424a953104e60d0c39363378eb9c4712ebfdea179c63a28880990f1042ef7f11882096004c7fe8ecfa1a15611bb361cf4f3abf3845ad3dab4c71d039a42a19a6987f994e5bf387ff1b5ce314bfe0c3bb88a0fe3ade715c5de6b79abfaf2d21"}, {0xdd, 0xe9, "a2ca686e362adf1be61f02a14802e94a70dfee237fc81d0370509a6fd3202f7cca2790826eacf4b078337364982ba01cf8fd6f06ef9695fcb563b485a1ed22bbb0bbcca22d027c22cc6cc1e8b0bb29e681ab4d300d5b916874cb08584b4b7b426c4c8da385bb995bdf2a6e85e64c6b61a51c45db679a34da3910a8ad52ea74f1680f160ab40b476829a624b1e4883bc911c17190c0d60d90547e867a70884792cb95313e17850b340ba868f52bf25093fd9d2ce07a4e1c672fd3684854ac99b3d9239f9164d8ff16e15b65a62abacd7ec734aea85474737166062ca4c3387b02627a802727fb5c30e0"}, {0xdd, 0xe, "70273c7659000000000001000000"}]}}, @NL80211_ATTR_PROBE_RESP={0x47d, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x1, 0x1, 0x4, 0x4, 0x81]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x4, 0x8001, 0x9, 0x1, 0xfffa, 0x9, 0x1dc0, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x4, 0xf387, 0x9, 0x3, 0x800]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x1, 0xfff7, 0x0, 0x20, 0x0, 0x4e8, 0x40, 0xf089, 0xfff7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x6, 0x2, 0x7421, 0x1, 0x8, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8000, 0x5]}]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x9, 0x1, 0x9, 0x9]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2340}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6e}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x6c}, {0x30}, {0x36, 0x1}, {0x1}, {0x24, 0x1}, {0x18}, {0x18, 0x1}, {0x16}, {0x18, 0x1}, {0x9}, {0xc, 0x1}, {0xc}, {0x5, 0x1}, {0x18}, {0xd}, {0x6c, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 00:43:16 executing program 0: socketpair(0x0, 0x5, 0x7, &(0x7f0000000040)) 00:43:16 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:16 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 00:43:16 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x0) 00:43:16 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x4040844) 00:43:16 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x6) socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f0000002b00)={0x2340, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x17c8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0xb3f8, 0x4, 0xff, 0x7, 0x81]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x3, 0xd6c0, 0x81, 0x7ff, 0x0, 0x3ac, 0x8001, 0x1f]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x34, 0x80, [@ht={0x2d, 0x1a, {0x10, 0x2, 0x1, 0x0, {0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0x1b1, 0x2a, [@ibss={0x6, 0x2, 0x6072}, @random_vendor={0xdd, 0x88, "b1b55e0296e95c62a14cf12762a5f0e372ed5a5746b065aa1ec7b244a5a7695d9cf186f86ed870fd0eefd463f05a8ca5ad4993439f525815ff8b5ca98f64c0ffaa97944f1134eacd6514e56bc545a954f91e0e08289d6e823fe0f01c0065143f1476482514cfbf563dde937368171a1e08b905ad65ab89418c2bdaff7cb067e08b074e06ba8568cf"}, @perr={0x84, 0x5c, {0x1f, 0x6, [@ext={{}, @broadcast, 0xbd97, @broadcast, 0x2f}, @ext={{}, @device_a, 0x2, @device_a, 0x13}, @not_ext={{}, @broadcast, 0x3f, "", 0x1e}, @not_ext={{}, @device_a, 0x1, "", 0x27}, @not_ext={{}, @device_a, 0x4, "", 0x3d}, @not_ext={{}, @device_a, 0xfffc0000, "", 0x37}]}}, @random={0xfe, 0xae, "bc17b18828711f782ca4acd6cec80492c0bcbbbd18e725fc81ecf38a707219380e81e3e4e9c3b831dc9ddd329ff5b33779c265845231b9abafdb2fc33e4dd8a27e8a1f9ad4a8b9f4e3f68e746a73657433eb83cb191141f4a2febf84ee08b3a52019045b473e130dd393f220a9a4fa4f15e502c42b962f2f28aca12c6635119aaa1c1a8e464b22e3571d132ee89a88b782d02a3525b53ab848bac37f01cd4b1a52e1ebf937b196fede5d4fd251a2"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x34, 0x34}}, @gcr_ga={0xbd, 0x6}, @dsss={0x3, 0x1, 0xac}]}, @NL80211_ATTR_BEACON_HEAD={0x14b, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x4}}, @ver_80211n={0x0, 0x3f89, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffff7f, @default, 0x23a, @void, @void, @void, @val={0x4, 0x6, {0x2b, 0x8, 0x40, 0x7}}, @val={0x6, 0x2, 0x3}, @val={0x5, 0x99, {0x7f, 0x26, 0x81, "3203072d3e1780051dc0c1b747f3b05d2e98a337e3e279bdbd4d5b876219657a4759a0071e5ca02e444777a01371f0f421d51f193ebe4d6bd3b6b6d4d7b0459cea52a96310778be7bd2a016b13d648db7571b0da0d2dccd5f98fed0f18688335f5bcedc5ba5d8b6e74d6b9dbd9fd15e0d1d22e7b76c4abce1b0c4f9be8738e458de9a5e4400794a826ff32004a72662949d57256ee1d"}}, @val={0x25, 0x3, {0x1, 0xae, 0x5}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x40, 0x68}}, @void, [{0xdd, 0x65, "7f5b09cde62c7a88871a518abe2cecafb6086edbbe52f5634042678d8506e78c862e7256e43123c28e73e6e57e8b894d4206dee08e37f7ed97b918cd383335e2f2ad30dff70fce06cbb9da7470331a81d10fb2a3f21ccec5ab882d658e26975507f7215bb5"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xa8, 0x7f, [@prep={0x83, 0x25, @ext={{}, 0x1, 0x40, @broadcast, 0x9, @device_a, 0x20, 0x6, @device_a, 0x1ff}}, @measure_req={0x26, 0x78, {0x6, 0x7f, 0x81, "48c49b2667a892d180f594681aefed6fc4e7451da61889e724bb71e3596d15208631aec80144b544e6ea684caf55bc3143bbd97859b75d347ff8b0e8aae7166b838fb026bece0a374858815b6845df91200ce61896062ab3907df672adb00fce52b8654e2ada18594f52ff8dcec2217e0d869d414b"}}, @dsss={0x3, 0x1, 0x93}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x8b, 0x80, [@chsw_timing={0x68, 0x4, {0x3, 0x8001}}, @tim={0x5, 0x6c, {0xff, 0xe, 0xfd, "a52c736f2fd6f30e8df367a5481d26f2d226d5a7743a48c0e98fb7c0b3dd860d9f388b9326cacf38e970df1902ca0aa98a44bde6018b37939220ac21d4b360047dadba1822b1810ecc26316ab22784a639dcfc3463d8fdcdb5679a19d290de1e258b54f79d00bb64a2"}}, @gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6, {0x1, 0x9, 0x0, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x12c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd8, 0x3, "51df9db7752ff6365439fc39d86300778cb8a8a6e621f9bd1d3e0589cb70292a2e1acf917aee7ae3fcdf42b175494fb8930196fd0f8a2bc257ef92e1e9483f700f3591ee7cd63ecf676334dc9cec23784c18f121d394e58b104ccad1c6983a0ea42227f82bfd127373a7958659a860202e22c0ca1d20dbce80e8be6da9581fc6ee37a701988993c959564f175ada931fd0a440445ce5019323f1512ec44e0ab6161ec8742dbe917bb351fdab3f54103cc5597e8f70c2496f4fcd3e7173aee319c14b1a1d4be5ed4d04a42e3fab1d4138b8f33e81"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "a235c9fa187fd7414d6c1255caeb96d108c3e591efa1de02a88224e59a34a275e4636cbdda5771783bcdd1d6e1d1dd0b02071e9ad207af8d5f25de9b601a0aafccb5b9fa99b0045dfbc81f869ae751339280a064275c0385d2261de410e729f8330c6c8e1485ed6c587d2c66af78a307cb71c26e12fc7de8e69b4d303c07754d"}, @NL80211_FTM_RESP_ATTR_LCI={0xec, 0x2, "da4c277017bd91f4f464af489313aa3e8df30761f802965c456cf9b0816548cdc4b2ff180319c5a4deb407c9d618fb05476661d4175e85532187f33044489095fd9d71b0746ad02ce87bcf67f0d756e62bee037a408f4cd367a9a281d904dbe1b6f3995b3f3be22c0dd8d429baacb97bcc3556f942d20649fb3435f2a0d4acd868c70fcdb584a5dc36793898e53005bb6ec1b79ef0f3ae4d164b6e4fce5173e8391b8f435094d3b0997f04989b4cf920ca545ef45d003ff6c4478da7b48c1b25d08053dd4578230d299cd9a9ff780331fe5ea40f37091efbf9790552e8f22aeadc505161fb797b0e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "d8cb17cf9739c68382bf4c896ed6f8ec88f824334c5ec4a136f5d13daeddf47319dff190448304371ae2bcc33204c609d681b0e649351c8f576601724f9ac3047b1b4820e1c98b3aa81932ee1a0fd8fb1ca58dfd957b2f211f2aa6e0939c7754b8dcee6688865e78f838ec"}]}], @beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x8001, 0xfffa]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xffff, 0x80]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x4f, 0x7f, [@perr={0x84, 0x49, {0x81, 0x5, [@ext={{}, @device_a, 0x89, @device_a, 0x11}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @not_ext={{}, @device_b, 0x3ff, "", 0x7}, @not_ext={{}, @device_a, 0x1, "", 0x3c}, @not_ext={{}, @device_b, 0x7, "", 0x40}]}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x81, 0x2, 0xc0, 0xb5, 0x20, 0x4, 0x2]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_IES={0xac0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x5, 0x7fff, 0xfffb, 0x7fff]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x5b6, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6f}, @device_a, @broadcast, @initial, {0x1, 0x1}}, @ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x100, @default, 0xe501, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x80}, @val={0x5, 0xfa, {0x80, 0x8b, 0x5, "669c29eabbab134e0b003b510b3c57c0ce247dc8230a1b45469e883f64c9b6848d9ea246fa694f9e19a758f644198cefc4b8d9619ea31d32e5dd7e47f2e0dbbf217ce2fc906d289a18e51ba22cc693d9422957e408e0953b39e76f34082702a4a2381fd96491b2faffd58fd458c906e21ccddad35d84e261fad227c5bd052a422e246e99dbd85ed229b0cfa047164216d9ca2698ca0d08d7a85667ea8173f3828d6121eb66531c580a9a1864e52ec0a7e094eed84761533ead7f539c2ffb7b040cdf6340f97819f08a28cccedc46bb01aaa434352632ef01bfe749c1e36949487956a8fa640393c500f8e30cc2c8520545727874355291"}}, @val={0x25, 0x3, {0x0, 0xa, 0xa9}}, @void, @val={0x3c, 0x4, {0x1, 0x1f, 0x95, 0x2}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x200, 0xff, 0x0, 0x20, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x7, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x82, 0x60}}, @void, [{0xdd, 0xe1, "2f1ba106687907faf5e1d0265a35542cd183b28ae8b79548e5ad92380f2e22b60384e9e5068d26a9d93b716f9ede0d52b2e597d9d3190ea5b7384bad8a889b30c16da2db3fc3540516b0c31be85ea28ab9a84859304de457fcd62dc93c71dc02804de037f7371a5604ba3c6d5619df842d3c4bbaf7220a1109d0ecd7ad89674985cddc5e634f7493dbe2ac7c5c206ce198f9e75c9dfc9d024e17fd1ea9adcd785555d3c0221f871467f596de3e515c57034675df6edea36c2d42dec428c1448f1fd846e3d353482015b4a9f176ea8a3bcff139a9ffb91e45aa36d11282f54101c5"}, {0xdd, 0xaf, "250085e0b970780b4ac562180e40cc150fb0031a20689d0fbe457541df6e4733be71a511df4a15fea0952a0763c0cd9b053d08dc52bee7b2422810288a55651485bbde5b05ead8d566339cbc91dce3bb0eb65cc7f1ef7e88486805a61dc0ed6e812980f9262a2bcd3aecaa87961489fae6dadcb8eb44716bfb7c4c7bd11bfc8707afa08087f75232d61bd41cfcf966d1c22003e8324a753e17fb4d14aa602c4d79df6bcbf472193551033261ae8961"}, {0xdd, 0x27, "328155a334b1c1ce99e016eb8b74403c51b207fadc9440102df9a0f05cb76586c7db3987f50135"}, {0xdd, 0x9, "4c54643b3bbbf5a69d"}, {0xdd, 0x22, "8b86764bf1ca880fd6abb227ba48e179beb1e46fcf557645ad93e3ece8ef628b69ba"}, {0xdd, 0x79, "86f0cc76d5b0a7ccc4492e3db70cfc7a9fa3aa7c2ad209a124c339d68541436c7dfcfcf29f2291044c3462e6956ab2f16fa6df6054a32521757c251be14e15f50d96881b1d816df85112205582b16e600cd3aea387aaffd1276b9aa6a53f9359154477a55effa30d802888d868ecd9a2381bf273edd4d19abb"}, {0xdd, 0xe6, "50a91dff84a5e53e9cf7852e1a306160f9d2d8a1e6de6c5ee8c9dc24a4ba131c254e00fa4139ff66888423043f20a4beed34f3cf5065a065b361493119bf1d0f645953895f44bcc124944d8934c418051c13ae47812854ee7fdccc9576f44b1a14fbc484970e5c5d45ccff778a85095ef2d0fc19ce29eb5f4a3f8d0966c43d9a2a927d69b6b213424a953104e60d0c39363378eb9c4712ebfdea179c63a28880990f1042ef7f11882096004c7fe8ecfa1a15611bb361cf4f3abf3845ad3dab4c71d039a42a19a6987f994e5bf387ff1b5ce314bfe0c3bb88a0fe3ade715c5de6b79abfaf2d21"}, {0xdd, 0xe9, "a2ca686e362adf1be61f02a14802e94a70dfee237fc81d0370509a6fd3202f7cca2790826eacf4b078337364982ba01cf8fd6f06ef9695fcb563b485a1ed22bbb0bbcca22d027c22cc6cc1e8b0bb29e681ab4d300d5b916874cb08584b4b7b426c4c8da385bb995bdf2a6e85e64c6b61a51c45db679a34da3910a8ad52ea74f1680f160ab40b476829a624b1e4883bc911c17190c0d60d90547e867a70884792cb95313e17850b340ba868f52bf25093fd9d2ce07a4e1c672fd3684854ac99b3d9239f9164d8ff16e15b65a62abacd7ec734aea85474737166062ca4c3387b02627a802727fb5c30e0"}, {0xdd, 0xe, "70273c7659000000000001000000"}]}}, @NL80211_ATTR_PROBE_RESP={0x47d, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x1, 0x1, 0x4, 0x4, 0x81]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x4, 0x8001, 0x9, 0x1, 0xfffa, 0x9, 0x1dc0, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x4, 0xf387, 0x9, 0x3, 0x800]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x1, 0xfff7, 0x0, 0x20, 0x0, 0x4e8, 0x40, 0xf089, 0xfff7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x6, 0x2, 0x7421, 0x1, 0x8, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8000, 0x5]}]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x9, 0x1, 0x9, 0x9]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2340}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6e}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x6c}, {0x30}, {0x36, 0x1}, {0x1}, {0x24, 0x1}, {0x18}, {0x18, 0x1}, {0x16}, {0x18, 0x1}, {0x9}, {0xc, 0x1}, {0xc}, {0x5, 0x1}, {0x18}, {0xd}, {0x6c, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 00:43:16 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 00:43:16 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:16 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x0) 00:43:16 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x4040844) 00:43:16 executing program 0: socketpair(0x26, 0x0, 0x7, &(0x7f0000000040)) 00:43:17 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x6) socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f0000002b00)={0x2340, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x17c8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0xb3f8, 0x4, 0xff, 0x7, 0x81]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x3, 0xd6c0, 0x81, 0x7ff, 0x0, 0x3ac, 0x8001, 0x1f]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x34, 0x80, [@ht={0x2d, 0x1a, {0x10, 0x2, 0x1, 0x0, {0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0x1b1, 0x2a, [@ibss={0x6, 0x2, 0x6072}, @random_vendor={0xdd, 0x88, "b1b55e0296e95c62a14cf12762a5f0e372ed5a5746b065aa1ec7b244a5a7695d9cf186f86ed870fd0eefd463f05a8ca5ad4993439f525815ff8b5ca98f64c0ffaa97944f1134eacd6514e56bc545a954f91e0e08289d6e823fe0f01c0065143f1476482514cfbf563dde937368171a1e08b905ad65ab89418c2bdaff7cb067e08b074e06ba8568cf"}, @perr={0x84, 0x5c, {0x1f, 0x6, [@ext={{}, @broadcast, 0xbd97, @broadcast, 0x2f}, @ext={{}, @device_a, 0x2, @device_a, 0x13}, @not_ext={{}, @broadcast, 0x3f, "", 0x1e}, @not_ext={{}, @device_a, 0x1, "", 0x27}, @not_ext={{}, @device_a, 0x4, "", 0x3d}, @not_ext={{}, @device_a, 0xfffc0000, "", 0x37}]}}, @random={0xfe, 0xae, "bc17b18828711f782ca4acd6cec80492c0bcbbbd18e725fc81ecf38a707219380e81e3e4e9c3b831dc9ddd329ff5b33779c265845231b9abafdb2fc33e4dd8a27e8a1f9ad4a8b9f4e3f68e746a73657433eb83cb191141f4a2febf84ee08b3a52019045b473e130dd393f220a9a4fa4f15e502c42b962f2f28aca12c6635119aaa1c1a8e464b22e3571d132ee89a88b782d02a3525b53ab848bac37f01cd4b1a52e1ebf937b196fede5d4fd251a2"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x34, 0x34}}, @gcr_ga={0xbd, 0x6}, @dsss={0x3, 0x1, 0xac}]}, @NL80211_ATTR_BEACON_HEAD={0x14b, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x4}}, @ver_80211n={0x0, 0x3f89, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffff7f, @default, 0x23a, @void, @void, @void, @val={0x4, 0x6, {0x2b, 0x8, 0x40, 0x7}}, @val={0x6, 0x2, 0x3}, @val={0x5, 0x99, {0x7f, 0x26, 0x81, "3203072d3e1780051dc0c1b747f3b05d2e98a337e3e279bdbd4d5b876219657a4759a0071e5ca02e444777a01371f0f421d51f193ebe4d6bd3b6b6d4d7b0459cea52a96310778be7bd2a016b13d648db7571b0da0d2dccd5f98fed0f18688335f5bcedc5ba5d8b6e74d6b9dbd9fd15e0d1d22e7b76c4abce1b0c4f9be8738e458de9a5e4400794a826ff32004a72662949d57256ee1d"}}, @val={0x25, 0x3, {0x1, 0xae, 0x5}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x40, 0x68}}, @void, [{0xdd, 0x65, "7f5b09cde62c7a88871a518abe2cecafb6086edbbe52f5634042678d8506e78c862e7256e43123c28e73e6e57e8b894d4206dee08e37f7ed97b918cd383335e2f2ad30dff70fce06cbb9da7470331a81d10fb2a3f21ccec5ab882d658e26975507f7215bb5"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xa8, 0x7f, [@prep={0x83, 0x25, @ext={{}, 0x1, 0x40, @broadcast, 0x9, @device_a, 0x20, 0x6, @device_a, 0x1ff}}, @measure_req={0x26, 0x78, {0x6, 0x7f, 0x81, "48c49b2667a892d180f594681aefed6fc4e7451da61889e724bb71e3596d15208631aec80144b544e6ea684caf55bc3143bbd97859b75d347ff8b0e8aae7166b838fb026bece0a374858815b6845df91200ce61896062ab3907df672adb00fce52b8654e2ada18594f52ff8dcec2217e0d869d414b"}}, @dsss={0x3, 0x1, 0x93}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x8b, 0x80, [@chsw_timing={0x68, 0x4, {0x3, 0x8001}}, @tim={0x5, 0x6c, {0xff, 0xe, 0xfd, "a52c736f2fd6f30e8df367a5481d26f2d226d5a7743a48c0e98fb7c0b3dd860d9f388b9326cacf38e970df1902ca0aa98a44bde6018b37939220ac21d4b360047dadba1822b1810ecc26316ab22784a639dcfc3463d8fdcdb5679a19d290de1e258b54f79d00bb64a2"}}, @gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6, {0x1, 0x9, 0x0, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x12c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd8, 0x3, "51df9db7752ff6365439fc39d86300778cb8a8a6e621f9bd1d3e0589cb70292a2e1acf917aee7ae3fcdf42b175494fb8930196fd0f8a2bc257ef92e1e9483f700f3591ee7cd63ecf676334dc9cec23784c18f121d394e58b104ccad1c6983a0ea42227f82bfd127373a7958659a860202e22c0ca1d20dbce80e8be6da9581fc6ee37a701988993c959564f175ada931fd0a440445ce5019323f1512ec44e0ab6161ec8742dbe917bb351fdab3f54103cc5597e8f70c2496f4fcd3e7173aee319c14b1a1d4be5ed4d04a42e3fab1d4138b8f33e81"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "a235c9fa187fd7414d6c1255caeb96d108c3e591efa1de02a88224e59a34a275e4636cbdda5771783bcdd1d6e1d1dd0b02071e9ad207af8d5f25de9b601a0aafccb5b9fa99b0045dfbc81f869ae751339280a064275c0385d2261de410e729f8330c6c8e1485ed6c587d2c66af78a307cb71c26e12fc7de8e69b4d303c07754d"}, @NL80211_FTM_RESP_ATTR_LCI={0xec, 0x2, "da4c277017bd91f4f464af489313aa3e8df30761f802965c456cf9b0816548cdc4b2ff180319c5a4deb407c9d618fb05476661d4175e85532187f33044489095fd9d71b0746ad02ce87bcf67f0d756e62bee037a408f4cd367a9a281d904dbe1b6f3995b3f3be22c0dd8d429baacb97bcc3556f942d20649fb3435f2a0d4acd868c70fcdb584a5dc36793898e53005bb6ec1b79ef0f3ae4d164b6e4fce5173e8391b8f435094d3b0997f04989b4cf920ca545ef45d003ff6c4478da7b48c1b25d08053dd4578230d299cd9a9ff780331fe5ea40f37091efbf9790552e8f22aeadc505161fb797b0e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "d8cb17cf9739c68382bf4c896ed6f8ec88f824334c5ec4a136f5d13daeddf47319dff190448304371ae2bcc33204c609d681b0e649351c8f576601724f9ac3047b1b4820e1c98b3aa81932ee1a0fd8fb1ca58dfd957b2f211f2aa6e0939c7754b8dcee6688865e78f838ec"}]}], @beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x8001, 0xfffa]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xffff, 0x80]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x4f, 0x7f, [@perr={0x84, 0x49, {0x81, 0x5, [@ext={{}, @device_a, 0x89, @device_a, 0x11}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @not_ext={{}, @device_b, 0x3ff, "", 0x7}, @not_ext={{}, @device_a, 0x1, "", 0x3c}, @not_ext={{}, @device_b, 0x7, "", 0x40}]}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x81, 0x2, 0xc0, 0xb5, 0x20, 0x4, 0x2]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_IES={0xac0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x5, 0x7fff, 0xfffb, 0x7fff]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x5b6, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6f}, @device_a, @broadcast, @initial, {0x1, 0x1}}, @ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x100, @default, 0xe501, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x80}, @val={0x5, 0xfa, {0x80, 0x8b, 0x5, "669c29eabbab134e0b003b510b3c57c0ce247dc8230a1b45469e883f64c9b6848d9ea246fa694f9e19a758f644198cefc4b8d9619ea31d32e5dd7e47f2e0dbbf217ce2fc906d289a18e51ba22cc693d9422957e408e0953b39e76f34082702a4a2381fd96491b2faffd58fd458c906e21ccddad35d84e261fad227c5bd052a422e246e99dbd85ed229b0cfa047164216d9ca2698ca0d08d7a85667ea8173f3828d6121eb66531c580a9a1864e52ec0a7e094eed84761533ead7f539c2ffb7b040cdf6340f97819f08a28cccedc46bb01aaa434352632ef01bfe749c1e36949487956a8fa640393c500f8e30cc2c8520545727874355291"}}, @val={0x25, 0x3, {0x0, 0xa, 0xa9}}, @void, @val={0x3c, 0x4, {0x1, 0x1f, 0x95, 0x2}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x200, 0xff, 0x0, 0x20, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x7, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x82, 0x60}}, @void, [{0xdd, 0xe1, "2f1ba106687907faf5e1d0265a35542cd183b28ae8b79548e5ad92380f2e22b60384e9e5068d26a9d93b716f9ede0d52b2e597d9d3190ea5b7384bad8a889b30c16da2db3fc3540516b0c31be85ea28ab9a84859304de457fcd62dc93c71dc02804de037f7371a5604ba3c6d5619df842d3c4bbaf7220a1109d0ecd7ad89674985cddc5e634f7493dbe2ac7c5c206ce198f9e75c9dfc9d024e17fd1ea9adcd785555d3c0221f871467f596de3e515c57034675df6edea36c2d42dec428c1448f1fd846e3d353482015b4a9f176ea8a3bcff139a9ffb91e45aa36d11282f54101c5"}, {0xdd, 0xaf, "250085e0b970780b4ac562180e40cc150fb0031a20689d0fbe457541df6e4733be71a511df4a15fea0952a0763c0cd9b053d08dc52bee7b2422810288a55651485bbde5b05ead8d566339cbc91dce3bb0eb65cc7f1ef7e88486805a61dc0ed6e812980f9262a2bcd3aecaa87961489fae6dadcb8eb44716bfb7c4c7bd11bfc8707afa08087f75232d61bd41cfcf966d1c22003e8324a753e17fb4d14aa602c4d79df6bcbf472193551033261ae8961"}, {0xdd, 0x27, "328155a334b1c1ce99e016eb8b74403c51b207fadc9440102df9a0f05cb76586c7db3987f50135"}, {0xdd, 0x9, "4c54643b3bbbf5a69d"}, {0xdd, 0x22, "8b86764bf1ca880fd6abb227ba48e179beb1e46fcf557645ad93e3ece8ef628b69ba"}, {0xdd, 0x79, "86f0cc76d5b0a7ccc4492e3db70cfc7a9fa3aa7c2ad209a124c339d68541436c7dfcfcf29f2291044c3462e6956ab2f16fa6df6054a32521757c251be14e15f50d96881b1d816df85112205582b16e600cd3aea387aaffd1276b9aa6a53f9359154477a55effa30d802888d868ecd9a2381bf273edd4d19abb"}, {0xdd, 0xe6, "50a91dff84a5e53e9cf7852e1a306160f9d2d8a1e6de6c5ee8c9dc24a4ba131c254e00fa4139ff66888423043f20a4beed34f3cf5065a065b361493119bf1d0f645953895f44bcc124944d8934c418051c13ae47812854ee7fdccc9576f44b1a14fbc484970e5c5d45ccff778a85095ef2d0fc19ce29eb5f4a3f8d0966c43d9a2a927d69b6b213424a953104e60d0c39363378eb9c4712ebfdea179c63a28880990f1042ef7f11882096004c7fe8ecfa1a15611bb361cf4f3abf3845ad3dab4c71d039a42a19a6987f994e5bf387ff1b5ce314bfe0c3bb88a0fe3ade715c5de6b79abfaf2d21"}, {0xdd, 0xe9, "a2ca686e362adf1be61f02a14802e94a70dfee237fc81d0370509a6fd3202f7cca2790826eacf4b078337364982ba01cf8fd6f06ef9695fcb563b485a1ed22bbb0bbcca22d027c22cc6cc1e8b0bb29e681ab4d300d5b916874cb08584b4b7b426c4c8da385bb995bdf2a6e85e64c6b61a51c45db679a34da3910a8ad52ea74f1680f160ab40b476829a624b1e4883bc911c17190c0d60d90547e867a70884792cb95313e17850b340ba868f52bf25093fd9d2ce07a4e1c672fd3684854ac99b3d9239f9164d8ff16e15b65a62abacd7ec734aea85474737166062ca4c3387b02627a802727fb5c30e0"}, {0xdd, 0xe, "70273c7659000000000001000000"}]}}, @NL80211_ATTR_PROBE_RESP={0x47d, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x1, 0x1, 0x4, 0x4, 0x81]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x4, 0x8001, 0x9, 0x1, 0xfffa, 0x9, 0x1dc0, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x4, 0xf387, 0x9, 0x3, 0x800]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x1, 0xfff7, 0x0, 0x20, 0x0, 0x4e8, 0x40, 0xf089, 0xfff7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x6, 0x2, 0x7421, 0x1, 0x8, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8000, 0x5]}]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x9, 0x1, 0x9, 0x9]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2340}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) 00:43:17 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x4040844) 00:43:17 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x0) 00:43:17 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 00:43:17 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x4040844) 00:43:17 executing program 0: socketpair(0x26, 0x0, 0x7, &(0x7f0000000040)) 00:43:17 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:43:17 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:17 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x4040844) 00:43:17 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x6) socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f0000002b00)={0x2340, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x17c8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0xb3f8, 0x4, 0xff, 0x7, 0x81]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x3, 0xd6c0, 0x81, 0x7ff, 0x0, 0x3ac, 0x8001, 0x1f]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x34, 0x80, [@ht={0x2d, 0x1a, {0x10, 0x2, 0x1, 0x0, {0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0x1b1, 0x2a, [@ibss={0x6, 0x2, 0x6072}, @random_vendor={0xdd, 0x88, "b1b55e0296e95c62a14cf12762a5f0e372ed5a5746b065aa1ec7b244a5a7695d9cf186f86ed870fd0eefd463f05a8ca5ad4993439f525815ff8b5ca98f64c0ffaa97944f1134eacd6514e56bc545a954f91e0e08289d6e823fe0f01c0065143f1476482514cfbf563dde937368171a1e08b905ad65ab89418c2bdaff7cb067e08b074e06ba8568cf"}, @perr={0x84, 0x5c, {0x1f, 0x6, [@ext={{}, @broadcast, 0xbd97, @broadcast, 0x2f}, @ext={{}, @device_a, 0x2, @device_a, 0x13}, @not_ext={{}, @broadcast, 0x3f, "", 0x1e}, @not_ext={{}, @device_a, 0x1, "", 0x27}, @not_ext={{}, @device_a, 0x4, "", 0x3d}, @not_ext={{}, @device_a, 0xfffc0000, "", 0x37}]}}, @random={0xfe, 0xae, "bc17b18828711f782ca4acd6cec80492c0bcbbbd18e725fc81ecf38a707219380e81e3e4e9c3b831dc9ddd329ff5b33779c265845231b9abafdb2fc33e4dd8a27e8a1f9ad4a8b9f4e3f68e746a73657433eb83cb191141f4a2febf84ee08b3a52019045b473e130dd393f220a9a4fa4f15e502c42b962f2f28aca12c6635119aaa1c1a8e464b22e3571d132ee89a88b782d02a3525b53ab848bac37f01cd4b1a52e1ebf937b196fede5d4fd251a2"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x34, 0x34}}, @gcr_ga={0xbd, 0x6}, @dsss={0x3, 0x1, 0xac}]}, @NL80211_ATTR_BEACON_HEAD={0x14b, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x4}}, @ver_80211n={0x0, 0x3f89, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffff7f, @default, 0x23a, @void, @void, @void, @val={0x4, 0x6, {0x2b, 0x8, 0x40, 0x7}}, @val={0x6, 0x2, 0x3}, @val={0x5, 0x99, {0x7f, 0x26, 0x81, "3203072d3e1780051dc0c1b747f3b05d2e98a337e3e279bdbd4d5b876219657a4759a0071e5ca02e444777a01371f0f421d51f193ebe4d6bd3b6b6d4d7b0459cea52a96310778be7bd2a016b13d648db7571b0da0d2dccd5f98fed0f18688335f5bcedc5ba5d8b6e74d6b9dbd9fd15e0d1d22e7b76c4abce1b0c4f9be8738e458de9a5e4400794a826ff32004a72662949d57256ee1d"}}, @val={0x25, 0x3, {0x1, 0xae, 0x5}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x40, 0x68}}, @void, [{0xdd, 0x65, "7f5b09cde62c7a88871a518abe2cecafb6086edbbe52f5634042678d8506e78c862e7256e43123c28e73e6e57e8b894d4206dee08e37f7ed97b918cd383335e2f2ad30dff70fce06cbb9da7470331a81d10fb2a3f21ccec5ab882d658e26975507f7215bb5"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xa8, 0x7f, [@prep={0x83, 0x25, @ext={{}, 0x1, 0x40, @broadcast, 0x9, @device_a, 0x20, 0x6, @device_a, 0x1ff}}, @measure_req={0x26, 0x78, {0x6, 0x7f, 0x81, "48c49b2667a892d180f594681aefed6fc4e7451da61889e724bb71e3596d15208631aec80144b544e6ea684caf55bc3143bbd97859b75d347ff8b0e8aae7166b838fb026bece0a374858815b6845df91200ce61896062ab3907df672adb00fce52b8654e2ada18594f52ff8dcec2217e0d869d414b"}}, @dsss={0x3, 0x1, 0x93}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x8b, 0x80, [@chsw_timing={0x68, 0x4, {0x3, 0x8001}}, @tim={0x5, 0x6c, {0xff, 0xe, 0xfd, "a52c736f2fd6f30e8df367a5481d26f2d226d5a7743a48c0e98fb7c0b3dd860d9f388b9326cacf38e970df1902ca0aa98a44bde6018b37939220ac21d4b360047dadba1822b1810ecc26316ab22784a639dcfc3463d8fdcdb5679a19d290de1e258b54f79d00bb64a2"}}, @gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6, {0x1, 0x9, 0x0, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x12c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd8, 0x3, "51df9db7752ff6365439fc39d86300778cb8a8a6e621f9bd1d3e0589cb70292a2e1acf917aee7ae3fcdf42b175494fb8930196fd0f8a2bc257ef92e1e9483f700f3591ee7cd63ecf676334dc9cec23784c18f121d394e58b104ccad1c6983a0ea42227f82bfd127373a7958659a860202e22c0ca1d20dbce80e8be6da9581fc6ee37a701988993c959564f175ada931fd0a440445ce5019323f1512ec44e0ab6161ec8742dbe917bb351fdab3f54103cc5597e8f70c2496f4fcd3e7173aee319c14b1a1d4be5ed4d04a42e3fab1d4138b8f33e81"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "a235c9fa187fd7414d6c1255caeb96d108c3e591efa1de02a88224e59a34a275e4636cbdda5771783bcdd1d6e1d1dd0b02071e9ad207af8d5f25de9b601a0aafccb5b9fa99b0045dfbc81f869ae751339280a064275c0385d2261de410e729f8330c6c8e1485ed6c587d2c66af78a307cb71c26e12fc7de8e69b4d303c07754d"}, @NL80211_FTM_RESP_ATTR_LCI={0xec, 0x2, "da4c277017bd91f4f464af489313aa3e8df30761f802965c456cf9b0816548cdc4b2ff180319c5a4deb407c9d618fb05476661d4175e85532187f33044489095fd9d71b0746ad02ce87bcf67f0d756e62bee037a408f4cd367a9a281d904dbe1b6f3995b3f3be22c0dd8d429baacb97bcc3556f942d20649fb3435f2a0d4acd868c70fcdb584a5dc36793898e53005bb6ec1b79ef0f3ae4d164b6e4fce5173e8391b8f435094d3b0997f04989b4cf920ca545ef45d003ff6c4478da7b48c1b25d08053dd4578230d299cd9a9ff780331fe5ea40f37091efbf9790552e8f22aeadc505161fb797b0e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "d8cb17cf9739c68382bf4c896ed6f8ec88f824334c5ec4a136f5d13daeddf47319dff190448304371ae2bcc33204c609d681b0e649351c8f576601724f9ac3047b1b4820e1c98b3aa81932ee1a0fd8fb1ca58dfd957b2f211f2aa6e0939c7754b8dcee6688865e78f838ec"}]}], @beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x8001, 0xfffa]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xffff, 0x80]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x4f, 0x7f, [@perr={0x84, 0x49, {0x81, 0x5, [@ext={{}, @device_a, 0x89, @device_a, 0x11}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @not_ext={{}, @device_b, 0x3ff, "", 0x7}, @not_ext={{}, @device_a, 0x1, "", 0x3c}, @not_ext={{}, @device_b, 0x7, "", 0x40}]}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x81, 0x2, 0xc0, 0xb5, 0x20, 0x4, 0x2]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_IES={0xac0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x5, 0x7fff, 0xfffb, 0x7fff]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x5b6, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6f}, @device_a, @broadcast, @initial, {0x1, 0x1}}, @ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x100, @default, 0xe501, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x80}, @val={0x5, 0xfa, {0x80, 0x8b, 0x5, "669c29eabbab134e0b003b510b3c57c0ce247dc8230a1b45469e883f64c9b6848d9ea246fa694f9e19a758f644198cefc4b8d9619ea31d32e5dd7e47f2e0dbbf217ce2fc906d289a18e51ba22cc693d9422957e408e0953b39e76f34082702a4a2381fd96491b2faffd58fd458c906e21ccddad35d84e261fad227c5bd052a422e246e99dbd85ed229b0cfa047164216d9ca2698ca0d08d7a85667ea8173f3828d6121eb66531c580a9a1864e52ec0a7e094eed84761533ead7f539c2ffb7b040cdf6340f97819f08a28cccedc46bb01aaa434352632ef01bfe749c1e36949487956a8fa640393c500f8e30cc2c8520545727874355291"}}, @val={0x25, 0x3, {0x0, 0xa, 0xa9}}, @void, @val={0x3c, 0x4, {0x1, 0x1f, 0x95, 0x2}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x200, 0xff, 0x0, 0x20, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x7, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x82, 0x60}}, @void, [{0xdd, 0xe1, "2f1ba106687907faf5e1d0265a35542cd183b28ae8b79548e5ad92380f2e22b60384e9e5068d26a9d93b716f9ede0d52b2e597d9d3190ea5b7384bad8a889b30c16da2db3fc3540516b0c31be85ea28ab9a84859304de457fcd62dc93c71dc02804de037f7371a5604ba3c6d5619df842d3c4bbaf7220a1109d0ecd7ad89674985cddc5e634f7493dbe2ac7c5c206ce198f9e75c9dfc9d024e17fd1ea9adcd785555d3c0221f871467f596de3e515c57034675df6edea36c2d42dec428c1448f1fd846e3d353482015b4a9f176ea8a3bcff139a9ffb91e45aa36d11282f54101c5"}, {0xdd, 0xaf, "250085e0b970780b4ac562180e40cc150fb0031a20689d0fbe457541df6e4733be71a511df4a15fea0952a0763c0cd9b053d08dc52bee7b2422810288a55651485bbde5b05ead8d566339cbc91dce3bb0eb65cc7f1ef7e88486805a61dc0ed6e812980f9262a2bcd3aecaa87961489fae6dadcb8eb44716bfb7c4c7bd11bfc8707afa08087f75232d61bd41cfcf966d1c22003e8324a753e17fb4d14aa602c4d79df6bcbf472193551033261ae8961"}, {0xdd, 0x27, "328155a334b1c1ce99e016eb8b74403c51b207fadc9440102df9a0f05cb76586c7db3987f50135"}, {0xdd, 0x9, "4c54643b3bbbf5a69d"}, {0xdd, 0x22, "8b86764bf1ca880fd6abb227ba48e179beb1e46fcf557645ad93e3ece8ef628b69ba"}, {0xdd, 0x79, "86f0cc76d5b0a7ccc4492e3db70cfc7a9fa3aa7c2ad209a124c339d68541436c7dfcfcf29f2291044c3462e6956ab2f16fa6df6054a32521757c251be14e15f50d96881b1d816df85112205582b16e600cd3aea387aaffd1276b9aa6a53f9359154477a55effa30d802888d868ecd9a2381bf273edd4d19abb"}, {0xdd, 0xe6, "50a91dff84a5e53e9cf7852e1a306160f9d2d8a1e6de6c5ee8c9dc24a4ba131c254e00fa4139ff66888423043f20a4beed34f3cf5065a065b361493119bf1d0f645953895f44bcc124944d8934c418051c13ae47812854ee7fdccc9576f44b1a14fbc484970e5c5d45ccff778a85095ef2d0fc19ce29eb5f4a3f8d0966c43d9a2a927d69b6b213424a953104e60d0c39363378eb9c4712ebfdea179c63a28880990f1042ef7f11882096004c7fe8ecfa1a15611bb361cf4f3abf3845ad3dab4c71d039a42a19a6987f994e5bf387ff1b5ce314bfe0c3bb88a0fe3ade715c5de6b79abfaf2d21"}, {0xdd, 0xe9, "a2ca686e362adf1be61f02a14802e94a70dfee237fc81d0370509a6fd3202f7cca2790826eacf4b078337364982ba01cf8fd6f06ef9695fcb563b485a1ed22bbb0bbcca22d027c22cc6cc1e8b0bb29e681ab4d300d5b916874cb08584b4b7b426c4c8da385bb995bdf2a6e85e64c6b61a51c45db679a34da3910a8ad52ea74f1680f160ab40b476829a624b1e4883bc911c17190c0d60d90547e867a70884792cb95313e17850b340ba868f52bf25093fd9d2ce07a4e1c672fd3684854ac99b3d9239f9164d8ff16e15b65a62abacd7ec734aea85474737166062ca4c3387b02627a802727fb5c30e0"}, {0xdd, 0xe, "70273c7659000000000001000000"}]}}, @NL80211_ATTR_PROBE_RESP={0x47d, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x1, 0x1, 0x4, 0x4, 0x81]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x4, 0x8001, 0x9, 0x1, 0xfffa, 0x9, 0x1dc0, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x4, 0xf387, 0x9, 0x3, 0x800]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x1, 0xfff7, 0x0, 0x20, 0x0, 0x4e8, 0x40, 0xf089, 0xfff7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x6, 0x2, 0x7421, 0x1, 0x8, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8000, 0x5]}]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x9, 0x1, 0x9, 0x9]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2340}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 00:43:17 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:17 executing program 0: socketpair(0x26, 0x0, 0x7, &(0x7f0000000040)) 00:43:17 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:43:17 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:17 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x4040844) 00:43:17 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x6) socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f0000002b00)={0x2340, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x17c8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0xb3f8, 0x4, 0xff, 0x7, 0x81]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x3, 0xd6c0, 0x81, 0x7ff, 0x0, 0x3ac, 0x8001, 0x1f]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x34, 0x80, [@ht={0x2d, 0x1a, {0x10, 0x2, 0x1, 0x0, {0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0x1b1, 0x2a, [@ibss={0x6, 0x2, 0x6072}, @random_vendor={0xdd, 0x88, "b1b55e0296e95c62a14cf12762a5f0e372ed5a5746b065aa1ec7b244a5a7695d9cf186f86ed870fd0eefd463f05a8ca5ad4993439f525815ff8b5ca98f64c0ffaa97944f1134eacd6514e56bc545a954f91e0e08289d6e823fe0f01c0065143f1476482514cfbf563dde937368171a1e08b905ad65ab89418c2bdaff7cb067e08b074e06ba8568cf"}, @perr={0x84, 0x5c, {0x1f, 0x6, [@ext={{}, @broadcast, 0xbd97, @broadcast, 0x2f}, @ext={{}, @device_a, 0x2, @device_a, 0x13}, @not_ext={{}, @broadcast, 0x3f, "", 0x1e}, @not_ext={{}, @device_a, 0x1, "", 0x27}, @not_ext={{}, @device_a, 0x4, "", 0x3d}, @not_ext={{}, @device_a, 0xfffc0000, "", 0x37}]}}, @random={0xfe, 0xae, "bc17b18828711f782ca4acd6cec80492c0bcbbbd18e725fc81ecf38a707219380e81e3e4e9c3b831dc9ddd329ff5b33779c265845231b9abafdb2fc33e4dd8a27e8a1f9ad4a8b9f4e3f68e746a73657433eb83cb191141f4a2febf84ee08b3a52019045b473e130dd393f220a9a4fa4f15e502c42b962f2f28aca12c6635119aaa1c1a8e464b22e3571d132ee89a88b782d02a3525b53ab848bac37f01cd4b1a52e1ebf937b196fede5d4fd251a2"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x34, 0x34}}, @gcr_ga={0xbd, 0x6}, @dsss={0x3, 0x1, 0xac}]}, @NL80211_ATTR_BEACON_HEAD={0x14b, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x4}}, @ver_80211n={0x0, 0x3f89, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffff7f, @default, 0x23a, @void, @void, @void, @val={0x4, 0x6, {0x2b, 0x8, 0x40, 0x7}}, @val={0x6, 0x2, 0x3}, @val={0x5, 0x99, {0x7f, 0x26, 0x81, "3203072d3e1780051dc0c1b747f3b05d2e98a337e3e279bdbd4d5b876219657a4759a0071e5ca02e444777a01371f0f421d51f193ebe4d6bd3b6b6d4d7b0459cea52a96310778be7bd2a016b13d648db7571b0da0d2dccd5f98fed0f18688335f5bcedc5ba5d8b6e74d6b9dbd9fd15e0d1d22e7b76c4abce1b0c4f9be8738e458de9a5e4400794a826ff32004a72662949d57256ee1d"}}, @val={0x25, 0x3, {0x1, 0xae, 0x5}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x40, 0x68}}, @void, [{0xdd, 0x65, "7f5b09cde62c7a88871a518abe2cecafb6086edbbe52f5634042678d8506e78c862e7256e43123c28e73e6e57e8b894d4206dee08e37f7ed97b918cd383335e2f2ad30dff70fce06cbb9da7470331a81d10fb2a3f21ccec5ab882d658e26975507f7215bb5"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xa8, 0x7f, [@prep={0x83, 0x25, @ext={{}, 0x1, 0x40, @broadcast, 0x9, @device_a, 0x20, 0x6, @device_a, 0x1ff}}, @measure_req={0x26, 0x78, {0x6, 0x7f, 0x81, "48c49b2667a892d180f594681aefed6fc4e7451da61889e724bb71e3596d15208631aec80144b544e6ea684caf55bc3143bbd97859b75d347ff8b0e8aae7166b838fb026bece0a374858815b6845df91200ce61896062ab3907df672adb00fce52b8654e2ada18594f52ff8dcec2217e0d869d414b"}}, @dsss={0x3, 0x1, 0x93}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x8b, 0x80, [@chsw_timing={0x68, 0x4, {0x3, 0x8001}}, @tim={0x5, 0x6c, {0xff, 0xe, 0xfd, "a52c736f2fd6f30e8df367a5481d26f2d226d5a7743a48c0e98fb7c0b3dd860d9f388b9326cacf38e970df1902ca0aa98a44bde6018b37939220ac21d4b360047dadba1822b1810ecc26316ab22784a639dcfc3463d8fdcdb5679a19d290de1e258b54f79d00bb64a2"}}, @gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6, {0x1, 0x9, 0x0, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x12c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd8, 0x3, "51df9db7752ff6365439fc39d86300778cb8a8a6e621f9bd1d3e0589cb70292a2e1acf917aee7ae3fcdf42b175494fb8930196fd0f8a2bc257ef92e1e9483f700f3591ee7cd63ecf676334dc9cec23784c18f121d394e58b104ccad1c6983a0ea42227f82bfd127373a7958659a860202e22c0ca1d20dbce80e8be6da9581fc6ee37a701988993c959564f175ada931fd0a440445ce5019323f1512ec44e0ab6161ec8742dbe917bb351fdab3f54103cc5597e8f70c2496f4fcd3e7173aee319c14b1a1d4be5ed4d04a42e3fab1d4138b8f33e81"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "a235c9fa187fd7414d6c1255caeb96d108c3e591efa1de02a88224e59a34a275e4636cbdda5771783bcdd1d6e1d1dd0b02071e9ad207af8d5f25de9b601a0aafccb5b9fa99b0045dfbc81f869ae751339280a064275c0385d2261de410e729f8330c6c8e1485ed6c587d2c66af78a307cb71c26e12fc7de8e69b4d303c07754d"}, @NL80211_FTM_RESP_ATTR_LCI={0xec, 0x2, "da4c277017bd91f4f464af489313aa3e8df30761f802965c456cf9b0816548cdc4b2ff180319c5a4deb407c9d618fb05476661d4175e85532187f33044489095fd9d71b0746ad02ce87bcf67f0d756e62bee037a408f4cd367a9a281d904dbe1b6f3995b3f3be22c0dd8d429baacb97bcc3556f942d20649fb3435f2a0d4acd868c70fcdb584a5dc36793898e53005bb6ec1b79ef0f3ae4d164b6e4fce5173e8391b8f435094d3b0997f04989b4cf920ca545ef45d003ff6c4478da7b48c1b25d08053dd4578230d299cd9a9ff780331fe5ea40f37091efbf9790552e8f22aeadc505161fb797b0e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "d8cb17cf9739c68382bf4c896ed6f8ec88f824334c5ec4a136f5d13daeddf47319dff190448304371ae2bcc33204c609d681b0e649351c8f576601724f9ac3047b1b4820e1c98b3aa81932ee1a0fd8fb1ca58dfd957b2f211f2aa6e0939c7754b8dcee6688865e78f838ec"}]}], @beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x8001, 0xfffa]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xffff, 0x80]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x4f, 0x7f, [@perr={0x84, 0x49, {0x81, 0x5, [@ext={{}, @device_a, 0x89, @device_a, 0x11}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @not_ext={{}, @device_b, 0x3ff, "", 0x7}, @not_ext={{}, @device_a, 0x1, "", 0x3c}, @not_ext={{}, @device_b, 0x7, "", 0x40}]}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x81, 0x2, 0xc0, 0xb5, 0x20, 0x4, 0x2]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_IES={0xac0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x5, 0x7fff, 0xfffb, 0x7fff]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x5b6, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6f}, @device_a, @broadcast, @initial, {0x1, 0x1}}, @ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x100, @default, 0xe501, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x80}, @val={0x5, 0xfa, {0x80, 0x8b, 0x5, "669c29eabbab134e0b003b510b3c57c0ce247dc8230a1b45469e883f64c9b6848d9ea246fa694f9e19a758f644198cefc4b8d9619ea31d32e5dd7e47f2e0dbbf217ce2fc906d289a18e51ba22cc693d9422957e408e0953b39e76f34082702a4a2381fd96491b2faffd58fd458c906e21ccddad35d84e261fad227c5bd052a422e246e99dbd85ed229b0cfa047164216d9ca2698ca0d08d7a85667ea8173f3828d6121eb66531c580a9a1864e52ec0a7e094eed84761533ead7f539c2ffb7b040cdf6340f97819f08a28cccedc46bb01aaa434352632ef01bfe749c1e36949487956a8fa640393c500f8e30cc2c8520545727874355291"}}, @val={0x25, 0x3, {0x0, 0xa, 0xa9}}, @void, @val={0x3c, 0x4, {0x1, 0x1f, 0x95, 0x2}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x200, 0xff, 0x0, 0x20, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x7, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x82, 0x60}}, @void, [{0xdd, 0xe1, "2f1ba106687907faf5e1d0265a35542cd183b28ae8b79548e5ad92380f2e22b60384e9e5068d26a9d93b716f9ede0d52b2e597d9d3190ea5b7384bad8a889b30c16da2db3fc3540516b0c31be85ea28ab9a84859304de457fcd62dc93c71dc02804de037f7371a5604ba3c6d5619df842d3c4bbaf7220a1109d0ecd7ad89674985cddc5e634f7493dbe2ac7c5c206ce198f9e75c9dfc9d024e17fd1ea9adcd785555d3c0221f871467f596de3e515c57034675df6edea36c2d42dec428c1448f1fd846e3d353482015b4a9f176ea8a3bcff139a9ffb91e45aa36d11282f54101c5"}, {0xdd, 0xaf, "250085e0b970780b4ac562180e40cc150fb0031a20689d0fbe457541df6e4733be71a511df4a15fea0952a0763c0cd9b053d08dc52bee7b2422810288a55651485bbde5b05ead8d566339cbc91dce3bb0eb65cc7f1ef7e88486805a61dc0ed6e812980f9262a2bcd3aecaa87961489fae6dadcb8eb44716bfb7c4c7bd11bfc8707afa08087f75232d61bd41cfcf966d1c22003e8324a753e17fb4d14aa602c4d79df6bcbf472193551033261ae8961"}, {0xdd, 0x27, "328155a334b1c1ce99e016eb8b74403c51b207fadc9440102df9a0f05cb76586c7db3987f50135"}, {0xdd, 0x9, "4c54643b3bbbf5a69d"}, {0xdd, 0x22, "8b86764bf1ca880fd6abb227ba48e179beb1e46fcf557645ad93e3ece8ef628b69ba"}, {0xdd, 0x79, "86f0cc76d5b0a7ccc4492e3db70cfc7a9fa3aa7c2ad209a124c339d68541436c7dfcfcf29f2291044c3462e6956ab2f16fa6df6054a32521757c251be14e15f50d96881b1d816df85112205582b16e600cd3aea387aaffd1276b9aa6a53f9359154477a55effa30d802888d868ecd9a2381bf273edd4d19abb"}, {0xdd, 0xe6, "50a91dff84a5e53e9cf7852e1a306160f9d2d8a1e6de6c5ee8c9dc24a4ba131c254e00fa4139ff66888423043f20a4beed34f3cf5065a065b361493119bf1d0f645953895f44bcc124944d8934c418051c13ae47812854ee7fdccc9576f44b1a14fbc484970e5c5d45ccff778a85095ef2d0fc19ce29eb5f4a3f8d0966c43d9a2a927d69b6b213424a953104e60d0c39363378eb9c4712ebfdea179c63a28880990f1042ef7f11882096004c7fe8ecfa1a15611bb361cf4f3abf3845ad3dab4c71d039a42a19a6987f994e5bf387ff1b5ce314bfe0c3bb88a0fe3ade715c5de6b79abfaf2d21"}, {0xdd, 0xe9, "a2ca686e362adf1be61f02a14802e94a70dfee237fc81d0370509a6fd3202f7cca2790826eacf4b078337364982ba01cf8fd6f06ef9695fcb563b485a1ed22bbb0bbcca22d027c22cc6cc1e8b0bb29e681ab4d300d5b916874cb08584b4b7b426c4c8da385bb995bdf2a6e85e64c6b61a51c45db679a34da3910a8ad52ea74f1680f160ab40b476829a624b1e4883bc911c17190c0d60d90547e867a70884792cb95313e17850b340ba868f52bf25093fd9d2ce07a4e1c672fd3684854ac99b3d9239f9164d8ff16e15b65a62abacd7ec734aea85474737166062ca4c3387b02627a802727fb5c30e0"}, {0xdd, 0xe, "70273c7659000000000001000000"}]}}, @NL80211_ATTR_PROBE_RESP={0x47d, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x1, 0x1, 0x4, 0x4, 0x81]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x4, 0x8001, 0x9, 0x1, 0xfffa, 0x9, 0x1dc0, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x4, 0xf387, 0x9, 0x3, 0x800]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x1, 0xfff7, 0x0, 0x20, 0x0, 0x4e8, 0x40, 0xf089, 0xfff7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x6, 0x2, 0x7421, 0x1, 0x8, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8000, 0x5]}]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x9, 0x1, 0x9, 0x9]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2340}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 00:43:17 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:17 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 00:43:17 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:17 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:43:18 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:18 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x6) socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f0000002b00)={0x2340, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x17c8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0xb3f8, 0x4, 0xff, 0x7, 0x81]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x3, 0xd6c0, 0x81, 0x7ff, 0x0, 0x3ac, 0x8001, 0x1f]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x34, 0x80, [@ht={0x2d, 0x1a, {0x10, 0x2, 0x1, 0x0, {0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0x1b1, 0x2a, [@ibss={0x6, 0x2, 0x6072}, @random_vendor={0xdd, 0x88, "b1b55e0296e95c62a14cf12762a5f0e372ed5a5746b065aa1ec7b244a5a7695d9cf186f86ed870fd0eefd463f05a8ca5ad4993439f525815ff8b5ca98f64c0ffaa97944f1134eacd6514e56bc545a954f91e0e08289d6e823fe0f01c0065143f1476482514cfbf563dde937368171a1e08b905ad65ab89418c2bdaff7cb067e08b074e06ba8568cf"}, @perr={0x84, 0x5c, {0x1f, 0x6, [@ext={{}, @broadcast, 0xbd97, @broadcast, 0x2f}, @ext={{}, @device_a, 0x2, @device_a, 0x13}, @not_ext={{}, @broadcast, 0x3f, "", 0x1e}, @not_ext={{}, @device_a, 0x1, "", 0x27}, @not_ext={{}, @device_a, 0x4, "", 0x3d}, @not_ext={{}, @device_a, 0xfffc0000, "", 0x37}]}}, @random={0xfe, 0xae, "bc17b18828711f782ca4acd6cec80492c0bcbbbd18e725fc81ecf38a707219380e81e3e4e9c3b831dc9ddd329ff5b33779c265845231b9abafdb2fc33e4dd8a27e8a1f9ad4a8b9f4e3f68e746a73657433eb83cb191141f4a2febf84ee08b3a52019045b473e130dd393f220a9a4fa4f15e502c42b962f2f28aca12c6635119aaa1c1a8e464b22e3571d132ee89a88b782d02a3525b53ab848bac37f01cd4b1a52e1ebf937b196fede5d4fd251a2"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x34, 0x34}}, @gcr_ga={0xbd, 0x6}, @dsss={0x3, 0x1, 0xac}]}, @NL80211_ATTR_BEACON_HEAD={0x14b, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x4}}, @ver_80211n={0x0, 0x3f89, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffff7f, @default, 0x23a, @void, @void, @void, @val={0x4, 0x6, {0x2b, 0x8, 0x40, 0x7}}, @val={0x6, 0x2, 0x3}, @val={0x5, 0x99, {0x7f, 0x26, 0x81, "3203072d3e1780051dc0c1b747f3b05d2e98a337e3e279bdbd4d5b876219657a4759a0071e5ca02e444777a01371f0f421d51f193ebe4d6bd3b6b6d4d7b0459cea52a96310778be7bd2a016b13d648db7571b0da0d2dccd5f98fed0f18688335f5bcedc5ba5d8b6e74d6b9dbd9fd15e0d1d22e7b76c4abce1b0c4f9be8738e458de9a5e4400794a826ff32004a72662949d57256ee1d"}}, @val={0x25, 0x3, {0x1, 0xae, 0x5}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x40, 0x68}}, @void, [{0xdd, 0x65, "7f5b09cde62c7a88871a518abe2cecafb6086edbbe52f5634042678d8506e78c862e7256e43123c28e73e6e57e8b894d4206dee08e37f7ed97b918cd383335e2f2ad30dff70fce06cbb9da7470331a81d10fb2a3f21ccec5ab882d658e26975507f7215bb5"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xa8, 0x7f, [@prep={0x83, 0x25, @ext={{}, 0x1, 0x40, @broadcast, 0x9, @device_a, 0x20, 0x6, @device_a, 0x1ff}}, @measure_req={0x26, 0x78, {0x6, 0x7f, 0x81, "48c49b2667a892d180f594681aefed6fc4e7451da61889e724bb71e3596d15208631aec80144b544e6ea684caf55bc3143bbd97859b75d347ff8b0e8aae7166b838fb026bece0a374858815b6845df91200ce61896062ab3907df672adb00fce52b8654e2ada18594f52ff8dcec2217e0d869d414b"}}, @dsss={0x3, 0x1, 0x93}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x8b, 0x80, [@chsw_timing={0x68, 0x4, {0x3, 0x8001}}, @tim={0x5, 0x6c, {0xff, 0xe, 0xfd, "a52c736f2fd6f30e8df367a5481d26f2d226d5a7743a48c0e98fb7c0b3dd860d9f388b9326cacf38e970df1902ca0aa98a44bde6018b37939220ac21d4b360047dadba1822b1810ecc26316ab22784a639dcfc3463d8fdcdb5679a19d290de1e258b54f79d00bb64a2"}}, @gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6, {0x1, 0x9, 0x0, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x12c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd8, 0x3, "51df9db7752ff6365439fc39d86300778cb8a8a6e621f9bd1d3e0589cb70292a2e1acf917aee7ae3fcdf42b175494fb8930196fd0f8a2bc257ef92e1e9483f700f3591ee7cd63ecf676334dc9cec23784c18f121d394e58b104ccad1c6983a0ea42227f82bfd127373a7958659a860202e22c0ca1d20dbce80e8be6da9581fc6ee37a701988993c959564f175ada931fd0a440445ce5019323f1512ec44e0ab6161ec8742dbe917bb351fdab3f54103cc5597e8f70c2496f4fcd3e7173aee319c14b1a1d4be5ed4d04a42e3fab1d4138b8f33e81"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "a235c9fa187fd7414d6c1255caeb96d108c3e591efa1de02a88224e59a34a275e4636cbdda5771783bcdd1d6e1d1dd0b02071e9ad207af8d5f25de9b601a0aafccb5b9fa99b0045dfbc81f869ae751339280a064275c0385d2261de410e729f8330c6c8e1485ed6c587d2c66af78a307cb71c26e12fc7de8e69b4d303c07754d"}, @NL80211_FTM_RESP_ATTR_LCI={0xec, 0x2, "da4c277017bd91f4f464af489313aa3e8df30761f802965c456cf9b0816548cdc4b2ff180319c5a4deb407c9d618fb05476661d4175e85532187f33044489095fd9d71b0746ad02ce87bcf67f0d756e62bee037a408f4cd367a9a281d904dbe1b6f3995b3f3be22c0dd8d429baacb97bcc3556f942d20649fb3435f2a0d4acd868c70fcdb584a5dc36793898e53005bb6ec1b79ef0f3ae4d164b6e4fce5173e8391b8f435094d3b0997f04989b4cf920ca545ef45d003ff6c4478da7b48c1b25d08053dd4578230d299cd9a9ff780331fe5ea40f37091efbf9790552e8f22aeadc505161fb797b0e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "d8cb17cf9739c68382bf4c896ed6f8ec88f824334c5ec4a136f5d13daeddf47319dff190448304371ae2bcc33204c609d681b0e649351c8f576601724f9ac3047b1b4820e1c98b3aa81932ee1a0fd8fb1ca58dfd957b2f211f2aa6e0939c7754b8dcee6688865e78f838ec"}]}], @beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x8001, 0xfffa]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xffff, 0x80]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x4f, 0x7f, [@perr={0x84, 0x49, {0x81, 0x5, [@ext={{}, @device_a, 0x89, @device_a, 0x11}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @not_ext={{}, @device_b, 0x3ff, "", 0x7}, @not_ext={{}, @device_a, 0x1, "", 0x3c}, @not_ext={{}, @device_b, 0x7, "", 0x40}]}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x81, 0x2, 0xc0, 0xb5, 0x20, 0x4, 0x2]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_IES={0xac0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x5, 0x7fff, 0xfffb, 0x7fff]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x5b6, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6f}, @device_a, @broadcast, @initial, {0x1, 0x1}}, @ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x100, @default, 0xe501, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x80}, @val={0x5, 0xfa, {0x80, 0x8b, 0x5, "669c29eabbab134e0b003b510b3c57c0ce247dc8230a1b45469e883f64c9b6848d9ea246fa694f9e19a758f644198cefc4b8d9619ea31d32e5dd7e47f2e0dbbf217ce2fc906d289a18e51ba22cc693d9422957e408e0953b39e76f34082702a4a2381fd96491b2faffd58fd458c906e21ccddad35d84e261fad227c5bd052a422e246e99dbd85ed229b0cfa047164216d9ca2698ca0d08d7a85667ea8173f3828d6121eb66531c580a9a1864e52ec0a7e094eed84761533ead7f539c2ffb7b040cdf6340f97819f08a28cccedc46bb01aaa434352632ef01bfe749c1e36949487956a8fa640393c500f8e30cc2c8520545727874355291"}}, @val={0x25, 0x3, {0x0, 0xa, 0xa9}}, @void, @val={0x3c, 0x4, {0x1, 0x1f, 0x95, 0x2}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x200, 0xff, 0x0, 0x20, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x7, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x82, 0x60}}, @void, [{0xdd, 0xe1, "2f1ba106687907faf5e1d0265a35542cd183b28ae8b79548e5ad92380f2e22b60384e9e5068d26a9d93b716f9ede0d52b2e597d9d3190ea5b7384bad8a889b30c16da2db3fc3540516b0c31be85ea28ab9a84859304de457fcd62dc93c71dc02804de037f7371a5604ba3c6d5619df842d3c4bbaf7220a1109d0ecd7ad89674985cddc5e634f7493dbe2ac7c5c206ce198f9e75c9dfc9d024e17fd1ea9adcd785555d3c0221f871467f596de3e515c57034675df6edea36c2d42dec428c1448f1fd846e3d353482015b4a9f176ea8a3bcff139a9ffb91e45aa36d11282f54101c5"}, {0xdd, 0xaf, "250085e0b970780b4ac562180e40cc150fb0031a20689d0fbe457541df6e4733be71a511df4a15fea0952a0763c0cd9b053d08dc52bee7b2422810288a55651485bbde5b05ead8d566339cbc91dce3bb0eb65cc7f1ef7e88486805a61dc0ed6e812980f9262a2bcd3aecaa87961489fae6dadcb8eb44716bfb7c4c7bd11bfc8707afa08087f75232d61bd41cfcf966d1c22003e8324a753e17fb4d14aa602c4d79df6bcbf472193551033261ae8961"}, {0xdd, 0x27, "328155a334b1c1ce99e016eb8b74403c51b207fadc9440102df9a0f05cb76586c7db3987f50135"}, {0xdd, 0x9, "4c54643b3bbbf5a69d"}, {0xdd, 0x22, "8b86764bf1ca880fd6abb227ba48e179beb1e46fcf557645ad93e3ece8ef628b69ba"}, {0xdd, 0x79, "86f0cc76d5b0a7ccc4492e3db70cfc7a9fa3aa7c2ad209a124c339d68541436c7dfcfcf29f2291044c3462e6956ab2f16fa6df6054a32521757c251be14e15f50d96881b1d816df85112205582b16e600cd3aea387aaffd1276b9aa6a53f9359154477a55effa30d802888d868ecd9a2381bf273edd4d19abb"}, {0xdd, 0xe6, "50a91dff84a5e53e9cf7852e1a306160f9d2d8a1e6de6c5ee8c9dc24a4ba131c254e00fa4139ff66888423043f20a4beed34f3cf5065a065b361493119bf1d0f645953895f44bcc124944d8934c418051c13ae47812854ee7fdccc9576f44b1a14fbc484970e5c5d45ccff778a85095ef2d0fc19ce29eb5f4a3f8d0966c43d9a2a927d69b6b213424a953104e60d0c39363378eb9c4712ebfdea179c63a28880990f1042ef7f11882096004c7fe8ecfa1a15611bb361cf4f3abf3845ad3dab4c71d039a42a19a6987f994e5bf387ff1b5ce314bfe0c3bb88a0fe3ade715c5de6b79abfaf2d21"}, {0xdd, 0xe9, "a2ca686e362adf1be61f02a14802e94a70dfee237fc81d0370509a6fd3202f7cca2790826eacf4b078337364982ba01cf8fd6f06ef9695fcb563b485a1ed22bbb0bbcca22d027c22cc6cc1e8b0bb29e681ab4d300d5b916874cb08584b4b7b426c4c8da385bb995bdf2a6e85e64c6b61a51c45db679a34da3910a8ad52ea74f1680f160ab40b476829a624b1e4883bc911c17190c0d60d90547e867a70884792cb95313e17850b340ba868f52bf25093fd9d2ce07a4e1c672fd3684854ac99b3d9239f9164d8ff16e15b65a62abacd7ec734aea85474737166062ca4c3387b02627a802727fb5c30e0"}, {0xdd, 0xe, "70273c7659000000000001000000"}]}}, @NL80211_ATTR_PROBE_RESP={0x47d, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x1, 0x1, 0x4, 0x4, 0x81]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x4, 0x8001, 0x9, 0x1, 0xfffa, 0x9, 0x1dc0, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x4, 0xf387, 0x9, 0x3, 0x800]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x1, 0xfff7, 0x0, 0x20, 0x0, 0x4e8, 0x40, 0xf089, 0xfff7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x6, 0x2, 0x7421, 0x1, 0x8, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8000, 0x5]}]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x9, 0x1, 0x9, 0x9]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2340}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)) 00:43:18 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 00:43:18 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:18 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:18 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 00:43:18 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:18 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x6) socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)) 00:43:18 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 00:43:18 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:18 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:18 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 00:43:18 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:18 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:18 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x6) socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)) 00:43:18 executing program 0: socketpair(0x26, 0x5, 0x7, 0x0) 00:43:18 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:18 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 00:43:19 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:19 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x4040844) 00:43:19 executing program 0: socketpair(0x26, 0x5, 0x7, 0x0) 00:43:19 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x6) socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)) 00:43:19 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0), 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:19 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:19 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x4040844) 00:43:19 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4040844) 00:43:19 executing program 0: socketpair(0x26, 0x5, 0x7, 0x0) 00:43:19 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x6) socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)) 00:43:19 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0), 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:19 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:19 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:19 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:19 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:19 executing program 5: socketpair(0xf, 0x3, 0x8001, &(0x7f0000000000)) 00:43:19 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0), 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:19 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:20 executing program 1: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 00:43:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:20 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:20 executing program 5: socketpair(0x0, 0x3, 0x8001, &(0x7f0000000000)) 00:43:20 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:20 executing program 2: socketpair(0x11, 0x2, 0x73cf, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$phonet(r0, &(0x7f0000000140)=""/31, 0x1f, 0x40006023, 0x0, 0x0) r2 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000000), 0x80000) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x81800) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440), 0x68000, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 00:43:20 executing program 1: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 00:43:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:20 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:20 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:20 executing program 2: socketpair(0x11, 0x2, 0x73cf, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$phonet(r0, &(0x7f0000000140)=""/31, 0x1f, 0x40006023, 0x0, 0x0) r2 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000000), 0x80000) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x81800) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440), 0x68000, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) 00:43:20 executing program 5: socketpair(0x0, 0x3, 0x8001, &(0x7f0000000000)) 00:43:20 executing program 1: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 00:43:20 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {0x0}], 0x2, 0x0) 00:43:20 executing program 4: socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x80) 00:43:20 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf2521000000080003007e3869e7c6b228a209bafd96aff6df49b26d4e218e3fc35d3ba5b0fe920d19a2389d9bc19650a7a2277f008000"/74, @ANYRES32=0x0, @ANYBLOB="0c009900040000003e0000000400ff000400ec000600eb000100000006009800000000000600eb0000080000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x400f0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x1100, &(0x7f0000000100)={0x100070, 0x74, 0x100000}, 0x20) 00:43:21 executing program 0: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:21 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 00:43:21 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, 0x0, 0x0, 0x0) 00:43:21 executing program 5: socketpair(0x0, 0x3, 0x8001, &(0x7f0000000000)) 00:43:21 executing program 4: mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)) 00:43:21 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf2521000000080003007e3869e7c6b228a209bafd96aff6df49b26d4e218e3fc35d3ba5b0fe920d19a2389d9bc19650a7a2277f008000"/74, @ANYRES32=0x0, @ANYBLOB="0c009900040000003e0000000400ff000400ec000600eb000100000006009800000000000600eb0000080000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x400f0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x1100, &(0x7f0000000100)={0x100070, 0x74, 0x100000}, 0x20) 00:43:21 executing program 0: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:21 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, 0x0, 0x0, 0x0) 00:43:21 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 00:43:21 executing program 4: socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) mq_open(&(0x7f0000000140)='\x00', 0x1, 0x40, &(0x7f0000000180)={0x35, 0x8, 0xfffffffffffffff9, 0x200}) 00:43:21 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf2521000000080003007e3869e7c6b228a209bafd96aff6df49b26d4e218e3fc35d3ba5b0fe920d19a2389d9bc19650a7a2277f008000"/74, @ANYRES32=0x0, @ANYBLOB="0c009900040000003e0000000400ff000400ec000600eb000100000006009800000000000600eb0000080000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x400f0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x1100, &(0x7f0000000100)={0x100070, 0x74, 0x100000}, 0x20) 00:43:21 executing program 0: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:21 executing program 5: socketpair(0xf, 0x0, 0x8001, &(0x7f0000000000)) 00:43:21 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, 0x0, 0x0, 0x0) 00:43:22 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x1100, &(0x7f0000000100)={0x100070, 0x74, 0x100000}, 0x20) 00:43:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100002}, 0x20) 00:43:22 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:22 executing program 5: socketpair(0xf, 0x0, 0x8001, &(0x7f0000000000)) 00:43:22 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}], 0x1, 0x0) 00:43:22 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 00:43:22 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x1100, &(0x7f0000000100)={0x100070, 0x74, 0x100000}, 0x20) 00:43:22 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}], 0x1, 0x0) 00:43:22 executing program 5: socketpair(0xf, 0x0, 0x8001, &(0x7f0000000000)) 00:43:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100002}, 0x20) 00:43:22 executing program 2: mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1100, &(0x7f0000000100)={0x100070, 0x74, 0x100000}, 0x20) 00:43:22 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:22 executing program 1: socketpair(0x26, 0x0, 0x0, &(0x7f0000000040)) 00:43:22 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/184, 0xb8}], 0x1, 0x0) 00:43:22 executing program 5: socketpair(0xf, 0x3, 0x0, &(0x7f0000000000)) 00:43:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100002}, 0x20) 00:43:23 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0x100070, 0x74, 0x100000}, 0x20) 00:43:23 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0) 00:43:23 executing program 1: socketpair(0x26, 0x0, 0x0, &(0x7f0000000040)) 00:43:23 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:23 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) 00:43:23 executing program 4: mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100002}, 0x20) 00:43:23 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100070, 0x74, 0x100000}, 0x20) 00:43:23 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0) 00:43:23 executing program 1: socketpair(0x26, 0x0, 0x0, &(0x7f0000000040)) 00:43:23 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) 00:43:23 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100002}, 0x20) 00:43:23 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:23 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0) 00:43:23 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) 00:43:23 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:24 executing program 1: socketpair(0x26, 0x5, 0x0, 0x0) 00:43:24 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:24 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:24 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0) 00:43:24 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:24 executing program 5: socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x68}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "f02847e6bde3"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "44fe089186a70241b0d915ed06"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x814) 00:43:24 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:24 executing program 1: socketpair(0x26, 0x5, 0x0, 0x0) 00:43:24 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:24 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:24 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0) 00:43:24 executing program 5: r0 = semget$private(0x0, 0x2, 0x488) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x30843, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000300)=[@release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x9, 0x0, 0x23}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/1, 0x1, 0x0, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/3, 0x3, 0x1, 0x8}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}}, @exit_looper], 0x8, 0x0, &(0x7f0000000380)="0a2604f82cee7e1f"}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/59) ioprio_set$pid(0x2, r1, 0x4004) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x5, 0x0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x24040080}, 0x4c000) r4 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) 00:43:24 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:24 executing program 1: socketpair(0x26, 0x5, 0x0, 0x0) 00:43:24 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x74, 0x100000}, 0x20) 00:43:24 executing program 3: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0) 00:43:24 executing program 0: socketpair(0x1, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:24 executing program 5: socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f00000000c0)=0x3ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04197a0c6b"], 0x7) socketpair(0x1e, 0x3, 0x80, &(0x7f0000000080)) 00:43:24 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x20) 00:43:24 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x74, 0x100000}, 0x20) 00:43:25 executing program 1: r0 = semget$private(0x0, 0x2, 0x488) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x30843, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000300)=[@release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x9, 0x0, 0x23}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/1, 0x1, 0x0, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/3, 0x3, 0x1, 0x8}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}}, @exit_looper], 0x8, 0x0, &(0x7f0000000380)="0a2604f82cee7e1f"}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/59) ioprio_set$pid(0x2, r1, 0x4004) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x5, 0x0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r3, 0x0, 0x4c000) r4 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) 00:43:25 executing program 0: socketpair(0x1, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:25 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x2f, 0x100000}, 0x20) 00:43:25 executing program 5: socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f00000000c0)=0x3ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04197a0c6b"], 0x7) socketpair(0x1e, 0x3, 0x80, &(0x7f0000000080)) 00:43:25 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x20) 00:43:25 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x74, 0x100000}, 0x20) 00:43:25 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) 00:43:25 executing program 0: socketpair(0x1, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:25 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x2f, 0x100000}, 0x20) 00:43:25 executing program 5: socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f00000000c0)=0x3ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04197a0c6b"], 0x7) socketpair(0x1e, 0x3, 0x80, &(0x7f0000000080)) 00:43:25 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x20) [ 2542.500638][ T1202] ieee802154 phy0 wpan0: encryption failed: -22 [ 2542.507279][ T1202] ieee802154 phy1 wpan1: encryption failed: -22 00:43:25 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100070, 0x0, 0x100000}, 0x20) 00:43:25 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) 00:43:25 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:25 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x2f, 0x100000}, 0x20) 00:43:25 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044080}, 0x1) semop(r3, &(0x7f0000001180)=[{0x0, 0x1, 0x1800}, {0x0, 0x1, 0x800}, {0x4, 0xfeff, 0x1000}, {0x2, 0x3, 0x1000}, {0x1, 0x6, 0x800}, {0x3, 0x1, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6, 0x1800}, {0x1, 0x40, 0x800}, {0x4, 0x1, 0x1000}], 0xa) 00:43:25 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100070, 0x0, 0x100000}, 0x20) 00:43:26 executing program 5: socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f00000000c0)=0x3ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04197a0c6b"], 0x7) 00:43:26 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:26 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) 00:43:26 executing program 3: mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x2f, 0x100000}, 0x20) 00:43:26 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044080}, 0x1) semop(r3, &(0x7f0000001180)=[{0x0, 0x1, 0x1800}, {0x0, 0x1, 0x800}, {0x4, 0xfeff, 0x1000}, {0x2, 0x3, 0x1000}, {0x1, 0x6, 0x800}, {0x3, 0x1, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6, 0x1800}, {0x1, 0x40, 0x800}, {0x4, 0x1, 0x1000}], 0xa) 00:43:26 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100070, 0x0, 0x100000}, 0x20) 00:43:26 executing program 5: socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04197a0c6b"], 0x7) 00:43:26 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:26 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2f, 0x100000}, 0x20) 00:43:26 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:43:26 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044080}, 0x1) semop(r3, &(0x7f0000001180)=[{0x0, 0x1, 0x1800}, {0x0, 0x1, 0x800}, {0x4, 0xfeff, 0x1000}, {0x2, 0x3, 0x1000}, {0x1, 0x6, 0x800}, {0x3, 0x1, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6, 0x1800}, {0x1, 0x40, 0x800}, {0x4, 0x1, 0x1000}], 0xa) 00:43:26 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100070, 0x74}, 0x20) 00:43:26 executing program 5: socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04197a0c6b"], 0x7) 00:43:26 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x0) 00:43:26 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:26 executing program 1: socketpair(0x0, 0x2, 0x7ff, &(0x7f0000000040)) 00:43:26 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044080}, 0x1) semop(r3, &(0x7f0000001180)=[{0x0, 0x1, 0x1800}, {0x0, 0x1, 0x800}, {0x4, 0xfeff, 0x1000}, {0x2, 0x3, 0x1000}, {0x1, 0x6, 0x800}, {0x3, 0x1, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6, 0x1800}, {0x1, 0x40, 0x800}, {0x4, 0x1, 0x1000}], 0xa) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}}, 0x24) 00:43:26 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044080}, 0x1) 00:43:27 executing program 5: socketpair(0x29, 0x5, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04197a0c6b"], 0x7) 00:43:27 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x0) 00:43:27 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:27 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044080}, 0x1) semop(r3, &(0x7f0000001180)=[{0x0, 0x1, 0x1800}, {0x0, 0x1, 0x800}, {0x4, 0xfeff, 0x1000}, {0x2, 0x3, 0x1000}, {0x1, 0x6, 0x800}, {0x3, 0x1, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6, 0x1800}, {0x1, 0x40, 0x800}, {0x4, 0x1, 0x1000}], 0xa) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}}, 0x24) 00:43:27 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00'}) 00:43:27 executing program 1: socketpair(0x0, 0x2, 0x7ff, &(0x7f0000000040)) 00:43:27 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, 0x0, 0x0) 00:43:27 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04197a0c6b"], 0x7) 00:43:27 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:27 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044080}, 0x1) semop(r3, &(0x7f0000001180)=[{0x0, 0x1, 0x1800}, {0x0, 0x1, 0x800}, {0x4, 0xfeff, 0x1000}, {0x2, 0x3, 0x1000}, {0x1, 0x6, 0x800}, {0x3, 0x1, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6, 0x1800}, {0x1, 0x40, 0x800}, {0x4, 0x1, 0x1000}], 0xa) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}}, 0x24) 00:43:27 executing program 5: syz_emit_vhci(0x0, 0x7) 00:43:27 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:43:27 executing program 1: socketpair(0x0, 0x2, 0x7ff, &(0x7f0000000040)) 00:43:27 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000}, 0x20) 00:43:27 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044080}, 0x1) semop(r3, &(0x7f0000001180)=[{0x0, 0x1, 0x1800}, {0x0, 0x1, 0x800}, {0x4, 0xfeff, 0x1000}, {0x2, 0x3, 0x1000}, {0x1, 0x6, 0x800}, {0x3, 0x1, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6, 0x1800}, {0x1, 0x40, 0x800}, {0x4, 0x1, 0x1000}], 0xa) 00:43:28 executing program 5: syz_emit_vhci(0x0, 0x7) 00:43:28 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) semget(0x3, 0x3, 0x200) 00:43:28 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:43:28 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000}, 0x20) 00:43:28 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044080}, 0x1) 00:43:28 executing program 5: syz_emit_vhci(0x0, 0x7) 00:43:28 executing program 1: socketpair(0x29, 0x0, 0x7ff, &(0x7f0000000040)) 00:43:28 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:43:28 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000}, 0x20) 00:43:28 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) 00:43:28 executing program 1: socketpair(0x29, 0x0, 0x7ff, &(0x7f0000000040)) 00:43:28 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) semget(0x3, 0x3, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00'}) 00:43:28 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)) semget(0x3, 0x3, 0x200) 00:43:28 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) 00:43:28 executing program 1: socketpair(0x29, 0x0, 0x7ff, &(0x7f0000000040)) 00:43:28 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:43:28 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2f}, 0x20) 00:43:29 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) semget(0x3, 0x3, 0x200) 00:43:29 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) semget(0x3, 0x3, 0x200) 00:43:29 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) 00:43:29 executing program 0: r0 = semget$private(0x0, 0x2, 0x488) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x30843, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000300)=[@release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x9, 0x0, 0x23}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/1, 0x1, 0x0, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/3, 0x3, 0x1, 0x8}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}}, @exit_looper], 0x8, 0x0, &(0x7f0000000380)="0a2604f82cee7e1f"}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/59) ioprio_set$pid(0x2, r1, 0x4004) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x300, 0x0, 0x0, 0x24040080}, 0x4c000) r4 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) 00:43:29 executing program 1: socketpair(0x29, 0x2, 0x0, &(0x7f0000000040)) 00:43:29 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) socketpair(0x23, 0x4, 0x92eb, &(0x7f0000000040)) semget(0x3, 0x3, 0x200) 00:43:29 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000}, 0x20) 00:43:29 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semget(0x3, 0x3, 0x200) 00:43:29 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 00:43:29 executing program 1: socketpair(0x29, 0x2, 0x0, &(0x7f0000000040)) 00:43:29 executing program 0: socketpair(0x2, 0x5, 0x0, &(0x7f0000000040)) 00:43:29 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000}, 0x20) 00:43:29 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) semget(0x3, 0x3, 0x200) 00:43:29 executing program 4: semget$private(0x0, 0x1, 0x0) semget(0x3, 0x3, 0x200) 00:43:29 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 00:43:29 executing program 1: socketpair(0x29, 0x2, 0x0, &(0x7f0000000040)) 00:43:29 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semget(0x3, 0x3, 0x200) 00:43:29 executing program 0: socketpair(0x2, 0x5, 0x0, &(0x7f0000000040)) 00:43:29 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000}, 0x20) 00:43:29 executing program 4: semget(0x3, 0x3, 0x200) 00:43:30 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 00:43:30 executing program 2: semget$private(0x0, 0x1, 0x0) semget(0x3, 0x3, 0x200) 00:43:30 executing program 1: socketpair(0x29, 0x2, 0x7ff, 0x0) 00:43:30 executing program 0: socketpair(0x2, 0x5, 0x0, &(0x7f0000000040)) 00:43:30 executing program 3: mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000}, 0x20) 00:43:30 executing program 4: semget(0x3, 0x0, 0x200) 00:43:30 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0419"], 0x7) 00:43:30 executing program 2: semget(0x3, 0x3, 0x200) 00:43:30 executing program 1: socketpair(0x29, 0x2, 0x7ff, 0x0) 00:43:30 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 00:43:30 executing program 4: semget(0x3, 0x0, 0x0) 00:43:30 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000}, 0x20) 00:43:30 executing program 2: semget(0x3, 0x0, 0x200) 00:43:30 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) 00:43:30 executing program 1: socketpair(0x29, 0x2, 0x7ff, 0x0) 00:43:30 executing program 4: semget(0x3, 0x0, 0x0) (fail_nth: 1) [ 2547.814920][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:30 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:30 executing program 2: semget(0x3, 0x0, 0x0) 00:43:31 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) [ 2548.009849][T18559] FAULT_INJECTION: forcing a failure. [ 2548.009849][T18559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2548.024908][T18559] CPU: 1 PID: 18559 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 2548.033847][T18559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2548.044024][T18559] Call Trace: [ 2548.047387][T18559] [ 2548.050400][T18559] dump_stack_lvl+0x1ff/0x28e [ 2548.055278][T18559] dump_stack+0x25/0x28 00:43:31 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (fail_nth: 1) [ 2548.059616][T18559] should_fail+0x8ba/0x9c0 [ 2548.064239][T18559] should_fail_usercopy+0x39/0x40 [ 2548.069466][T18559] _copy_to_user+0x61/0x270 [ 2548.074149][T18559] simple_read_from_buffer+0x2ee/0x490 [ 2548.079830][T18559] proc_fail_nth_read+0x2d0/0x3a0 [ 2548.085075][T18559] ? proc_fault_inject_write+0x5d0/0x5d0 [ 2548.090894][T18559] vfs_read+0x6c8/0x1980 [ 2548.095315][T18559] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2548.101601][T18559] ? kmsan_get_metadata+0x33/0x220 00:43:31 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) [ 2548.106892][T18559] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2548.112897][T18559] ksys_read+0x28b/0x510 [ 2548.117343][T18559] __x64_sys_read+0xdb/0x120 [ 2548.122117][T18559] do_syscall_64+0x54/0xd0 [ 2548.126725][T18559] ? exc_page_fault+0x76/0x150 [ 2548.131697][T18559] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2548.137764][T18559] RIP: 0033:0x7f1b58f97c0c [ 2548.142286][T18559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2548.162058][T18559] RSP: 002b:00007f1b5795a160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2548.170639][T18559] RAX: ffffffffffffffda RBX: 00007f1b590f7f60 RCX: 00007f1b58f97c0c [ 2548.178732][T18559] RDX: 000000000000000f RSI: 00007f1b5795a1e0 RDI: 0000000000000003 [ 2548.186814][T18559] RBP: 00007f1b5795a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2548.194893][T18559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2548.202991][T18559] R13: 00007f1b5962bb1f R14: 00007f1b5795a300 R15: 0000000000022000 [ 2548.211127][T18559] 00:43:31 executing program 4: semget(0x3, 0x0, 0x0) [ 2548.413459][T18570] FAULT_INJECTION: forcing a failure. [ 2548.413459][T18570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2548.427815][T18570] CPU: 1 PID: 18570 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 2548.436754][T18570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2548.446939][T18570] Call Trace: [ 2548.450303][T18570] [ 2548.453324][T18570] dump_stack_lvl+0x1ff/0x28e [ 2548.458216][T18570] dump_stack+0x25/0x28 [ 2548.462574][T18570] should_fail+0x8ba/0x9c0 [ 2548.467220][T18570] should_fail_alloc_page+0x219/0x280 [ 2548.472826][T18570] __alloc_pages+0x3f0/0x1090 [ 2548.477759][T18570] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2548.483791][T18570] alloc_pages+0x8a5/0xb80 [ 2548.488440][T18570] __pmd_alloc+0xbc/0x8a0 [ 2548.492945][T18570] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2548.498941][T18570] handle_mm_fault+0x1ac2/0x4750 [ 2548.504127][T18570] do_user_addr_fault+0xf77/0x1ee0 [ 2548.509470][T18570] exc_page_fault+0x69/0x150 [ 2548.514246][T18570] asm_exc_page_fault+0x1e/0x30 [ 2548.519250][T18570] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2548.525122][T18570] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2548.544880][T18570] RSP: 0018:ffff888123193de0 EFLAGS: 00050293 [ 2548.551080][T18570] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2548.559155][T18570] RDX: ffff8880303c2080 RSI: 0000000000000005 RDI: 0000000000000000 [ 2548.567240][T18570] RBP: ffff888123193ea0 R08: ffffffff8c8d9709 R09: 0000000000000000 [ 2548.575331][T18570] R10: ffff888123193d00 R11: 00000000ad3a6234 R12: 0000000000000000 [ 2548.583409][T18570] R13: 0000000000000000 R14: ffff8880303c2bc0 R15: 0000000020000040 [ 2548.591509][T18570] ? __sys_socketpair+0x1e9/0xdb0 [ 2548.596725][T18570] ? __sys_socketpair+0x236/0xdb0 [ 2548.601938][T18570] __x64_sys_socketpair+0x117/0x170 [ 2548.607322][T18570] do_syscall_64+0x54/0xd0 [ 2548.611903][T18570] ? exc_page_fault+0x76/0x150 [ 2548.616848][T18570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2548.622906][T18570] RIP: 0033:0x7f3cca603059 [ 2548.627426][T18570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2548.647184][T18570] RSP: 002b:00007f3cc8f78168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2548.655751][T18570] RAX: ffffffffffffffda RBX: 00007f3cca715f60 RCX: 00007f3cca603059 [ 2548.663840][T18570] RDX: 00000000000007ff RSI: 0000000000000002 RDI: 0000000000000029 [ 2548.671910][T18570] RBP: 00007f3cc8f781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2548.679988][T18570] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2548.688063][T18570] R13: 00007f3ccac49b1f R14: 00007f3cc8f78300 R15: 0000000000022000 [ 2548.696177][T18570] 00:43:31 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:31 executing program 2: semget(0x3, 0x0, 0x0) (fail_nth: 1) 00:43:31 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 00:43:31 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 00:43:31 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (fail_nth: 2) [ 2549.032810][T18578] FAULT_INJECTION: forcing a failure. [ 2549.032810][T18578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2549.046422][T18578] CPU: 0 PID: 18578 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 2549.055353][T18578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2549.065522][T18578] Call Trace: [ 2549.068884][T18578] [ 2549.071891][T18578] dump_stack_lvl+0x1ff/0x28e [ 2549.076772][T18578] dump_stack+0x25/0x28 [ 2549.081105][T18578] should_fail+0x8ba/0x9c0 [ 2549.085740][T18578] should_fail_usercopy+0x39/0x40 [ 2549.090950][T18578] _copy_to_user+0x61/0x270 [ 2549.095638][T18578] simple_read_from_buffer+0x2ee/0x490 [ 2549.101321][T18578] proc_fail_nth_read+0x2d0/0x3a0 [ 2549.106551][T18578] ? proc_fault_inject_write+0x5d0/0x5d0 [ 2549.112368][T18578] vfs_read+0x6c8/0x1980 [ 2549.116782][T18578] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2549.123080][T18578] ? kmsan_get_metadata+0x33/0x220 [ 2549.128384][T18578] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2549.134402][T18578] ksys_read+0x28b/0x510 [ 2549.138854][T18578] __x64_sys_read+0xdb/0x120 [ 2549.143637][T18578] do_syscall_64+0x54/0xd0 [ 2549.148245][T18578] ? exc_page_fault+0x76/0x150 [ 2549.153219][T18578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2549.159308][T18578] RIP: 0033:0x7fdd2871cc0c [ 2549.163845][T18578] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2549.183624][T18578] RSP: 002b:00007fdd270df160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2549.192212][T18578] RAX: ffffffffffffffda RBX: 00007fdd2887cf60 RCX: 00007fdd2871cc0c [ 2549.200360][T18578] RDX: 000000000000000f RSI: 00007fdd270df1e0 RDI: 0000000000000003 [ 2549.208466][T18578] RBP: 00007fdd270df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2549.216566][T18578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2549.224667][T18578] R13: 00007fdd28db0b1f R14: 00007fdd270df300 R15: 0000000000022000 [ 2549.232807][T18578] 00:43:32 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:43:32 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 00:43:32 executing program 4: semget(0x3, 0x3, 0x0) [ 2549.512556][T18583] FAULT_INJECTION: forcing a failure. [ 2549.512556][T18583] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.525608][T18583] CPU: 0 PID: 18583 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 2549.534554][T18583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2549.544731][T18583] Call Trace: [ 2549.548095][T18583] [ 2549.551091][T18583] dump_stack_lvl+0x1ff/0x28e [ 2549.555947][T18583] dump_stack+0x25/0x28 [ 2549.560246][T18583] should_fail+0x8ba/0x9c0 [ 2549.564844][T18583] __should_failslab+0x236/0x2d0 [ 2549.569959][T18583] should_failslab+0x29/0x70 [ 2549.574700][T18583] kmem_cache_alloc+0x12f/0x11c0 [ 2549.579828][T18583] ? cgroup_rstat_updated+0xf6/0x580 [ 2549.585292][T18583] ? __anon_vma_prepare+0xac/0xa90 [ 2549.590560][T18583] ? kmsan_get_metadata+0x33/0x220 [ 2549.595832][T18583] ? kmsan_get_metadata+0x33/0x220 [ 2549.601129][T18583] __anon_vma_prepare+0xac/0xa90 [ 2549.606218][T18583] ? kmsan_get_metadata+0x33/0x220 [ 2549.611491][T18583] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2549.617479][T18583] do_huge_pmd_anonymous_page+0x811/0x1da0 [ 2549.623492][T18583] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2549.629928][T18583] handle_mm_fault+0x4502/0x4750 [ 2549.635116][T18583] do_user_addr_fault+0xf77/0x1ee0 [ 2549.640461][T18583] exc_page_fault+0x69/0x150 [ 2549.645239][T18583] asm_exc_page_fault+0x1e/0x30 [ 2549.650240][T18583] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2549.656115][T18583] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2549.675871][T18583] RSP: 0018:ffff888123d7fde0 EFLAGS: 00050293 [ 2549.682064][T18583] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2549.690137][T18583] RDX: ffff8880303c2080 RSI: 0000000000000005 RDI: 0000000000000000 [ 2549.698212][T18583] RBP: ffff888123d7fea0 R08: ffffffff8c8d9709 R09: 0000000000000000 [ 2549.706308][T18583] R10: ffff888123d7fd00 R11: 00000000ad3a6234 R12: 0000000000000000 [ 2549.714386][T18583] R13: 0000000000000000 R14: ffff8880303c2bc0 R15: 0000000020000040 [ 2549.722491][T18583] ? __sys_socketpair+0x1e9/0xdb0 [ 2549.727696][T18583] ? __sys_socketpair+0x236/0xdb0 [ 2549.732907][T18583] __x64_sys_socketpair+0x117/0x170 [ 2549.738281][T18583] do_syscall_64+0x54/0xd0 [ 2549.742870][T18583] ? exc_page_fault+0x76/0x150 [ 2549.747833][T18583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2549.753908][T18583] RIP: 0033:0x7f3cca603059 [ 2549.758424][T18583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2549.778175][T18583] RSP: 002b:00007f3cc8f78168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2549.786739][T18583] RAX: ffffffffffffffda RBX: 00007f3cca715f60 RCX: 00007f3cca603059 [ 2549.794824][T18583] RDX: 00000000000007ff RSI: 0000000000000002 RDI: 0000000000000029 [ 2549.802888][T18583] RBP: 00007f3cc8f781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2549.810960][T18583] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2549.819034][T18583] R13: 00007f3ccac49b1f R14: 00007f3cc8f78300 R15: 0000000000022000 [ 2549.827156][T18583] 00:43:32 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000040)) 00:43:33 executing program 2: semget(0x3, 0x0, 0x0) 00:43:33 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000}, 0x20) 00:43:33 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (fail_nth: 3) 00:43:33 executing program 2: semget(0x3, 0x3, 0x0) 00:43:33 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000}, 0x20) [ 2550.217225][T18597] FAULT_INJECTION: forcing a failure. [ 2550.217225][T18597] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.230390][T18597] CPU: 0 PID: 18597 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 2550.239319][T18597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2550.249486][T18597] Call Trace: [ 2550.252846][T18597] [ 2550.255848][T18597] dump_stack_lvl+0x1ff/0x28e [ 2550.260706][T18597] dump_stack+0x25/0x28 [ 2550.265005][T18597] should_fail+0x8ba/0x9c0 [ 2550.269597][T18597] __should_failslab+0x236/0x2d0 [ 2550.274717][T18597] should_failslab+0x29/0x70 [ 2550.279459][T18597] kmem_cache_alloc+0x12f/0x11c0 [ 2550.284572][T18597] ? __anon_vma_prepare+0x1a5/0xa90 [ 2550.289910][T18597] ? find_mergeable_anon_vma+0xa1c/0xdf0 [ 2550.295719][T18597] ? kmsan_get_metadata+0x33/0x220 [ 2550.301013][T18597] __anon_vma_prepare+0x1a5/0xa90 [ 2550.306188][T18597] ? kmsan_get_metadata+0x33/0x220 [ 2550.311488][T18597] do_huge_pmd_anonymous_page+0x811/0x1da0 [ 2550.317493][T18597] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2550.323933][T18597] handle_mm_fault+0x4502/0x4750 [ 2550.329133][T18597] do_user_addr_fault+0xf77/0x1ee0 [ 2550.334484][T18597] exc_page_fault+0x69/0x150 [ 2550.339253][T18597] asm_exc_page_fault+0x1e/0x30 [ 2550.344250][T18597] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2550.350157][T18597] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2550.369919][T18597] RSP: 0018:ffff88810bfffde0 EFLAGS: 00050293 [ 2550.376117][T18597] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2550.384212][T18597] RDX: ffff88802a08a080 RSI: 0000000000000005 RDI: 0000000000000000 [ 2550.392310][T18597] RBP: ffff88810bfffea0 R08: ffffffff8c8d9709 R09: 0000000000000000 [ 2550.400399][T18597] R10: ffff88810bfffd00 R11: 00000000ad3a6234 R12: 0000000000000000 [ 2550.408478][T18597] R13: 0000000000000000 R14: ffff88802a08abc0 R15: 0000000020000040 [ 2550.416572][T18597] ? __sys_socketpair+0x1e9/0xdb0 [ 2550.421783][T18597] ? __sys_socketpair+0x236/0xdb0 [ 2550.426997][T18597] __x64_sys_socketpair+0x117/0x170 [ 2550.432374][T18597] do_syscall_64+0x54/0xd0 [ 2550.436945][T18597] ? exc_page_fault+0x76/0x150 [ 2550.441889][T18597] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2550.447939][T18597] RIP: 0033:0x7f3cca603059 [ 2550.452455][T18597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2550.472214][T18597] RSP: 002b:00007f3cc8f78168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2550.480775][T18597] RAX: ffffffffffffffda RBX: 00007f3cca715f60 RCX: 00007f3cca603059 [ 2550.488863][T18597] RDX: 00000000000007ff RSI: 0000000000000002 RDI: 0000000000000029 [ 2550.496935][T18597] RBP: 00007f3cc8f781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.505020][T18597] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 00:43:33 executing program 4: semget(0x3, 0x4, 0x0) [ 2550.513113][T18597] R13: 00007f3ccac49b1f R14: 00007f3cc8f78300 R15: 0000000000022000 [ 2550.521242][T18597] 00:43:33 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000040)) 00:43:33 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (fail_nth: 1) 00:43:33 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (fail_nth: 4) [ 2551.059524][T18609] FAULT_INJECTION: forcing a failure. [ 2551.059524][T18609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2551.073243][T18609] CPU: 1 PID: 18609 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 2551.082183][T18609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2551.084108][T18610] FAULT_INJECTION: forcing a failure. [ 2551.084108][T18610] name failslab, interval 1, probability 0, space 0, times 0 [ 2551.092351][T18609] Call Trace: [ 2551.092393][T18609] [ 2551.092431][T18609] dump_stack_lvl+0x1ff/0x28e [ 2551.092595][T18609] dump_stack+0x25/0x28 [ 2551.092721][T18609] should_fail+0x8ba/0x9c0 [ 2551.092879][T18609] should_fail_alloc_page+0x219/0x280 [ 2551.130415][T18609] __alloc_pages+0x3f0/0x1090 [ 2551.135306][T18609] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2551.141295][T18609] alloc_pages_vma+0x1d93/0x1f10 [ 2551.146431][T18609] do_huge_pmd_anonymous_page+0x1801/0x1da0 [ 2551.152549][T18609] handle_mm_fault+0x4502/0x4750 [ 2551.157723][T18609] do_user_addr_fault+0xf77/0x1ee0 [ 2551.163063][T18609] exc_page_fault+0x69/0x150 [ 2551.167827][T18609] asm_exc_page_fault+0x1e/0x30 [ 2551.172823][T18609] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2551.178692][T18609] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2551.198448][T18609] RSP: 0018:ffff88811ebf7de0 EFLAGS: 00050293 [ 2551.204639][T18609] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2551.212718][T18609] RDX: ffff88802d26a080 RSI: 0000000000000005 RDI: 0000000000000000 [ 2551.220797][T18609] RBP: ffff88811ebf7ea0 R08: ffffffff8c8d9709 R09: 0000000000000000 [ 2551.228876][T18609] R10: ffff88811ebf7d00 R11: 00000000ad3a6234 R12: 0000000000000000 [ 2551.236949][T18609] R13: 0000000000000000 R14: ffff88802d26abc0 R15: 0000000020000040 [ 2551.245040][T18609] ? __sys_socketpair+0x1e9/0xdb0 [ 2551.250242][T18609] ? __sys_socketpair+0x236/0xdb0 [ 2551.255451][T18609] __x64_sys_socketpair+0x117/0x170 [ 2551.260827][T18609] do_syscall_64+0x54/0xd0 [ 2551.265397][T18609] ? exc_page_fault+0x76/0x150 [ 2551.270340][T18609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2551.276391][T18609] RIP: 0033:0x7f3cca603059 [ 2551.280907][T18609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2551.300657][T18609] RSP: 002b:00007f3cc8f78168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2551.309215][T18609] RAX: ffffffffffffffda RBX: 00007f3cca715f60 RCX: 00007f3cca603059 [ 2551.317301][T18609] RDX: 00000000000007ff RSI: 0000000000000002 RDI: 0000000000000029 [ 2551.325372][T18609] RBP: 00007f3cc8f781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.333443][T18609] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2551.341528][T18609] R13: 00007f3ccac49b1f R14: 00007f3cc8f78300 R15: 0000000000022000 [ 2551.349661][T18609] [ 2551.352765][T18610] CPU: 0 PID: 18610 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0 [ 2551.361679][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2551.371849][T18610] Call Trace: [ 2551.375203][T18610] [ 2551.378213][T18610] dump_stack_lvl+0x1ff/0x28e [ 2551.383087][T18610] dump_stack+0x25/0x28 [ 2551.387416][T18610] should_fail+0x8ba/0x9c0 [ 2551.392020][T18610] __should_failslab+0x236/0x2d0 [ 2551.397160][T18610] should_failslab+0x29/0x70 [ 2551.401923][T18610] kmem_cache_alloc_node+0x137/0x12e0 [ 2551.407497][T18610] ? aa_file_perm+0x580/0x3540 [ 2551.412497][T18610] ? __alloc_skb+0x33f/0xf90 [ 2551.417284][T18610] ? kmsan_get_metadata+0x33/0x220 [ 2551.422598][T18610] ? kmsan_get_metadata+0x33/0x220 [ 2551.427902][T18610] __alloc_skb+0x33f/0xf90 [ 2551.432507][T18610] ? kmsan_get_metadata+0x33/0x220 [ 2551.437833][T18610] vhci_write+0x187/0x8f0 [ 2551.442418][T18610] ? kmsan_get_metadata+0x33/0x220 [ 2551.447720][T18610] ? vhci_read+0xb40/0xb40 [ 2551.452312][T18610] ? vhci_read+0xb40/0xb40 [ 2551.456909][T18610] vfs_write+0x1318/0x2030 00:43:34 executing program 4: semget(0x3, 0x6, 0x0) [ 2551.461554][T18610] ksys_write+0x28b/0x510 [ 2551.466068][T18610] __x64_sys_write+0xdb/0x120 [ 2551.470929][T18610] do_syscall_64+0x54/0xd0 [ 2551.475522][T18610] ? exc_page_fault+0x76/0x150 [ 2551.480492][T18610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2551.486573][T18610] RIP: 0033:0x7f81fce7cb6f [ 2551.491109][T18610] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2551.510890][T18610] RSP: 002b:00007f81fb83f130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2551.519570][T18610] RAX: ffffffffffffffda RBX: 00007f81fcfdcf60 RCX: 00007f81fce7cb6f [ 2551.527701][T18610] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 00000000000000ca [ 2551.535799][T18610] RBP: 00007f81fb83f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.543879][T18610] R10: 0000000020000000 R11: 0000000000000293 R12: 0000000000000001 [ 2551.551953][T18610] R13: 00007f81fd510b1f R14: 00007f81fb83f300 R15: 0000000000022000 [ 2551.560068][T18610] 00:43:34 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000}, 0x20) 00:43:34 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (fail_nth: 5) 00:43:34 executing program 2: semget(0x3, 0x4, 0x0) [ 2551.912310][T18618] FAULT_INJECTION: forcing a failure. [ 2551.912310][T18618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2551.926137][T18618] CPU: 0 PID: 18618 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 2551.935076][T18618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2551.945260][T18618] Call Trace: [ 2551.948631][T18618] [ 2551.951646][T18618] dump_stack_lvl+0x1ff/0x28e [ 2551.956526][T18618] dump_stack+0x25/0x28 00:43:35 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (fail_nth: 2) [ 2551.960856][T18618] should_fail+0x8ba/0x9c0 [ 2551.965471][T18618] should_fail_alloc_page+0x219/0x280 [ 2551.971062][T18618] __alloc_pages+0x3f0/0x1090 [ 2551.975973][T18618] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2551.981983][T18618] alloc_pages+0x8a5/0xb80 [ 2551.986601][T18618] pte_alloc_one+0x67/0x280 [ 2551.991298][T18618] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2551.997305][T18618] __do_huge_pmd_anonymous_page+0x48a/0x1ce0 [ 2552.003556][T18618] do_huge_pmd_anonymous_page+0x18f8/0x1da0 [ 2552.009704][T18618] handle_mm_fault+0x4502/0x4750 [ 2552.014903][T18618] do_user_addr_fault+0xf77/0x1ee0 [ 2552.020240][T18618] exc_page_fault+0x69/0x150 [ 2552.025013][T18618] asm_exc_page_fault+0x1e/0x30 [ 2552.030008][T18618] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2552.035876][T18618] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2552.055636][T18618] RSP: 0018:ffff88810bfffde0 EFLAGS: 00050293 [ 2552.061835][T18618] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2552.069914][T18618] RDX: ffff888033c3a080 RSI: 0000000000000005 RDI: 0000000000000000 [ 2552.077989][T18618] RBP: ffff88810bfffea0 R08: ffffffff8c8d9709 R09: 0000000000000000 [ 2552.086072][T18618] R10: ffff88810bfffd00 R11: 00000000ad3a6234 R12: 0000000000000000 [ 2552.094158][T18618] R13: 0000000000000000 R14: ffff888033c3abc0 R15: 0000000020000040 [ 2552.102254][T18618] ? __sys_socketpair+0x1e9/0xdb0 [ 2552.107461][T18618] ? __sys_socketpair+0x236/0xdb0 [ 2552.112673][T18618] __x64_sys_socketpair+0x117/0x170 [ 2552.118054][T18618] do_syscall_64+0x54/0xd0 [ 2552.122661][T18618] ? exc_page_fault+0x76/0x150 [ 2552.127611][T18618] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2552.133665][T18618] RIP: 0033:0x7f3cca603059 [ 2552.138187][T18618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2552.157942][T18618] RSP: 002b:00007f3cc8f78168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2552.166499][T18618] RAX: ffffffffffffffda RBX: 00007f3cca715f60 RCX: 00007f3cca603059 [ 2552.174586][T18618] RDX: 00000000000007ff RSI: 0000000000000002 RDI: 0000000000000029 [ 2552.182660][T18618] RBP: 00007f3cc8f781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.190733][T18618] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2552.198807][T18618] R13: 00007f3ccac49b1f R14: 00007f3cc8f78300 R15: 0000000000022000 [ 2552.206926][T18618] 00:43:35 executing program 4: semget(0x3, 0x300, 0x0) 00:43:35 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000040)) 00:43:35 executing program 2: semget(0x3, 0x6, 0x0) 00:43:35 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:43:35 executing program 2: semget(0x3, 0x300, 0x0) 00:43:35 executing program 3: semget(0x3, 0x4, 0x0) 00:43:35 executing program 4: semget(0x3, 0x600, 0x0) 00:43:35 executing program 2: semget(0x3, 0x600, 0x0) 00:43:35 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (fail_nth: 1) [ 2552.942174][T18640] FAULT_INJECTION: forcing a failure. [ 2552.942174][T18640] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.958954][T18640] CPU: 1 PID: 18640 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0 [ 2552.967911][T18640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2552.978088][T18640] Call Trace: [ 2552.981453][T18640] [ 2552.984476][T18640] dump_stack_lvl+0x1ff/0x28e [ 2552.989336][T18640] dump_stack+0x25/0x28 [ 2552.993638][T18640] should_fail+0x8ba/0x9c0 [ 2552.998237][T18640] __should_failslab+0x236/0x2d0 [ 2553.003355][T18640] should_failslab+0x29/0x70 [ 2553.008100][T18640] __kmalloc_node_track_caller+0x212/0x1510 [ 2553.014197][T18640] ? __alloc_skb+0x33f/0xf90 [ 2553.018946][T18640] ? vhci_write+0x187/0x8f0 [ 2553.023642][T18640] ? vhci_write+0x187/0x8f0 [ 2553.028297][T18640] __alloc_skb+0x545/0xf90 [ 2553.032877][T18640] ? kmsan_get_metadata+0x33/0x220 [ 2553.038177][T18640] vhci_write+0x187/0x8f0 [ 2553.042676][T18640] ? kmsan_get_metadata+0x33/0x220 [ 2553.047951][T18640] ? vhci_read+0xb40/0xb40 [ 2553.052527][T18640] ? vhci_read+0xb40/0xb40 [ 2553.057096][T18640] vfs_write+0x1318/0x2030 [ 2553.061732][T18640] ksys_write+0x28b/0x510 [ 2553.066246][T18640] __x64_sys_write+0xdb/0x120 [ 2553.071084][T18640] do_syscall_64+0x54/0xd0 [ 2553.075664][T18640] ? exc_page_fault+0x76/0x150 [ 2553.080606][T18640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2553.086661][T18640] RIP: 0033:0x7f81fce7cb6f [ 2553.091183][T18640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2553.110943][T18640] RSP: 002b:00007f81fb83f130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2553.119500][T18640] RAX: ffffffffffffffda RBX: 00007f81fcfdcf60 RCX: 00007f81fce7cb6f [ 2553.127592][T18640] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 00000000000000ca [ 2553.135666][T18640] RBP: 00007f81fb83f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.143741][T18640] R10: 0000000020000000 R11: 0000000000000293 R12: 0000000000000001 [ 2553.151814][T18640] R13: 00007f81fd510b1f R14: 00007f81fb83f300 R15: 0000000000022000 [ 2553.159930][T18640] 00:43:36 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (fail_nth: 6) 00:43:36 executing program 4: semget(0x3, 0x40000, 0x0) [ 2553.616724][T18646] FAULT_INJECTION: forcing a failure. [ 2553.616724][T18646] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.629968][T18646] CPU: 1 PID: 18646 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 2553.638905][T18646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2553.642687][T18647] FAULT_INJECTION: forcing a failure. [ 2553.642687][T18647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2553.649103][T18646] Call Trace: [ 2553.649142][T18646] [ 2553.649184][T18646] dump_stack_lvl+0x1ff/0x28e [ 2553.673285][T18646] dump_stack+0x25/0x28 [ 2553.677624][T18646] should_fail+0x8ba/0x9c0 [ 2553.682227][T18646] __should_failslab+0x236/0x2d0 [ 2553.687360][T18646] should_failslab+0x29/0x70 [ 2553.692107][T18646] kmem_cache_alloc+0x12f/0x11c0 [ 2553.697231][T18646] ? sock_alloc_inode+0x58/0x140 [ 2553.702358][T18646] ? kmsan_get_metadata+0x33/0x220 [ 2553.707640][T18646] sock_alloc_inode+0x58/0x140 [ 2553.712572][T18646] ? sockfs_init_fs_context+0x160/0x160 [ 2553.718297][T18646] new_inode_pseudo+0xa6/0x5a0 [ 2553.723258][T18646] __sock_create+0x3c7/0xff0 [ 2553.728035][T18646] __sys_socketpair+0x3fb/0xdb0 [ 2553.733080][T18646] __x64_sys_socketpair+0x117/0x170 [ 2553.738458][T18646] do_syscall_64+0x54/0xd0 [ 2553.743033][T18646] ? exc_page_fault+0x76/0x150 [ 2553.747969][T18646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2553.754016][T18646] RIP: 0033:0x7f3cca603059 [ 2553.758532][T18646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2553.778281][T18646] RSP: 002b:00007f3cc8f78168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2553.786831][T18646] RAX: ffffffffffffffda RBX: 00007f3cca715f60 RCX: 00007f3cca603059 [ 2553.794914][T18646] RDX: 00000000000007ff RSI: 0000000000000002 RDI: 0000000000000029 [ 2553.802982][T18646] RBP: 00007f3cc8f781d0 R08: 0000000000000000 R09: 0000000000000000 00:43:36 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (fail_nth: 3) 00:43:36 executing program 0: socketpair(0x2, 0x5, 0x0, 0x0) 00:43:36 executing program 2: semget(0x3, 0x40000, 0x0) [ 2553.811059][T18646] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2553.819130][T18646] R13: 00007f3ccac49b1f R14: 00007f3cc8f78300 R15: 0000000000022000 [ 2553.827252][T18646] [ 2553.830345][T18647] CPU: 0 PID: 18647 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 2553.835335][T18646] socket: no more sockets [ 2553.839247][T18647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2553.853796][T18647] Call Trace: [ 2553.857157][T18647] [ 2553.860167][T18647] dump_stack_lvl+0x1ff/0x28e [ 2553.865042][T18647] dump_stack+0x25/0x28 [ 2553.869372][T18647] should_fail+0x8ba/0x9c0 [ 2553.873973][T18647] should_fail_usercopy+0x39/0x40 [ 2553.879175][T18647] _copy_from_user+0x5f/0x310 [ 2553.884022][T18647] ? ns_capable+0x19a/0x230 [ 2553.888690][T18647] __se_sys_mount_setattr+0x4b1/0x47c0 [ 2553.894345][T18647] ? kmsan_get_metadata+0x33/0x220 [ 2553.899638][T18647] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2553.906088][T18647] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2553.912356][T18647] ? fput+0x82/0x320 [ 2553.916432][T18647] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2553.922412][T18647] __x64_sys_mount_setattr+0x15d/0x1b0 [ 2553.928072][T18647] do_syscall_64+0x54/0xd0 [ 2553.932649][T18647] ? exc_page_fault+0x76/0x150 [ 2553.937621][T18647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2553.943671][T18647] RIP: 0033:0x7fbe35248059 [ 2553.948190][T18647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2553.967941][T18647] RSP: 002b:00007fbe33bbd168 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 2553.976495][T18647] RAX: ffffffffffffffda RBX: 00007fbe3535af60 RCX: 00007fbe35248059 [ 2553.984583][T18647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 2553.992668][T18647] RBP: 00007fbe33bbd1d0 R08: 0000000000000020 R09: 0000000000000000 [ 2554.000748][T18647] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2554.008817][T18647] R13: 00007fbe3588eb1f R14: 00007fbe33bbd300 R15: 0000000000022000 00:43:37 executing program 4: semget(0x3, 0x60000, 0x0) [ 2554.016923][T18647] 00:43:37 executing program 0: socketpair(0x2, 0x5, 0x0, 0x0) 00:43:37 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (fail_nth: 7) 00:43:37 executing program 2: semget(0x3, 0x60000, 0x0) [ 2554.354420][T18657] FAULT_INJECTION: forcing a failure. [ 2554.354420][T18657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2554.367765][T18657] CPU: 0 PID: 18657 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0 [ 2554.376691][T18657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2554.386874][T18657] Call Trace: [ 2554.390238][T18657] [ 2554.393255][T18657] dump_stack_lvl+0x1ff/0x28e [ 2554.398142][T18657] dump_stack+0x25/0x28 00:43:37 executing program 4: semget(0x3, 0x3000000, 0x0) 00:43:37 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (fail_nth: 2) [ 2554.402483][T18657] should_fail+0x8ba/0x9c0 [ 2554.407099][T18657] should_fail_usercopy+0x39/0x40 [ 2554.412423][T18657] _copy_from_iter+0x484/0x24d0 [ 2554.417555][T18657] vhci_write+0x311/0x8f0 [ 2554.422116][T18657] ? vhci_read+0xb40/0xb40 [ 2554.426721][T18657] vfs_write+0x1318/0x2030 [ 2554.431365][T18657] ksys_write+0x28b/0x510 [ 2554.435890][T18657] __x64_sys_write+0xdb/0x120 [ 2554.440760][T18657] do_syscall_64+0x54/0xd0 [ 2554.445358][T18657] ? exc_page_fault+0x76/0x150 [ 2554.450342][T18657] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2554.456419][T18657] RIP: 0033:0x7f81fce7cb6f [ 2554.460967][T18657] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2554.480835][T18657] RSP: 002b:00007f81fb83f130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2554.489413][T18657] RAX: ffffffffffffffda RBX: 00007f81fcfdcf60 RCX: 00007f81fce7cb6f [ 2554.497506][T18657] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 00000000000000ca [ 2554.505589][T18657] RBP: 00007f81fb83f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2554.513672][T18657] R10: 0000000020000000 R11: 0000000000000293 R12: 0000000000000001 [ 2554.521749][T18657] R13: 00007f81fd510b1f R14: 00007f81fb83f300 R15: 0000000000022000 [ 2554.529880][T18657] [ 2554.664985][T18661] FAULT_INJECTION: forcing a failure. [ 2554.664985][T18661] name failslab, interval 1, probability 0, space 0, times 0 [ 2554.678063][T18661] CPU: 0 PID: 18661 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 2554.687086][T18661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2554.697287][T18661] Call Trace: [ 2554.700648][T18661] [ 2554.703659][T18661] dump_stack_lvl+0x1ff/0x28e [ 2554.708537][T18661] dump_stack+0x25/0x28 [ 2554.712865][T18661] should_fail+0x8ba/0x9c0 [ 2554.717471][T18661] __should_failslab+0x236/0x2d0 [ 2554.722611][T18661] should_failslab+0x29/0x70 [ 2554.727377][T18661] kmem_cache_alloc+0x12f/0x11c0 [ 2554.732517][T18661] ? security_inode_alloc+0x8d/0x320 [ 2554.737990][T18661] ? kmsan_get_metadata+0x33/0x220 [ 2554.743300][T18661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2554.749305][T18661] ? kmsan_get_metadata+0x33/0x220 [ 2554.754614][T18661] security_inode_alloc+0x8d/0x320 [ 2554.759936][T18661] inode_init_always+0x505/0xb90 [ 2554.765082][T18661] new_inode_pseudo+0x152/0x5a0 [ 2554.770156][T18661] __sock_create+0x3c7/0xff0 [ 2554.774966][T18661] __sys_socketpair+0x3fb/0xdb0 [ 2554.780023][T18661] __x64_sys_socketpair+0x117/0x170 [ 2554.785423][T18661] do_syscall_64+0x54/0xd0 [ 2554.790016][T18661] ? exc_page_fault+0x76/0x150 [ 2554.794985][T18661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2554.801053][T18661] RIP: 0033:0x7f3cca603059 [ 2554.805589][T18661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2554.825364][T18661] RSP: 002b:00007f3cc8f78168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2554.833947][T18661] RAX: ffffffffffffffda RBX: 00007f3cca715f60 RCX: 00007f3cca603059 [ 2554.842054][T18661] RDX: 00000000000007ff RSI: 0000000000000002 RDI: 0000000000000029 [ 2554.850152][T18661] RBP: 00007f3cc8f781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2554.858269][T18661] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2554.866371][T18661] R13: 00007f3ccac49b1f R14: 00007f3cc8f78300 R15: 0000000000022000 [ 2554.874515][T18661] [ 2554.880533][T18661] socket: no more sockets 00:43:38 executing program 0: socketpair(0x2, 0x5, 0x0, 0x0) 00:43:38 executing program 2: semget(0x3, 0x3000000, 0x0) 00:43:38 executing program 4: semget(0x3, 0x4000000000000, 0x0) [ 2555.233688][T18669] FAULT_INJECTION: forcing a failure. [ 2555.233688][T18669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2555.247027][T18669] CPU: 0 PID: 18669 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 2555.256035][T18669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2555.266213][T18669] Call Trace: [ 2555.269582][T18669] [ 2555.272586][T18669] dump_stack_lvl+0x1ff/0x28e [ 2555.277446][T18669] dump_stack+0x25/0x28 [ 2555.281746][T18669] should_fail+0x8ba/0x9c0 [ 2555.286337][T18669] should_fail_usercopy+0x39/0x40 [ 2555.291517][T18669] _copy_to_user+0x61/0x270 [ 2555.296178][T18669] simple_read_from_buffer+0x2ee/0x490 [ 2555.301887][T18669] proc_fail_nth_read+0x2d0/0x3a0 [ 2555.307091][T18669] ? proc_fault_inject_write+0x5d0/0x5d0 [ 2555.312878][T18669] vfs_read+0x6c8/0x1980 [ 2555.317277][T18669] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2555.323537][T18669] ? kmsan_get_metadata+0x33/0x220 [ 2555.328817][T18669] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2555.334806][T18669] ksys_read+0x28b/0x510 [ 2555.339218][T18669] __x64_sys_read+0xdb/0x120 [ 2555.343967][T18669] do_syscall_64+0x54/0xd0 [ 2555.348544][T18669] ? exc_page_fault+0x76/0x150 [ 2555.353499][T18669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2555.359551][T18669] RIP: 0033:0x7fbe351fac0c [ 2555.364065][T18669] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2555.383829][T18669] RSP: 002b:00007fbe33bbd160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2555.392401][T18669] RAX: ffffffffffffffda RBX: 00007fbe3535af60 RCX: 00007fbe351fac0c [ 2555.400505][T18669] RDX: 000000000000000f RSI: 00007fbe33bbd1e0 RDI: 0000000000000003 [ 2555.408596][T18669] RBP: 00007fbe33bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2555.416681][T18669] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2555.424767][T18669] R13: 00007fbe3588eb1f R14: 00007fbe33bbd300 R15: 0000000000022000 00:43:38 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (fail_nth: 4) 00:43:38 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (fail_nth: 8) [ 2555.433225][T18669] 00:43:38 executing program 0: semget(0x3, 0x600, 0x0) 00:43:38 executing program 2: semget(0x3, 0x4000000000000, 0x0) 00:43:38 executing program 4: semget(0x3, 0x6000000000000, 0x0) [ 2555.758844][T18675] FAULT_INJECTION: forcing a failure. [ 2555.758844][T18675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2555.772392][T18675] CPU: 0 PID: 18675 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 2555.781320][T18675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2555.791496][T18675] Call Trace: [ 2555.794868][T18675] [ 2555.797885][T18675] dump_stack_lvl+0x1ff/0x28e [ 2555.802766][T18675] dump_stack+0x25/0x28 [ 2555.807098][T18675] should_fail+0x8ba/0x9c0 [ 2555.811723][T18675] should_fail_usercopy+0x39/0x40 [ 2555.816923][T18675] _copy_to_user+0x61/0x270 [ 2555.821616][T18675] simple_read_from_buffer+0x2ee/0x490 [ 2555.827293][T18675] proc_fail_nth_read+0x2d0/0x3a0 [ 2555.832514][T18675] ? proc_fault_inject_write+0x5d0/0x5d0 [ 2555.838323][T18675] vfs_read+0x6c8/0x1980 [ 2555.842735][T18675] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2555.849033][T18675] ? kmsan_get_metadata+0x33/0x220 [ 2555.854334][T18675] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2555.860348][T18675] ksys_read+0x28b/0x510 [ 2555.864793][T18675] __x64_sys_read+0xdb/0x120 [ 2555.869570][T18675] do_syscall_64+0x54/0xd0 [ 2555.874181][T18675] ? exc_page_fault+0x76/0x150 [ 2555.879156][T18675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2555.885243][T18675] RIP: 0033:0x7f3cca5b5c0c [ 2555.889790][T18675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2555.909567][T18675] RSP: 002b:00007f3cc8f78160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2555.918148][T18675] RAX: ffffffffffffffda RBX: 00007f3cca715f60 RCX: 00007f3cca5b5c0c [ 2555.926258][T18675] RDX: 000000000000000f RSI: 00007f3cc8f781e0 RDI: 0000000000000003 [ 2555.934363][T18675] RBP: 00007f3cc8f781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2555.942467][T18675] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2555.950571][T18675] R13: 00007f3ccac49b1f R14: 00007f3cc8f78300 R15: 0000000000022000 00:43:39 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:43:39 executing program 2: semget(0x3, 0x6000000000000, 0x0) [ 2555.958734][T18675] 00:43:39 executing program 4: semget(0x3, 0x300000000000000, 0x0) 00:43:39 executing program 0: semget(0x3, 0x600, 0x0) [ 2556.322567][T18677] FAULT_INJECTION: forcing a failure. [ 2556.322567][T18677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2556.322593][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2556.346724][T18677] CPU: 0 PID: 18677 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0 [ 2556.355658][T18677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2556.365840][T18677] Call Trace: [ 2556.369211][T18677] [ 2556.372230][T18677] dump_stack_lvl+0x1ff/0x28e [ 2556.377124][T18677] dump_stack+0x25/0x28 [ 2556.381459][T18677] should_fail+0x8ba/0x9c0 [ 2556.386073][T18677] should_fail_usercopy+0x39/0x40 [ 2556.391290][T18677] _copy_to_user+0x61/0x270 [ 2556.395981][T18677] simple_read_from_buffer+0x2ee/0x490 [ 2556.401657][T18677] proc_fail_nth_read+0x2d0/0x3a0 [ 2556.406887][T18677] ? proc_fault_inject_write+0x5d0/0x5d0 [ 2556.412705][T18677] vfs_read+0x6c8/0x1980 [ 2556.417119][T18677] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2556.423405][T18677] ? kmsan_get_metadata+0x33/0x220 [ 2556.428712][T18677] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2556.434736][T18677] ksys_read+0x28b/0x510 [ 2556.439178][T18677] __x64_sys_read+0xdb/0x120 [ 2556.443959][T18677] do_syscall_64+0x54/0xd0 [ 2556.448555][T18677] ? exc_page_fault+0x76/0x150 [ 2556.453520][T18677] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2556.459606][T18677] RIP: 0033:0x7f81fce7cc0c [ 2556.464149][T18677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2556.483936][T18677] RSP: 002b:00007f81fb83f160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2556.492614][T18677] RAX: ffffffffffffffda RBX: 00007f81fcfdcf60 RCX: 00007f81fce7cc0c [ 2556.500738][T18677] RDX: 000000000000000f RSI: 00007f81fb83f1e0 RDI: 0000000000000003 [ 2556.508848][T18677] RBP: 00007f81fb83f1d0 R08: 0000000000000000 R09: 0000000000000000 00:43:39 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x70, &(0x7f0000000100)={0x2f}, 0x20) [ 2556.516955][T18677] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 2556.525055][T18677] R13: 00007f81fd510b1f R14: 00007f81fb83f300 R15: 0000000000022000 [ 2556.533193][T18677] 00:43:39 executing program 2: semget(0x3, 0x300000000000000, 0x0) 00:43:39 executing program 4: semget(0x3, 0x0, 0x3) 00:43:40 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) 00:43:40 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x7000, &(0x7f0000000100)={0x2f}, 0x20) 00:43:40 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:43:40 executing program 0: semget(0x3, 0x600, 0x0) 00:43:40 executing program 2: semget(0x3, 0x0, 0x3) 00:43:40 executing program 4: semget(0x3, 0x0, 0x4) 00:43:40 executing program 2: semget(0x3, 0x0, 0x4) [ 2557.243055][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:40 executing program 0: semget(0x3, 0x0, 0x0) 00:43:40 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x1000000, &(0x7f0000000100)={0x2f}, 0x20) 00:43:40 executing program 1: socketpair(0x2, 0x2, 0x7ff, &(0x7f0000000040)) 00:43:40 executing program 0: semget(0x3, 0x0, 0x0) 00:43:40 executing program 4: semget(0x3, 0x0, 0x6) 00:43:41 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x7) 00:43:41 executing program 2: semget(0x3, 0x0, 0x6) 00:43:41 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x70000000, &(0x7f0000000100)={0x2f}, 0x20) 00:43:41 executing program 1: socketpair(0x2d, 0x2, 0x7ff, &(0x7f0000000040)) 00:43:41 executing program 0: semget(0x3, 0x0, 0x0) 00:43:41 executing program 4: semget(0x3, 0x0, 0x300) 00:43:41 executing program 2: semget(0x3, 0x0, 0x300) [ 2558.241753][ T3498] Bluetooth: hci3: ACL packet for unknown connection handle 0 00:43:41 executing program 0: semget(0x3, 0x600, 0x0) (fail_nth: 1) 00:43:41 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x100000000000000, &(0x7f0000000100)={0x2f}, 0x20) 00:43:41 executing program 4: semget(0x3, 0x0, 0x600) 00:43:41 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x7) 00:43:41 executing program 1: socketpair(0x29, 0x4, 0x7ff, &(0x7f0000000040)) [ 2558.613152][T18738] FAULT_INJECTION: forcing a failure. [ 2558.613152][T18738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2558.626628][T18738] CPU: 1 PID: 18738 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 2558.635558][T18738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2558.645715][T18738] Call Trace: [ 2558.649062][T18738] [ 2558.652064][T18738] dump_stack_lvl+0x1ff/0x28e [ 2558.656924][T18738] dump_stack+0x25/0x28 [ 2558.661230][T18738] should_fail+0x8ba/0x9c0 [ 2558.665825][T18738] should_fail_usercopy+0x39/0x40 [ 2558.671025][T18738] _copy_to_user+0x61/0x270 [ 2558.675683][T18738] simple_read_from_buffer+0x2ee/0x490 [ 2558.681341][T18738] proc_fail_nth_read+0x2d0/0x3a0 [ 2558.686546][T18738] ? proc_fault_inject_write+0x5d0/0x5d0 [ 2558.692333][T18738] vfs_read+0x6c8/0x1980 [ 2558.696736][T18738] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2558.703007][T18738] ? kmsan_get_metadata+0x33/0x220 [ 2558.708276][T18738] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2558.714257][T18738] ksys_read+0x28b/0x510 [ 2558.718671][T18738] __x64_sys_read+0xdb/0x120 [ 2558.723416][T18738] do_syscall_64+0x54/0xd0 [ 2558.728077][T18738] ? exc_page_fault+0x76/0x150 [ 2558.733025][T18738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2558.739071][T18738] RIP: 0033:0x7f8cfd794c0c [ 2558.743590][T18738] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2558.763358][T18738] RSP: 002b:00007f8cfc157160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2558.771919][T18738] RAX: ffffffffffffffda RBX: 00007f8cfd8f4f60 RCX: 00007f8cfd794c0c [ 2558.780002][T18738] RDX: 000000000000000f RSI: 00007f8cfc1571e0 RDI: 0000000000000003 [ 2558.788075][T18738] RBP: 00007f8cfc1571d0 R08: 0000000000000000 R09: 0000000000000000 [ 2558.796144][T18738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2558.804209][T18738] R13: 00007f8cfde28b1f R14: 00007f8cfc157300 R15: 0000000000022000 00:43:41 executing program 2: semget(0x3, 0x0, 0x600) [ 2558.812322][T18738] 00:43:41 executing program 4: semget(0x3, 0x0, 0x40000) 00:43:42 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x7000000000000000, &(0x7f0000000100)={0x2f}, 0x20) [ 2559.068339][ T3498] Bluetooth: hci3: SCO packet for unknown connection handle 0 00:43:42 executing program 2: semget(0x3, 0x0, 0x40000) 00:43:42 executing program 0: semget(0x3, 0x600, 0x0) 00:43:42 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x70}, 0x20) 00:43:42 executing program 4: semget(0x3, 0x0, 0x60000) 00:43:42 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x7) 00:43:42 executing program 1: socketpair(0x29, 0x5, 0x7ff, &(0x7f0000000040)) 00:43:42 executing program 2: semget(0x3, 0x0, 0x60000) 00:43:42 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x7000}, 0x20) 00:43:42 executing program 0: semget(0x3, 0x600, 0x0) r0 = semget$private(0x0, 0x3, 0x80) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/140) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f00000000c0)=[{0x1, 0x5}, {0x1, 0xfff9, 0x800}, {0x0, 0xffff, 0x1800}, {0x7, 0x2, 0x1000}, {0x0, 0x35b9, 0x800}, {0x1, 0x200, 0x800}, {0x2, 0x8001}, {0x4, 0x81, 0x800}], 0x8) 00:43:42 executing program 4: semget(0x3, 0x0, 0x3000000) 00:43:42 executing program 1: socketpair(0x29, 0xa, 0x7ff, &(0x7f0000000040)) 00:43:42 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xfdef) 00:43:42 executing program 2: semget(0x3, 0x0, 0x3000000) 00:43:43 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x1000000}, 0x20) 00:43:43 executing program 4: semget(0x3, 0x0, 0x4000000000000) 00:43:43 executing program 0: semget(0x3, 0x600, 0x0) (async) r0 = semget$private(0x0, 0x3, 0x80) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/140) (async) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f00000000c0)=[{0x1, 0x5}, {0x1, 0xfff9, 0x800}, {0x0, 0xffff, 0x1800}, {0x7, 0x2, 0x1000}, {0x0, 0x35b9, 0x800}, {0x1, 0x200, 0x800}, {0x2, 0x8001}, {0x4, 0x81, 0x800}], 0x8) 00:43:43 executing program 2: semget(0x3, 0x0, 0x4000000000000) 00:43:43 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf7, 0xc5, "522e82dcd48b3f5438d4b5f24917ff53fdd7a62eeafef5112340422bc26651630ab717aa5b26f4e80e1d53075b288d4b695e39c7fbace416ff20ca7ea7ac252e7c62c7415ce83000a07f67052d3355f7da38f58a01b0ee529a876c51fff977cb0473219eb84b50e382cc4ad91bff326e6bcfaf2608e646941af9dff8828b11d3be10409509905960cd373db4c28842bb96a105fe2cd71639013b50ef99dd5e34acb69437d7be2745e5997362fb2af1b283ca2ed09c2e37ff97c66e89e5196c0e00552567b6bb341903fb4f587ff5162bfbd217636f7d4358e67fd7d21890585f61a236e696711833c842199942cbe5e22aca05"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb1}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 00:43:43 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x20000007) 00:43:43 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x70000000}, 0x20) 00:43:43 executing program 4: semget(0x3, 0x0, 0x6000000000000) 00:43:43 executing program 2: semget(0x3, 0x0, 0x6000000000000) 00:43:43 executing program 0: semget(0x3, 0x600, 0x0) r0 = semget$private(0x0, 0x3, 0x80) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/140) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f00000000c0)=[{0x1, 0x5}, {0x1, 0xfff9, 0x800}, {0x0, 0xffff, 0x1800}, {0x7, 0x2, 0x1000}, {0x0, 0x35b9, 0x800}, {0x1, 0x200, 0x800}, {0x2, 0x8001}, {0x4, 0x81, 0x800}], 0x8) semget(0x3, 0x600, 0x0) (async) semget$private(0x0, 0x3, 0x80) (async) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/140) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semop(r1, &(0x7f00000000c0)=[{0x1, 0x5}, {0x1, 0xfff9, 0x800}, {0x0, 0xffff, 0x1800}, {0x7, 0x2, 0x1000}, {0x0, 0x35b9, 0x800}, {0x1, 0x200, 0x800}, {0x2, 0x8001}, {0x4, 0x81, 0x800}], 0x8) (async) 00:43:43 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf7, 0xc5, "522e82dcd48b3f5438d4b5f24917ff53fdd7a62eeafef5112340422bc26651630ab717aa5b26f4e80e1d53075b288d4b695e39c7fbace416ff20ca7ea7ac252e7c62c7415ce83000a07f67052d3355f7da38f58a01b0ee529a876c51fff977cb0473219eb84b50e382cc4ad91bff326e6bcfaf2608e646941af9dff8828b11d3be10409509905960cd373db4c28842bb96a105fe2cd71639013b50ef99dd5e34acb69437d7be2745e5997362fb2af1b283ca2ed09c2e37ff97c66e89e5196c0e00552567b6bb341903fb4f587ff5162bfbd217636f7d4358e67fd7d21890585f61a236e696711833c842199942cbe5e22aca05"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb1}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 00:43:43 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7ffff000) 00:43:43 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x100000000000000}, 0x20) 00:43:43 executing program 4: semget(0x3, 0x0, 0x300000000000000) 00:43:43 executing program 2: semget(0x3, 0x0, 0x300000000000000) 00:43:44 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf7, 0xc5, "522e82dcd48b3f5438d4b5f24917ff53fdd7a62eeafef5112340422bc26651630ab717aa5b26f4e80e1d53075b288d4b695e39c7fbace416ff20ca7ea7ac252e7c62c7415ce83000a07f67052d3355f7da38f58a01b0ee529a876c51fff977cb0473219eb84b50e382cc4ad91bff326e6bcfaf2608e646941af9dff8828b11d3be10409509905960cd373db4c28842bb96a105fe2cd71639013b50ef99dd5e34acb69437d7be2745e5997362fb2af1b283ca2ed09c2e37ff97c66e89e5196c0e00552567b6bb341903fb4f587ff5162bfbd217636f7d4358e67fd7d21890585f61a236e696711833c842199942cbe5e22aca05"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb1}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 00:43:44 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x3c) semget(0x3, 0x600, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x7ff}, {0x0, 0x4ea, 0x800}, {0x0, 0x400, 0x800}, {0x3, 0x1}], 0x4, &(0x7f0000000040)={0x0, 0x989680}) 00:43:44 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xfffffdef) 00:43:44 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x7000000000000000}, 0x20) 00:43:44 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/234) 00:43:44 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x3c) semget(0x3, 0x600, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x7ff}, {0x0, 0x4ea, 0x800}, {0x0, 0x400, 0x800}, {0x3, 0x1}], 0x4, &(0x7f0000000040)={0x0, 0x989680}) prctl$PR_SET_PDEATHSIG(0x1, 0x3c) (async) semget(0x3, 0x600, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x7ff}, {0x0, 0x4ea, 0x800}, {0x0, 0x400, 0x800}, {0x3, 0x1}], 0x4, &(0x7f0000000040)={0x0, 0x989680}) (async) 00:43:44 executing program 2: r0 = semget(0x3, 0x0, 0x208) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/20) 00:43:44 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x55, 0x2, 0x80000001, 0x0, r0, 0x4, '\x00', 0x0, r1, 0x4, 0x1, 0x4}, 0x48) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYBLOB="080028bd7000ffdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8045) getpgrp(0x0) syz_clone(0x40200200, &(0x7f00000001c0)="8ec6f2a7009f04bf3d612987d2da9bb90a1ef38d6296406a3260b991b3059d34ded0562e8f09d3a193ed7a128f4514402d4327c2c417fd80e57bf531bc704590ad4e4c56cb925773187c3275ed371f4372fd35bc9acc5802397752477a036d7de4e1744bb1adf57faf46f95c677ce977b6299e4c2d71b0ef5e6c6560d577774755dbe15e508664aafb6a72402abf33a2aaa47af27050448895d7f0dbd931651b5b0ae1430d8d8ff6ceeead788b6819f731a82dcda665", 0xb6, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="0807297918a57e4a56ceb856d288937419a46439e0946732ce9c608b765fcf411b1cc625fb1a65682a324114") r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/mnt\x00') tkill(r5, 0x38) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) 00:43:44 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xfffffffffffffdef) 00:43:44 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x70}, 0x20) 00:43:44 executing program 4: r0 = semget(0x3, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) (async, rerun: 64) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/234) (rerun: 64) 00:43:44 executing program 2: r0 = semget(0x3, 0x0, 0x208) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/20) semget(0x3, 0x0, 0x208) (async) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/20) (async) 00:43:45 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x3c) semget(0x3, 0x600, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x7ff}, {0x0, 0x4ea, 0x800}, {0x0, 0x400, 0x800}, {0x3, 0x1}], 0x4, &(0x7f0000000040)={0x0, 0x989680}) prctl$PR_SET_PDEATHSIG(0x1, 0x3c) (async) semget(0x3, 0x600, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x7ff}, {0x0, 0x4ea, 0x800}, {0x0, 0x400, 0x800}, {0x3, 0x1}], 0x4, &(0x7f0000000040)={0x0, 0x989680}) (async) 00:43:45 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x7000}, 0x20) 00:43:45 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xffffffffffffffff) 00:43:45 executing program 2: r0 = semget(0x3, 0x0, 0x208) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/20) 00:43:45 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/234) 00:43:45 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x1000000}, 0x20) 00:43:45 executing program 0: semget(0x3, 0x600, 0x8) 00:43:45 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) semget(0x3, 0x0, 0x0) 00:43:45 executing program 5: syz_emit_vhci(&(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x7) 00:43:45 executing program 4: semget(0x3, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000000)=0x8) 00:43:45 executing program 0: semget(0x3, 0x600, 0x8) 00:43:45 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x55, 0x2, 0x80000001, 0x0, r0, 0x4, '\x00', 0x0, r1, 0x4, 0x1, 0x4}, 0x48) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYBLOB="080028bd7000ffdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8045) (async) getpgrp(0x0) syz_clone(0x40200200, &(0x7f00000001c0)="8ec6f2a7009f04bf3d612987d2da9bb90a1ef38d6296406a3260b991b3059d34ded0562e8f09d3a193ed7a128f4514402d4327c2c417fd80e57bf531bc704590ad4e4c56cb925773187c3275ed371f4372fd35bc9acc5802397752477a036d7de4e1744bb1adf57faf46f95c677ce977b6299e4c2d71b0ef5e6c6560d577774755dbe15e508664aafb6a72402abf33a2aaa47af27050448895d7f0dbd931651b5b0ae1430d8d8ff6ceeead788b6819f731a82dcda665", 0xb6, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="0807297918a57e4a56ceb856d288937419a46439e0946732ce9c608b765fcf411b1cc625fb1a65682a324114") r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/mnt\x00') (async) tkill(r5, 0x38) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) 00:43:45 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x70000000}, 0x20) 00:43:46 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) semget(0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) semget(0x3, 0x0, 0x0) (async) 00:43:46 executing program 0: semget(0x3, 0x600, 0x8) semget(0x3, 0x600, 0x8) (async) 00:43:46 executing program 4: semget(0x3, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000000)=0x8) 00:43:46 executing program 5: syz_emit_vhci(&(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x7) 00:43:46 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000000000000}, 0x20) 00:43:46 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) semget(0x3, 0x0, 0x0) 00:43:46 executing program 0: semget(0x3, 0x600, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 00:43:46 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x7000000000000000}, 0x20) 00:43:46 executing program 5: syz_emit_vhci(&(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x7) 00:43:46 executing program 4: semget(0x3, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000000)=0x8) semget(0x3, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000000)=0x8) (async) 00:43:47 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x55, 0x2, 0x80000001, 0x0, r0, 0x4, '\x00', 0x0, r1, 0x4, 0x1, 0x4}, 0x48) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYBLOB="080028bd7000ffdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8045) (async) getpgrp(0x0) syz_clone(0x40200200, &(0x7f00000001c0)="8ec6f2a7009f04bf3d612987d2da9bb90a1ef38d6296406a3260b991b3059d34ded0562e8f09d3a193ed7a128f4514402d4327c2c417fd80e57bf531bc704590ad4e4c56cb925773187c3275ed371f4372fd35bc9acc5802397752477a036d7de4e1744bb1adf57faf46f95c677ce977b6299e4c2d71b0ef5e6c6560d577774755dbe15e508664aafb6a72402abf33a2aaa47af27050448895d7f0dbd931651b5b0ae1430d8d8ff6ceeead788b6819f731a82dcda665", 0xb6, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="0807297918a57e4a56ceb856d288937419a46439e0946732ce9c608b765fcf411b1cc625fb1a65682a324114") (async) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/mnt\x00') (async) tkill(r5, 0x38) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) 00:43:47 executing program 2: r0 = semget$private(0x0, 0x0, 0xb) r1 = semget$private(0x0, 0x3, 0x113) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000200)=""/57) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/230) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x0) r3 = mmap$binder(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYBLOB="0463044001000000"], 0x38, 0x0, &(0x7f0000000180)="2c20236cff396cfc5e4ce4fdec6c9dd956af19c65ccfa2008767675f288dc6b0c472559358ace6677e38631ad1afe1a65ecaeee7f43568d2"}) 00:43:47 executing program 0: semget(0x3, 0x600, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 00:43:47 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20000120) 00:43:47 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0xa0000) 00:43:47 executing program 4: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x387) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/128) r1 = semget$private(0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000280)=""/214) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = semget$private(0x0, 0x3, 0x10) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000000)=""/50) r4 = semget$private(0x0, 0x2, 0x88) semctl$GETPID(r4, 0x1, 0xb, &(0x7f0000000180)=""/225) [ 2564.380351][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:47 executing program 2: r0 = semget$private(0x0, 0x0, 0xb) r1 = semget$private(0x0, 0x3, 0x113) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000200)=""/57) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/230) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x0) r3 = mmap$binder(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYBLOB="0463044001000000"], 0x38, 0x0, &(0x7f0000000180)="2c20236cff396cfc5e4ce4fdec6c9dd956af19c65ccfa2008767675f288dc6b0c472559358ace6677e38631ad1afe1a65ecaeee7f43568d2"}) semget$private(0x0, 0x0, 0xb) (async) semget$private(0x0, 0x3, 0x113) (async) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000200)=""/57) (async) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/230) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x0) (async) mmap$binder(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1, 0x11, 0xffffffffffffffff, 0x1) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYBLOB="0463044001000000"], 0x38, 0x0, &(0x7f0000000180)="2c20236cff396cfc5e4ce4fdec6c9dd956af19c65ccfa2008767675f288dc6b0c472559358ace6677e38631ad1afe1a65ecaeee7f43568d2"}) (async) 00:43:47 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0xa0000) 00:43:47 executing program 3: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf250a0000000c009900050000005e00000018006e800400020004000200048102000400010004000200"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x40000}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/hackrf', 0x60040, 0x105) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x294, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "2fb1f385ec7c4750"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x80}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}], @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "38a9bc20cd34b54b"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}]}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x80}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}]}, @NL80211_ATTR_SMPS_MODE={0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ad}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000}, 0x400c040) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x68, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="672b4174670d698aa0b6040669"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ae0bb2f1f122"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="a837795a3005ebb6a27fd3e7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random=':'}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040040) 00:43:47 executing program 0: semget(0x3, 0x600, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 00:43:47 executing program 4: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x387) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/128) r1 = semget$private(0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000280)=""/214) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = semget$private(0x0, 0x3, 0x10) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000000)=""/50) r4 = semget$private(0x0, 0x2, 0x88) semctl$GETPID(r4, 0x1, 0xb, &(0x7f0000000180)=""/225) semget(0x3, 0x0, 0x0) (async) semget$private(0x0, 0x4, 0x387) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/128) (async) semget$private(0x0, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000280)=""/214) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semget$private(0x0, 0x3, 0x10) (async) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000000)=""/50) (async) semget$private(0x0, 0x2, 0x88) (async) semctl$GETPID(r4, 0x1, 0xb, &(0x7f0000000180)=""/225) (async) [ 2564.807068][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:48 executing program 2: r0 = semget$private(0x0, 0x0, 0xb) r1 = semget$private(0x0, 0x3, 0x113) (async) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000200)=""/57) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/230) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x0) r3 = mmap$binder(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYBLOB="0463044001000000"], 0x38, 0x0, &(0x7f0000000180)="2c20236cff396cfc5e4ce4fdec6c9dd956af19c65ccfa2008767675f288dc6b0c472559358ace6677e38631ad1afe1a65ecaeee7f43568d2"}) 00:43:48 executing program 3: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf250a0000000c009900050000005e00000018006e800400020004000200048102000400010004000200"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x40000}, 0x20) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/hackrf', 0x60040, 0x105) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x294, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "2fb1f385ec7c4750"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x80}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}], @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "38a9bc20cd34b54b"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}]}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x80}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}]}, @NL80211_ATTR_SMPS_MODE={0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ad}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000}, 0x400c040) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x68, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="672b4174670d698aa0b6040669"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ae0bb2f1f122"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="a837795a3005ebb6a27fd3e7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random=':'}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040040) 00:43:48 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0xa0000) 00:43:48 executing program 0: prctl$PR_GET_TSC(0x19, &(0x7f0000000b80)) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000bc0)=0x1f) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000c00)) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000b40)=[{0x3, 0xb15a, 0xc00}, {0x3, 0xffff, 0x1000}, {0x1, 0x9, 0x800}, {0x2, 0x2, 0x1800}], 0x4) semget(0x3, 0x600, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/udc', 0x80, 0x93) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000009c0)={&(0x7f0000000040), 0xc, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="4b789f7c", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x8d4}, 0x1, 0x0, 0x0, 0x840}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 00:43:48 executing program 4: semget(0x3, 0x0, 0x0) (async) r0 = semget$private(0x0, 0x4, 0x387) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/128) (async) r1 = semget$private(0x0, 0x0, 0x0) (async) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000280)=""/214) (async) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = semget$private(0x0, 0x3, 0x10) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000000)=""/50) (async) r4 = semget$private(0x0, 0x2, 0x88) semctl$GETPID(r4, 0x1, 0xb, &(0x7f0000000180)=""/225) 00:43:48 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB="16b3d71bfd060020"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10200200}, 0xc, &(0x7f00000017c0)={&(0x7f00000001c0)={0x15d8, r2, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3d0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x258, 0xd, 0x0, 0x1, [{0x91, 0x0, "0737f9560480a9d40990037e4a569544819c6d0bd5591c49c3a4f51fa9d8d3a4716ec4cc7db0b12ddeb08a25ddb4fa0e4568079327053a8825df478b5e512b462da2de8c8a186eae280c7241d21bdf5e15e677ec9610b819ce0c25bf51e90c20f56aca3985272555fef3f91f9b89a5e4f7e18fdb367d803e350cf755b4d7a1e49a05f02ae7371c3dd2b02acf53"}, {0xd5, 0x0, "9981cbcae145e1a658e88b6fc9fa8621454d1f3a5e1cc883bd0d92f8942b7982a5f5f6fe6834cff7143d57bbdef85739c581ad66fb855fc0afc6813910db391ba7d3de53546869135fa765ecb0e5cfe6502afb72c581767336206dd69e7f4da326c6dadcb546f869b5529d60740bac3627a6bd114853f21a1870f6bc3d1bb97c9a9ebf8b7d1153b490ac0608dddae95561ecf8c096666b81bdeb462bd1d9134b4da44a0c33030258b375f8892cf31a2b950828ce9bdcb7796def3e521148eab4dfd509d1647463ab1e0368f546804fb57e"}, {0x34, 0x0, "485f26ce3a1d144aaae591035028e7e381f0ed4f7245a8e20ad1fc04ddeeb650a39061408b585c5b8d63a924d1eb8a35"}, {0xb4, 0x0, "763f49b0d1f8113677709a6b16a27a8301d04a715d8de3ad0cb2b2616be62c398b5f8e0f7427f66a746af141421437443569801688f5986d0f1b2b04dff7c16bbe0b23bbfe644699f1a110885966cb0d71626be3522e8b675007c3b7138744d897486f6d4c92d5dd9aecd5cd089bc73b5686cdeb4b7f8bde494072a3d14ad1a4bb31b133a83112a5678358019724c623effaf8c7d3afa91be0b720d173b9c84033fddc539897de71f763801b8764717b"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0xc8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x94}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x7c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xff}, @NL80211_NAN_FUNC_SERVICE_INFO={0x8e, 0xb, "4ceddc2eae4a492f922ef5558030117a3683b6e042f23ad66ce98d289f4ec5c66cd0467521193c6dc3c2f2124189d346cfbccde146f3821a4fdd06b0cd2cf2dacfa0335297cc0ab4966acdda7b0f65f9d0ec6b613e89b3d4d4c9df18fdab1ce0622e930793269fdfb34a807a5f72ba263e5be9d0da02d1ef4dec0a757fb8281d424030675e76f7731a99"}]}, @NL80211_ATTR_NAN_FUNC={0x38, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7138d8231e7d"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x24, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}]}, @NL80211_ATTR_NAN_FUNC={0xe0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xcb, 0xb, "5fc17b286ca32d4c2a3b562f5f7923206b41a8672f2b84c85abf75e035f05fc189784200ee67b7a88214a299595ac5f30a20dd461a0c4d5b7878ce3b2ca15aa59bfbd3361a09abfd3e3810ffe2198a29ec9b6565fc493a3b0d06d37f2a14038b15d7526931211401070a5846d12c4cfb1640b81b0da364fb23a419421a4b6cbee74f219713503c0ca7fc0b648598165957bc393889015e02688fe6127b39023229254e42c72c2832f32bc691465b371f6b309ff7cd27c39acb5208b6a65a6bf9f9553a6e68e484"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x10a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1008, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x84, 0xb, "d48ddc18592aa4ed63195db6502629e194076c7917cd5906c0f2219bff26af65e3cff2ec28232b1ce1a7d751beab530b957c6dfd5cdc3dbcc404cb03eba874042f863309a70ddc52f24956d5ac1777925deae3bc42e13c9da713abdc2d9e6f73156b970745bdcfac3e76b86a66c7225496ec2583a78a7625d8be3bfccb59fdff"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}]}]}, 0x15d8}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000080) 00:43:48 executing program 2: semget(0x0, 0x0, 0x600) [ 2565.666575][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.674006][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.681294][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.688779][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.696374][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.703841][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.711101][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.718514][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.725880][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.733315][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.740584][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.747980][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.758782][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.766734][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.774136][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.781387][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.788782][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.796134][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.803550][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.810804][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.818223][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.825569][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.832967][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.840228][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.847627][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.854951][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.862354][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.869618][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.877016][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.884349][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.891785][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.899069][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2565.906484][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:49 executing program 2: semget(0x0, 0x0, 0x600) 00:43:49 executing program 5: sysfs$2(0x2, 0x1, &(0x7f0000000040)=""/75) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32], 0x7) [ 2566.029482][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:43:49 executing program 0: prctl$PR_GET_TSC(0x19, &(0x7f0000000b80)) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000bc0)=0x1f) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000c00)) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000b40)=[{0x3, 0xb15a, 0xc00}, {0x3, 0xffff, 0x1000}, {0x1, 0x9, 0x800}, {0x2, 0x2, 0x1800}], 0x4) semget(0x3, 0x600, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/udc', 0x80, 0x93) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000009c0)={&(0x7f0000000040), 0xc, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="4b789f7c", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x8d4}, 0x1, 0x0, 0x0, 0x840}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) prctl$PR_GET_TSC(0x19, &(0x7f0000000b80)) (async) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000bc0)=0x1f) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000c00)) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semop(r0, &(0x7f0000000b40)=[{0x3, 0xb15a, 0xc00}, {0x3, 0xffff, 0x1000}, {0x1, 0x9, 0x800}, {0x2, 0x2, 0x1800}], 0x4) (async) semget(0x3, 0x600, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/udc', 0x80, 0x93) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000009c0)={&(0x7f0000000040), 0xc, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="4b789f7c", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x8d4}, 0x1, 0x0, 0x0, 0x840}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) 00:43:49 executing program 4: semget(0x0, 0x1, 0x45b) r0 = semget$private(0x0, 0x2, 0x48) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/131) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f00000000c0)=""/254) 00:43:49 executing program 3: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf250a0000000c009900050000005e00000018006e800400020004000200048102000400010004000200"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x40000}, 0x20) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/hackrf', 0x60040, 0x105) (async, rerun: 64) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x294, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "2fb1f385ec7c4750"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x80}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}], @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "38a9bc20cd34b54b"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}]}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x80}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}]}, @NL80211_ATTR_SMPS_MODE={0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ad}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000}, 0x400c040) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x68, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="672b4174670d698aa0b6040669"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ae0bb2f1f122"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="a837795a3005ebb6a27fd3e7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random=':'}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040040) 00:43:49 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB="16b3d71bfd060020"], 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10200200}, 0xc, &(0x7f00000017c0)={&(0x7f00000001c0)={0x15d8, r2, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3d0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x258, 0xd, 0x0, 0x1, [{0x91, 0x0, "0737f9560480a9d40990037e4a569544819c6d0bd5591c49c3a4f51fa9d8d3a4716ec4cc7db0b12ddeb08a25ddb4fa0e4568079327053a8825df478b5e512b462da2de8c8a186eae280c7241d21bdf5e15e677ec9610b819ce0c25bf51e90c20f56aca3985272555fef3f91f9b89a5e4f7e18fdb367d803e350cf755b4d7a1e49a05f02ae7371c3dd2b02acf53"}, {0xd5, 0x0, "9981cbcae145e1a658e88b6fc9fa8621454d1f3a5e1cc883bd0d92f8942b7982a5f5f6fe6834cff7143d57bbdef85739c581ad66fb855fc0afc6813910db391ba7d3de53546869135fa765ecb0e5cfe6502afb72c581767336206dd69e7f4da326c6dadcb546f869b5529d60740bac3627a6bd114853f21a1870f6bc3d1bb97c9a9ebf8b7d1153b490ac0608dddae95561ecf8c096666b81bdeb462bd1d9134b4da44a0c33030258b375f8892cf31a2b950828ce9bdcb7796def3e521148eab4dfd509d1647463ab1e0368f546804fb57e"}, {0x34, 0x0, "485f26ce3a1d144aaae591035028e7e381f0ed4f7245a8e20ad1fc04ddeeb650a39061408b585c5b8d63a924d1eb8a35"}, {0xb4, 0x0, "763f49b0d1f8113677709a6b16a27a8301d04a715d8de3ad0cb2b2616be62c398b5f8e0f7427f66a746af141421437443569801688f5986d0f1b2b04dff7c16bbe0b23bbfe644699f1a110885966cb0d71626be3522e8b675007c3b7138744d897486f6d4c92d5dd9aecd5cd089bc73b5686cdeb4b7f8bde494072a3d14ad1a4bb31b133a83112a5678358019724c623effaf8c7d3afa91be0b720d173b9c84033fddc539897de71f763801b8764717b"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0xc8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x94}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x7c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xff}, @NL80211_NAN_FUNC_SERVICE_INFO={0x8e, 0xb, "4ceddc2eae4a492f922ef5558030117a3683b6e042f23ad66ce98d289f4ec5c66cd0467521193c6dc3c2f2124189d346cfbccde146f3821a4fdd06b0cd2cf2dacfa0335297cc0ab4966acdda7b0f65f9d0ec6b613e89b3d4d4c9df18fdab1ce0622e930793269fdfb34a807a5f72ba263e5be9d0da02d1ef4dec0a757fb8281d424030675e76f7731a99"}]}, @NL80211_ATTR_NAN_FUNC={0x38, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7138d8231e7d"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x24, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}]}, @NL80211_ATTR_NAN_FUNC={0xe0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xcb, 0xb, "5fc17b286ca32d4c2a3b562f5f7923206b41a8672f2b84c85abf75e035f05fc189784200ee67b7a88214a299595ac5f30a20dd461a0c4d5b7878ce3b2ca15aa59bfbd3361a09abfd3e3810ffe2198a29ec9b6565fc493a3b0d06d37f2a14038b15d7526931211401070a5846d12c4cfb1640b81b0da364fb23a419421a4b6cbee74f219713503c0ca7fc0b648598165957bc393889015e02688fe6127b39023229254e42c72c2832f32bc691465b371f6b309ff7cd27c39acb5208b6a65a6bf9f9553a6e68e484"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x10a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1008, 0xe, 0x0, 0x1, [{0x1004, 0x0, "6488c9fa9a5bec2ce0cb010543f535f2191e9e071ed4fd943a5d54f3e891b94af0b65eaf6a1b4c0d8d8d91ae45c2056b414b200bdabff64014576368c3620d01101561ceef96dea86abe7d89a53ac1bc336f4ebe5614d1d518de2e181fbd291e2ac6af583915f36b7287787d96b0dd364997aa287043f1226c18d918c588fbe3022d755e321d44cda7ea62328e378ac03988c3662367ffcee0bb5c692a67f4ea8e633488d982a94234d99d2483dc63caedaa781a30a834c3e905b6f439d108c239a94743b6c893f329bdd7922202df9627cfd00f0cf4350fb7f47843a4fcfae6104acdf94aac44d6b5cddb9eab32da51f0b9848bec9e800f25c7cc200dbe81ecab794cd084738c5498f014326b71a5304e79b83a32727f0ba9898516377a39228443e49a8005aace9a4d5a70daeee9d79272c4b3e1cb8965eea919845439f05a081ca433b0d948351e5651690a775f6b62b0b183f2ffbae856d4319b53c3145f8a937f603632e07d1a58c5690bd5a1cab2d5c376b7fa901bd716b5c4a8d1060d96c3bbcb94b2eb5952979da27385fddc18f38c37e7aa6044bb0ea10ab5a3da2319934eb771434546e9ec08b8e1a3362f1730bdd924d555e05c3e859a62bbec62ac0735a107cc0d9abf3240f2013fa588ed4dacd3598e1bfd244ad2d8992c5b2668531ccb254dac511d5b59736748163c015cb78be19acddbe9050ae746a83d3fd688cfdee3a9d7b8992625cf899da59367e47c7ff9a9c1ce1cc519462596373677a9b0d8a6631277d8d04d1fe18a82f0c9deaedd93d54018377fd24eef420ec85a4b6f1547e67ad17ae69995c40f7d0b30e12cfd266d58b67fe1edfe151930c4f42baa4bdfdf2c9bb458da749189b62d7e289a9e3434c61bdb6f4baefac420928011852d9104081ea869c4fa86ad3c4858b6ce968a8af200b1b500610480870df17ac27ccdc652ca0339984644765f0e926752a4cc42195e24170528750ac260f6c688f6ef1740c868d4bb1b4b40f236fa5730a6e5f9ee79b3994b057afd22a7b562acdff09d5bc2e7877d611024ec94ae2cba3f33241b8c0d7ac484db5b33a59f36e4910e8adc01b486298ec4a9722be94fa30086186cc1bd4f1a5ea09260de3daf2832478d9cea8cf3583b48052d5e0647b9bdccdc73c96b5114f11cdc70933b96d8f989d8abf5e6121e7e80ca93ff82dfd75cb3c7f69f984707a75445fc28857db2b070b2c1f1a79313596fba4a7f3dac66dcbe5eead625396e11efcaac3a7162c21aa3de02616835e0269ce49cb20445c466f81b6af6c7c2ed183376084564fdea7f70d3c01156021e0bd964ece9bda2fdb47b88afa99f35d4eb0a59d5e9a212c888d6acc033b6e98010fd17d47436b93d3ff17f3218df1d9864ec524d88f9b522c558d1524011503bbe8a77d93b9b429a948950e217d188913204eb470628fde32c83796a04791532a527128b4bd65d0f0866636b383f3a218c49b00c1e321ff0abcd94b32cf4fd411c9e461a4d2ce98281c1638ac1355eccf267a42b96b22213de0a792d9025c4c57b3a331872eff222b99357b395fbf0fa6426be096a8752bdba058b808fc6be169044fad8630c01fcac5a3281ddb7c0d938f0a7f1c129ee850c40d0d6c3a67259509c72bb75191f3f56f0e4f639e13b84d068aaacf6fe745a0b4d73ece4dd6158b228b182392790fa11ecc88a3ff3440033240929e01568eedc93a824630179a96675c18754123db0fcbc9dc89ba301977bd51ea95585bbe6ce43fa9ddb81a3181f12299aa63fc84cad504bd103f612b13f3f1285cab65dbe675adc1be55069cfd5a964f9da6e7aa2af6f9cd78f1b7e3da8afea7381115e54ff1fa72cd30dfb556ccc3ce6067562c5d6a4bc0e66c53f03bc19c1eecfb0d8c9721f1d257248b3bfdd165438dac26d62460225063a0be949a0d66ed8b8a8d38430447059681b257ebe0e98e9f3b92b5343d3724c3ddfe11cb722a4d8151235344439f61d0dd110fb223e1d05f808e2ab52e9b39a4114bb64752c0c05f60cf219c92e9cd9dc4bffb9049afca92fd5d6d00ed34312842ce408adf724d907b7d9416bc4aeba31d2069d70ee6f89668d7b45ac3b7e7e499d708a993121fcf8b6d45854dabfff31d08327335f71d0ae9a4a22dee9adf0659e6fbc4c951a6efea32947bc81105d2706151d8aa42cfb436db3123af00985ba1b2555da2e7e4e9bed3602795c2fd08e789b8f3bc0845ea93a4f9e467e52bf0bf0a66042be1ac4dfbc98271ea7f7fd20b701fe8e33f3fc89124a6c53c30134f7fbd9e6c4c95e5b60d7a59ae5c06d2980503d8e71b362b9ae16b8dceb94afa999a23db1c86e1ab71b13aad621d8869f403b21fdbbfe3cf105ff95b6f5a8c4b7526c9e0263c669b4b81b1cc0b6cb1644bf06d9369fa8457ff4e92facad20e131d5cd4563dfc3a46631829391d59953d3d84242754ca8d088e609b4859b9e458c72f2ab3f8d17e030b2551388857c114125bcf6c0260bec971618f52a4838d1f8e06c555390de0c68cf23f5557051d692cec6f721e5fd1854958f9d3b33850b4f506b07494294cd0c11ab5b90a6e2156d8733c48cca9bb6d260d99e33bf1624ca738f101764596ad9e465211ee2401c2e41af08c5726b59c003a70845776a78faf43269413da0b9bdb3e7d0b2c62fdee78560caaf8f28c239c9db7a55098197fd45fe8ee63e5b26e3cb0d6ab7fc92c082b694f8aa7e0455212d7ed9807bdde6ec657f3fdd177cec0ca2ddc908d513cd3600062c7c19b7ff4376267d62c3dcd1514fa84f7a0d0d81fe27c86d5ff01d794a4dfa4c047278ac981f5dd5d76448e591b2ba5ffa97f080e69b1b3df9bf91bb535e82eece7dab1dd9399401657139165355e0216ced3310e2a40831be58e412ae44df2659ee8c883c3ea5f30329b4645abeb3cea5190ad6200c6fd009ffe23f3d2156097838b11d339a8df008cc24605f0bf8be5ebdec97ae893431f30d7e16559bf6b74477d62a18742e880008903181cdb06b545b8dda57632deec4c787c7a0010950f3e5699cfc2b67f90ba3d0b59802abb5a5de0e775e2600def3b138512576e18ecaa6c3b9d01e1aacb0354f51cc735cf53a6998c935ddc5a5f72772db06a4667ecd110b79761eed491ccbd748c531d9ecf0457813601b1cc06323310651a28d37c02d6fc73014dfa558f4a0c713ed8aac15738c2fc8abc934f7afeae725cdd4b71af8d4e286e630d133a183490ec0fc845195e75fd6f45555b731887dd6592e16c01533b305cbd3b4dedf3a16e77c8a43061d92f2babed136c99d7c873d9d01281b4dea92bd29c1f46ba7456fb130cd96978f18e2d089ae157685dd65861b02b8e569a984aec67e5f792bdf77f6c1f04a4823833ef93b6984f852de22ff48c4d2515273e270e601682249d3d6170c08529288b276ada787f79fedb83e3dcbc737804094e1d737c5339d0ad503c5b586f8f224109c9e353f388ef0527e937b7c2267a5c258ccdde60b1d62a06dcf390da7bb6dcac82c5def9f104ba9bece25fc897b1908b1dc3b9571c9e4ba2e4b503074761c5352923d7f96a1ebb5227ea8e5352a19c8ae5d46844aafd495d74ca50cb1cf97e5e08563af39a7476fba4914ec799e09942bd6fc72b8189403dacd7ea9a823ce9631dace3932a5fc598564e2c88eb57eca2a121794a89a11820e3af7fcfbc00ccdd02ed867bab4fd6398cd341e9b1442adf21b648a1387af9c31bb663d6ea6187a8c28b6f83db85e3e8dbcd6e84a38d4abbf7d9f2f6dadacb639e1b31769eb5b2894eedfb70b68058910f76e16808a43a6e6113b988fc3c44e1749358925f46dd8426a0c68b8411c202b9fbc6dcb6fc94e2910cdbd3f401f22d34b43e6d17df47f19bcfacbaad2a429416ed889008d250ac7f49357fa43e10142c079dba1678a9066d8dd1988230236e0a42cdffb1b39d62370ace930ccf13d8196db9d1f9ec3e3fe8c22ec7c7122b09c7bb324d9c3da115bfe72accb047e8f34ec2300ddbe161cf446f2bdd5db499a557c5bb66ad69295c746b974922745c36c73ee8fdd0142ae92d6db4b8b5785f9a8db0eaf17f495ef53b75eaa9b5c38477158cab87030fba283e671b94245102d728bea7cfd83d9cc8058fb6bd61df37526094619ee68cbc7657e4ed5f80a2a33f4d6e2dc32b6d5ede5beafd423b2ad743b41c504ad10a325766fbf510e14a12ad4334cee6f8e9ef18709e96be2e4209416ed9007b5eef30848657a51b5911e42211c10163723f0d6ef00be63eef4a67b404d772b1b893f9cb86e7b8bf6e8fb1f3e0e88b15be2fb6b689e9d10b793f906fc952b25d21f2bd57459b0e578201e6fd0fc12fd04c5601cb0db722e09de12907fd5885bdf478ea33eb8ee12bd17ae3d5d5ae8ad7cf7c6c7f930dc6486ba9678e5a6adcf2c8629e52704c550157ddc6741145824b9f7caf00bd95a26fb60ed5d464ee7c07fafd97574b7669752e3cbf3918545435779c4267980592ad2d648ebfbf13593a0cc1a0ba64f912e10d37778d909d2d5cf6d32f6d97c12f7700a8d386eebd3de9d3f84a61bbe256a88201545416f5f6018f0bd9541dbfad3d8beb0d2e53b70ba9487092a1a3d0227244123ad50edd5da3f8a99b385e894e8ff61475723d5337901934c84c5cfb7c9cbf47db673af64f8b55f3026adf3070a4fbb3713697498ada6c9bb3ed574075652d4b324a5b802f6949b6e55e64116ef269743f2ba14e3e47af9457ad8aaa71d01ae0753ff575e89e805515597d110e8559e18f0fdd7358a1406882da0d64a658889f1761c1185a8ea655c4d56d4eef51c07bb5dfe1cb278c27cdbc87d2ec5d7971e1089d8f972c1835ac03474e764329cd07200dfb48623026d96b96d6b3d2e051c709e6756a79f693361e15160c324565596e4ebc898b0d7111bc5ccb5c89d4ff50436137c9bead3322ed85d7a68c1c6c168879e0c28cf901493417cb2953d18e9ec225ed0b86e3e6e54898216a8d84417b649b79706c3420b52ff31d4bd8df329953c2e06b16630d781324274a3da7c7868b9f738b411085985a6956d44161ff0e50c46b562073c44bb4248bfe0e93a7268ca1235bfb8e488a3b7ba6193cc8045d9640eca2a1b076bcf347b960e9512a72948a17683791327a10ac3135d07d050bd57ff8588916d1072f0cc3ee701f8818fed0b473757c7163bd1a606ba67163b768b5a1119b63d23988ba3ef5ccfb5aaae8f5e6154520812fefeed62f9214a4a0dd05ac861021ac9358fea49d0c4e99b9456441426d426931989e616b0d9a132bdd7f844ec51a8a102269e27dbc4fd3c534a84fa3d1b99ada8a38fc412baa492b4f90ce44f7f49553a0cc1d5dd671361d4e7139363583a5979fad81445b8abbb908f52896dd63075012c7b44cb2e978161042801e54ea5b47e9df068de2cfb92beaa285798cc01c6efc68290401dd4cfc3cb47b770f78f456fd5804ae6042b5d20b9b7e710ff437d3b289f4e4a922ec89dfd3a41442cae54f094043260d9898f5e9cf8056f38d8434e4ffdcb1dacc2076427cb97332e5a284f4765d39439d6aca635a60e3dccf2356b2213bdf5e0ff592d31a03ef594af839e71354a0d5d7dbdfeade7bceb3c575a6796d0fe4b4ec0633b0ba790527609a3f7d56634af584dda12b168c9bd113983e06f5dd50ccde05d90bbf4aabdafce836a7f5464fe73e30ec52b43f7bbc1755ae21c8af4f7af8b179393ae920752eddf0fa778fe04e28384ff3c3dbb32cd8c9c3bcb5a9b389b0d429f7c58ea3944e84c3acee144e2"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x84, 0xb, "d48ddc18592aa4ed63195db6502629e194076c7917cd5906c0f2219bff26af65e3cff2ec28232b1ce1a7d751beab530b957c6dfd5cdc3dbcc404cb03eba874042f863309a70ddc52f24956d5ac1777925deae3bc42e13c9da713abdc2d9e6f73156b970745bdcfac3e76b86a66c7225496ec2583a78a7625d8be3bfccb59fdff"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}]}]}, 0x15d8}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000080) 00:43:49 executing program 5: sysfs$2(0x2, 0x1, &(0x7f0000000040)=""/75) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32], 0x7) 00:43:49 executing program 2: semget(0x0, 0x0, 0x600) 00:43:49 executing program 4: semget(0x0, 0x1, 0x45b) r0 = semget$private(0x0, 0x2, 0x48) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/131) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f00000000c0)=""/254) semget(0x0, 0x1, 0x45b) (async) semget$private(0x0, 0x2, 0x48) (async) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/131) (async) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f00000000c0)=""/254) (async) 00:43:49 executing program 0: prctl$PR_GET_TSC(0x19, &(0x7f0000000b80)) (async) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000bc0)=0x1f) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000c00)) (async, rerun: 32) r0 = semget$private(0x0, 0x1, 0x0) (rerun: 32) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000b40)=[{0x3, 0xb15a, 0xc00}, {0x3, 0xffff, 0x1000}, {0x1, 0x9, 0x800}, {0x2, 0x2, 0x1800}], 0x4) (async, rerun: 32) semget(0x3, 0x600, 0x0) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/udc', 0x80, 0x93) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000009c0)={&(0x7f0000000040), 0xc, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="4b789f7c", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf2500000000080007000100000050070880a40000801400040002004e220a010102000000000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a00001f00000008ff01000000000000000000000000000100000100060005000500000006000500c60700001400040002004e23ac1414220000000000000000240002001ed6f9451509cdba655995fd9022f3a21f414391833ca8fa0ec809af5ad700d76c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240001000000000000000000000000000000000000000000000000000000000000000000200004000a004e21000000c5fc000000000000000000000000000001050000002800008024000980040000801c000080060001000200000008000200ac1e00010500030002000000c0000080bc000980b8000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414220500030001000000060001000200000008000200ffffffff0500030003000000060001000a00000014000200fe80000000000000000000000000002a0500030002000000060001000200000008000200ac1e01010500030002000000060001000a00000014000200fe88000000000000000000000000000105000300010000005c000080080003000000000024000200edd40d5af7cb37c9550b53cc9d39a71268e141403b24fb274f85dd8f7d399010060005000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b7c00008008000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b0800030006000000200004000a004e220000000000000000000000000000ffffffffffff0500000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922400400803404098064000080060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200000000000500030003000000060001000a00000014000200ff0100000000000000000000000000010500030001000000000100800600010002000000080002006401010205000300010000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000a00000014000200fe8800000000000000000000000001010500030000000000060001000200000008000200ac1414bb0500030003000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000000000005000300020000000600010002000000080002007f000001050003000000000064000080060001000a0000001400020000000000000000000000ffffac1414aa0500030002000000060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000200000008000200ac1414bb050003000200000070000080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020020010000000000000000000000000000050003000300000088000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000200000008000200e00000020500030003000000060001000a0000001400020000000000000000000000ffffffffffff050003000000000064000080060001000a00000014000200fe8000000000000000000000000000120500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300010000000600010002000000080002007f00000105000300010000000c010080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640101000500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000200000008000200000000000500030002000000060001000200000008000200e00000020500030001000000060001000a0000001400020000000000000000000000ffffe000000105000300030000000600010002000000080002007f0000010500030002000000060001000a00000014000200fe8000000000000000000000000000bb050003000200000008000a00010000003c0000801400040002004e2364010102000000000000000024000200a1200a3f048f9dfdee2f93827cde2bce103bfb843a4ff55c642ee5854f854e7f24000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e0800050001000000340108807800008024000200b645e9fc504ecd4d9d1ef998b35d7c6b8f39b37fdaeb650a4e9178c0f9e807f424000200c065e568bd4b1f42862be1debb9efea3a5afa13d5fca8a91185941baf38223eb24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c08000300040000003000008024000200594cc7e3a166c7b2766a126211f1f703008e0627ad4b74b3da051bb377f1b5e9080003000100000038000080200004000a004e230000000000000000000000000000ffff0a01010039ef00001400040002004e20ac1414aa0000000000000000440000800800030002000000080003000000000006000500ff03000006000500ee0a0000200004000a004e2200000009fc020000000000000000000000000000030000000c000080080003000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x8d4}, 0x1, 0x0, 0x0, 0x840}, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 00:43:49 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc8, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x1, 0x15}, @fd, @fda={0x66646185, 0x8, 0x2, 0x1f}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x40}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/87, 0x57, 0x0, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/204, 0xcc, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}}, @register_looper, @dead_binder_done, @clear_death={0x400c630f, 0x3}, @register_looper, @increfs_done={0x40106308, 0x2}], 0xc1, 0x0, &(0x7f0000000480)="794c0b08dfc2684b9413ea5492127a7398f2dae3170b1f0c63b69f7df5ae81c43f7c39c7259719cb4b51d141e90445093e7827cb603353fd14cb34a50d6a09d4a862b5b559ce34474a2407656e1dc291aeec218fb5ac08eb3b38ce551cd7d05519e0fdac5e50101780bbe4fdb1c1254307ea65bc73d1f6f467a4a707bd364322db906a842ce118698874babad792940c1d287ba9689d47c64da05c465d1395ffdf7e8889d4f18d3fb4837b7d0f91a461fcc95adfed93ff7d139c37de99896ab932"}) 00:43:49 executing program 5: sysfs$2(0x2, 0x1, &(0x7f0000000040)=""/75) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32], 0x7) 00:43:49 executing program 2: semget(0x2, 0xf81ed51dcc5b306b, 0x420) 00:43:50 executing program 4: semget(0x0, 0x1, 0x45b) (async) r0 = semget$private(0x0, 0x2, 0x48) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/131) (async) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f00000000c0)=""/254) 00:43:50 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc8, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x1, 0x15}, @fd, @fda={0x66646185, 0x8, 0x2, 0x1f}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x40}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/87, 0x57, 0x0, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/204, 0xcc, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}}, @register_looper, @dead_binder_done, @clear_death={0x400c630f, 0x3}, @register_looper, @increfs_done={0x40106308, 0x2}], 0xc1, 0x0, &(0x7f0000000480)="794c0b08dfc2684b9413ea5492127a7398f2dae3170b1f0c63b69f7df5ae81c43f7c39c7259719cb4b51d141e90445093e7827cb603353fd14cb34a50d6a09d4a862b5b559ce34474a2407656e1dc291aeec218fb5ac08eb3b38ce551cd7d05519e0fdac5e50101780bbe4fdb1c1254307ea65bc73d1f6f467a4a707bd364322db906a842ce118698874babad792940c1d287ba9689d47c64da05c465d1395ffdf7e8889d4f18d3fb4837b7d0f91a461fcc95adfed93ff7d139c37de99896ab932"}) 00:43:50 executing program 0: r0 = semget(0x3, 0x600, 0x0) semop(r0, &(0x7f0000000000)=[{0x9, 0x6, 0x800}, {0x4, 0x7f}, {0x4, 0xd708, 0x3000}, {0x4, 0x9, 0x1000}, {0x1, 0x80}], 0x5) 00:43:50 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80009010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x20}}, 0x4008040) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r2, 0x13}, 0x10) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x7) [ 2567.361370][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:50 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB="16b3d71bfd060020"], 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10200200}, 0xc, &(0x7f00000017c0)={&(0x7f00000001c0)={0x15d8, r2, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3d0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x258, 0xd, 0x0, 0x1, [{0x91, 0x0, "0737f9560480a9d40990037e4a569544819c6d0bd5591c49c3a4f51fa9d8d3a4716ec4cc7db0b12ddeb08a25ddb4fa0e4568079327053a8825df478b5e512b462da2de8c8a186eae280c7241d21bdf5e15e677ec9610b819ce0c25bf51e90c20f56aca3985272555fef3f91f9b89a5e4f7e18fdb367d803e350cf755b4d7a1e49a05f02ae7371c3dd2b02acf53"}, {0xd5, 0x0, "9981cbcae145e1a658e88b6fc9fa8621454d1f3a5e1cc883bd0d92f8942b7982a5f5f6fe6834cff7143d57bbdef85739c581ad66fb855fc0afc6813910db391ba7d3de53546869135fa765ecb0e5cfe6502afb72c581767336206dd69e7f4da326c6dadcb546f869b5529d60740bac3627a6bd114853f21a1870f6bc3d1bb97c9a9ebf8b7d1153b490ac0608dddae95561ecf8c096666b81bdeb462bd1d9134b4da44a0c33030258b375f8892cf31a2b950828ce9bdcb7796def3e521148eab4dfd509d1647463ab1e0368f546804fb57e"}, {0x34, 0x0, "485f26ce3a1d144aaae591035028e7e381f0ed4f7245a8e20ad1fc04ddeeb650a39061408b585c5b8d63a924d1eb8a35"}, {0xb4, 0x0, "763f49b0d1f8113677709a6b16a27a8301d04a715d8de3ad0cb2b2616be62c398b5f8e0f7427f66a746af141421437443569801688f5986d0f1b2b04dff7c16bbe0b23bbfe644699f1a110885966cb0d71626be3522e8b675007c3b7138744d897486f6d4c92d5dd9aecd5cd089bc73b5686cdeb4b7f8bde494072a3d14ad1a4bb31b133a83112a5678358019724c623effaf8c7d3afa91be0b720d173b9c84033fddc539897de71f763801b8764717b"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0xc8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x94}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x7c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xff}, @NL80211_NAN_FUNC_SERVICE_INFO={0x8e, 0xb, "4ceddc2eae4a492f922ef5558030117a3683b6e042f23ad66ce98d289f4ec5c66cd0467521193c6dc3c2f2124189d346cfbccde146f3821a4fdd06b0cd2cf2dacfa0335297cc0ab4966acdda7b0f65f9d0ec6b613e89b3d4d4c9df18fdab1ce0622e930793269fdfb34a807a5f72ba263e5be9d0da02d1ef4dec0a757fb8281d424030675e76f7731a99"}]}, @NL80211_ATTR_NAN_FUNC={0x38, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7138d8231e7d"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x24, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}]}, @NL80211_ATTR_NAN_FUNC={0xe0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xcb, 0xb, "5fc17b286ca32d4c2a3b562f5f7923206b41a8672f2b84c85abf75e035f05fc189784200ee67b7a88214a299595ac5f30a20dd461a0c4d5b7878ce3b2ca15aa59bfbd3361a09abfd3e3810ffe2198a29ec9b6565fc493a3b0d06d37f2a14038b15d7526931211401070a5846d12c4cfb1640b81b0da364fb23a419421a4b6cbee74f219713503c0ca7fc0b648598165957bc393889015e02688fe6127b39023229254e42c72c2832f32bc691465b371f6b309ff7cd27c39acb5208b6a65a6bf9f9553a6e68e484"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x10a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1008, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x84, 0xb, "d48ddc18592aa4ed63195db6502629e194076c7917cd5906c0f2219bff26af65e3cff2ec28232b1ce1a7d751beab530b957c6dfd5cdc3dbcc404cb03eba874042f863309a70ddc52f24956d5ac1777925deae3bc42e13c9da713abdc2d9e6f73156b970745bdcfac3e76b86a66c7225496ec2583a78a7625d8be3bfccb59fdff"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}]}]}, 0x15d8}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000080) 00:43:50 executing program 4: semget(0x3, 0x0, 0x0) semget(0x1, 0x4, 0x20) 00:43:50 executing program 2: semget(0x2, 0xf81ed51dcc5b306b, 0x420) semget(0x2, 0xf81ed51dcc5b306b, 0x420) (async) 00:43:50 executing program 0: r0 = semget(0x3, 0x600, 0x0) semop(r0, &(0x7f0000000000)=[{0x9, 0x6, 0x800}, {0x4, 0x7f}, {0x4, 0xd708, 0x3000}, {0x4, 0x9, 0x1000}, {0x1, 0x80}], 0x5) 00:43:50 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc8, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x1, 0x15}, @fd, @fda={0x66646185, 0x8, 0x2, 0x1f}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x40}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/87, 0x57, 0x0, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/204, 0xcc, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}}, @register_looper, @dead_binder_done, @clear_death={0x400c630f, 0x3}, @register_looper, @increfs_done={0x40106308, 0x2}], 0xc1, 0x0, &(0x7f0000000480)="794c0b08dfc2684b9413ea5492127a7398f2dae3170b1f0c63b69f7df5ae81c43f7c39c7259719cb4b51d141e90445093e7827cb603353fd14cb34a50d6a09d4a862b5b559ce34474a2407656e1dc291aeec218fb5ac08eb3b38ce551cd7d05519e0fdac5e50101780bbe4fdb1c1254307ea65bc73d1f6f467a4a707bd364322db906a842ce118698874babad792940c1d287ba9689d47c64da05c465d1395ffdf7e8889d4f18d3fb4837b7d0f91a461fcc95adfed93ff7d139c37de99896ab932"}) 00:43:50 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80009010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x20}}, 0x4008040) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r2, 0x13}, 0x10) (async) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="0400c8b8b822d18949a56e9ed3a7404b85fbd5c7c390f3315b3b3bad9cf802e8778c130d3a226befc33275376203f152116383fcf0f29e6d7a215e026424ddb4bc556b064a2f06a1838a2a4baacfd12ff22471330608371751f6dbb9789b986aec7027a667774e8a4216397dd451f230ea935764e9e62063029133a4f48a4fcb120f025ae4a90b634eccaa5e783c497952bb8f7266b788ee7eb6f241ba5fe8f409b9b3a735795a01a3245e70e01dd33276bce0340b1065033cf60abd9e381b4ac6f2191aa9369f8a959cb01eb1da9e6332976f829a46367c38640910af37c61088f7c792622bbb2ccd8ce90ef59f9bff01567ae82ddf4eedb5473bfabd077e4f8b400f4ba146c3c07c115020e16f58b39faf2152a048d434f5b158d137053630aa10eb8c166b66396919a1c9ebe159bc50c1b5878bb0e68451617db2adcdfdb39940d8d603bba07035c3bc74e1942203a05a2dfc3985435c16cadd1cf36b8526739d07a2673f8530f9ada1aa8841d4578a7596541044fcc0a7a05544"], 0x7) 00:43:50 executing program 2: semget(0x2, 0xf81ed51dcc5b306b, 0x420) 00:43:50 executing program 4: semget(0x3, 0x0, 0x0) (async, rerun: 64) semget(0x1, 0x4, 0x20) (rerun: 64) [ 2567.799087][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:51 executing program 0: r0 = semget(0x3, 0x600, 0x0) semop(r0, &(0x7f0000000000)=[{0x9, 0x6, 0x800}, {0x4, 0x7f}, {0x4, 0xd708, 0x3000}, {0x4, 0x9, 0x1000}, {0x1, 0x80}], 0x5) semget(0x3, 0x600, 0x0) (async) semop(r0, &(0x7f0000000000)=[{0x9, 0x6, 0x800}, {0x4, 0x7f}, {0x4, 0xd708, 0x3000}, {0x4, 0x9, 0x1000}, {0x1, 0x80}], 0x5) (async) 00:43:51 executing program 2: r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) semget(0x3, 0x0, 0x1) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x4, 0x2, 0x9a, 0x7, 0x96, 0x4]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000040)=""/82) 00:43:51 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @val={0xc, 0x99, {0x470, 0x60}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x41) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x6c}}}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x14, 0x4, "0c0b4c4cd3ccaa453791995bd3408abf"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x48800) 00:43:51 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80009010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x20}}, 0x4008040) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r2, 0x13}, 0x10) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x7) 00:43:51 executing program 1: r0 = mq_open(&(0x7f0000000080)='\x00', 0x40, 0x2a, &(0x7f0000000240)={0x401, 0x34, 0x401, 0x2}) mq_timedsend(r0, &(0x7f0000000100)="769ce7d4086e119c71ad6d79193e81246c74fc5fb60c60725a634d252db5e3ebebe1ed4ae82dccf82e9f7b650a9f8fbf8c74ce3ab83ec2d6f87d40f70851f014bc4c681d6aaf6343fea594a30e42b24862f6c6dac72304a586d2c45f7ce8d6c3f997a8880c5480136e2c366b13ba939768456bf83b7c36888929c2a1117e71d944597c0fb1711c3f85e079d4a11e3a0929cecad2d5a435a48f7eae869fc512f8d52da1a111c790c9430e0e75c9dd411483f7eed955375d860d437ef30b65506ac83df331ecee1da329332a7f54", 0xcd, 0x6, &(0x7f0000000200)={0x77359400}) socketpair(0x29, 0xa, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0xffffffff, 0x8) 00:43:51 executing program 4: semget(0x3, 0x0, 0x0) (async) semget(0x1, 0x4, 0x20) 00:43:51 executing program 2: r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) (async) semget(0x3, 0x0, 0x1) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x4, 0x2, 0x9a, 0x7, 0x96, 0x4]) (async) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) (async, rerun: 64) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000040)=""/82) (rerun: 64) 00:43:51 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @val={0xc, 0x99, {0x470, 0x60}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x41) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x6c}}}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x14, 0x4, "0c0b4c4cd3ccaa453791995bd3408abf"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x48800) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @val={0xc, 0x99, {0x470, 0x60}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x41) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x6c}}}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x14, 0x4, "0c0b4c4cd3ccaa453791995bd3408abf"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x48800) (async) [ 2568.339788][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:51 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000000)=""/97) 00:43:51 executing program 2: r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) semget(0x3, 0x0, 0x1) (async) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x4, 0x2, 0x9a, 0x7, 0x96, 0x4]) (async) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000040)=""/82) 00:43:51 executing program 1: r0 = mq_open(&(0x7f0000000080)='\x00', 0x40, 0x2a, &(0x7f0000000240)={0x401, 0x34, 0x401, 0x2}) mq_timedsend(r0, &(0x7f0000000100)="769ce7d4086e119c71ad6d79193e81246c74fc5fb60c60725a634d252db5e3ebebe1ed4ae82dccf82e9f7b650a9f8fbf8c74ce3ab83ec2d6f87d40f70851f014bc4c681d6aaf6343fea594a30e42b24862f6c6dac72304a586d2c45f7ce8d6c3f997a8880c5480136e2c366b13ba939768456bf83b7c36888929c2a1117e71d944597c0fb1711c3f85e079d4a11e3a0929cecad2d5a435a48f7eae869fc512f8d52da1a111c790c9430e0e75c9dd411483f7eed955375d860d437ef30b65506ac83df331ecee1da329332a7f54", 0xcd, 0x6, &(0x7f0000000200)={0x77359400}) (async) socketpair(0x29, 0xa, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0xffffffff, 0x8) 00:43:51 executing program 4: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000000)=""/101) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f0000000080)=""/86) 00:43:51 executing program 2: semget(0x0, 0x0, 0x0) 00:43:51 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @val={0xc, 0x99, {0x470, 0x60}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x41) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x6c}}}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x14, 0x4, "0c0b4c4cd3ccaa453791995bd3408abf"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x48800) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @val={0xc, 0x99, {0x470, 0x60}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x41) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x6c}}}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x14, 0x4, "0c0b4c4cd3ccaa453791995bd3408abf"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x48800) (async) 00:43:51 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000000)=""/97) semget(0x3, 0x600, 0x0) (async) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000000)=""/97) (async) 00:43:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) 00:43:52 executing program 1: r0 = mq_open(&(0x7f0000000080)='\x00', 0x40, 0x2a, &(0x7f0000000240)={0x401, 0x34, 0x401, 0x2}) mq_timedsend(r0, &(0x7f0000000100)="769ce7d4086e119c71ad6d79193e81246c74fc5fb60c60725a634d252db5e3ebebe1ed4ae82dccf82e9f7b650a9f8fbf8c74ce3ab83ec2d6f87d40f70851f014bc4c681d6aaf6343fea594a30e42b24862f6c6dac72304a586d2c45f7ce8d6c3f997a8880c5480136e2c366b13ba939768456bf83b7c36888929c2a1117e71d944597c0fb1711c3f85e079d4a11e3a0929cecad2d5a435a48f7eae869fc512f8d52da1a111c790c9430e0e75c9dd411483f7eed955375d860d437ef30b65506ac83df331ecee1da329332a7f54", 0xcd, 0x6, &(0x7f0000000200)={0x77359400}) socketpair(0x29, 0xa, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0xffffffff, 0x8) mq_open(&(0x7f0000000080)='\x00', 0x40, 0x2a, &(0x7f0000000240)={0x401, 0x34, 0x401, 0x2}) (async) mq_timedsend(r0, &(0x7f0000000100)="769ce7d4086e119c71ad6d79193e81246c74fc5fb60c60725a634d252db5e3ebebe1ed4ae82dccf82e9f7b650a9f8fbf8c74ce3ab83ec2d6f87d40f70851f014bc4c681d6aaf6343fea594a30e42b24862f6c6dac72304a586d2c45f7ce8d6c3f997a8880c5480136e2c366b13ba939768456bf83b7c36888929c2a1117e71d944597c0fb1711c3f85e079d4a11e3a0929cecad2d5a435a48f7eae869fc512f8d52da1a111c790c9430e0e75c9dd411483f7eed955375d860d437ef30b65506ac83df331ecee1da329332a7f54", 0xcd, 0x6, &(0x7f0000000200)={0x77359400}) (async) socketpair(0x29, 0xa, 0x7ff, &(0x7f0000000040)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0xffffffff, 0x8) (async) 00:43:52 executing program 4: semget(0x3, 0x0, 0x0) (async) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) (async, rerun: 64) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000000)=""/101) (async, rerun: 64) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f0000000080)=""/86) 00:43:52 executing program 2: semget(0x0, 0x0, 0x0) 00:43:52 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000000)=""/97) semget(0x3, 0x600, 0x0) (async) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000000)=""/97) (async) 00:43:52 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000100)={0xa5, 0x73, 0x80000}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) socketpair(0x1a, 0x800, 0x89c, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa7d, 0x57}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 00:43:52 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x40, r0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x84) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x340, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB="080001002bef4367"], 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001f7060504bc1d07e20179a3f2a04087ddf4d19fa5221a3458b33019b21db4ca69fae5adb88f1f29f8101467b9bf3d6c13b02734aa8c0acac9259fcaa3a58bd3835ecd946255bcc8bffc3f141fcb55b01f8206b4742633fb12064930b5f041b635a6ebd86eb0a11f839650d4b2395096789f67732860609e0362499c302c8c2cec8e2d0670594c93d022d02de72d5f08bd88926fec4de00208ba38372b12f8573b92e4cc99a12eeef6aca00df9ced5433004c5b02b1cb0f496708ac3266951ea9dc79e4ec017561", @ANYRES16=r6, @ANYBLOB="000229bd7000fbdbdf25760000000c0058002a000000000000000c0058002e000000000000000c0058004d000000000000000c00580035000000000000000c0058003c000000000000000c0058001f00000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x3b8, r8, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0xc1, 0x7f, @device_a, 0x6, @device_a, 0x6, 0x1, @broadcast, 0x20}}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='w'}, @NL80211_ATTR_IE={0xc, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x70, 0x81}}, @dsss={0x3, 0x1, 0xb8}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19b, 0x2a, [@dsss={0x3, 0x1, 0x24}, @perr={0x84, 0x102, {0xde, 0x10, [@not_ext={{}, @broadcast, 0x2, "", 0x26}, @not_ext={{}, @broadcast, 0x4, "", 0x3c}, @ext={{}, @device_a, 0x45e064f4, @device_b, 0x37}, @not_ext={{}, @device_b, 0x1, "", 0x21}, @ext={{}, @device_a, 0x0, @device_a, 0x35}, @not_ext={{}, @broadcast, 0x8001, "", 0x1e}, @not_ext={{}, @device_b, 0x2, "", 0x18}, @not_ext={{}, @broadcast, 0x7, "", 0x39}, @not_ext={{}, @device_a, 0x0, "", 0x30}, @ext={{}, @device_a, 0x7, @device_b, 0x34}, @ext={{}, @device_b, 0x4, @broadcast, 0x3d}, @ext={{}, @device_a, 0x400, @device_b, 0x11}, @ext={{}, @broadcast, 0x80000000, @device_a, 0x11}, @ext={{}, @device_b, 0x0, @broadcast, 0x1d}, @not_ext={{}, @device_a, 0x8, "", 0xa}, @ext={{}, @device_a, 0x2}]}}, @tim={0x5, 0x74, {0xae, 0xfb, 0x79, "1934aa7115bdb6f7374bb7b8568923186cbe1021aa951d0e8ed162e59057fc7f09de5e3640a3ed3187d894b456039bfb48e5830d76c01a1e6e9ea65c7a1d0e51f740386367022be139d26419c492336158c91fe52c8823204e299be598e9847d8e99d567fab24f93a33968d6762e0688cc"}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x8, 0x81, @device_b, 0x5, 0xdd, 0x200}}, @challenge={0x10, 0x1, 0x10}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x190, 0x2a, [@perr={0x84, 0x108, {0x49, 0x10, [@not_ext={{}, @device_b, 0x3, "", 0x13}, @ext={{}, @broadcast, 0x5b, @device_a, 0x1f}, @ext={{}, @broadcast, 0x3ff, @device_b, 0x40}, @ext={{}, @device_b, 0x4, @device_b, 0x14}, @ext={{}, @device_a, 0x6, @broadcast, 0x2f}, @ext={{}, @device_a, 0x6, @broadcast, 0x40}, @ext={{}, @device_a, 0xfffffb01, @broadcast, 0x21}, @not_ext={{}, @device_a, 0x7ff, "", 0x3c}, @not_ext={{}, @device_a, 0x100, "", 0x38}, @ext={{}, @device_b, 0x6, @device_b, 0x14}, @not_ext={{}, @device_a, 0x8, "", 0x38}, @not_ext={{}, @device_b, 0x5, "", 0x8}, @not_ext={{}, @device_b, 0x100, "", 0x1c}, @ext={{}, @device_b, 0x8, @device_a, 0x2e}, @ext={{}, @broadcast, 0x8, @device_a, 0x23}, @not_ext={{}, @device_a, 0x9, "", 0x22}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6}, @tim={0x5, 0x4d, {0x9, 0xa4, 0xcf, "d3ca8735895ac7c93674c88e934298fbac9a3b46f64e80237f8de88fc38b80ecd2374b72521aa82ceba05f1cfed1e2fe620f780dcd495d562919dbf366f79370fb7c7f4b80e5f0ec1f99"}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x7, 0x3}}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x5, 0x0, 0x7fff, 0x2}}, @challenge={0x10, 0x1, 0xa6}, @measure_req={0x26, 0x5, {0x20, 0x9, 0x8, "67ae"}}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4c080}, 0x4841) 00:43:52 executing program 4: semget(0x3, 0x0, 0x0) (async) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000000)=""/101) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f0000000080)=""/86) 00:43:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) (async) 00:43:52 executing program 2: semget(0x0, 0x0, 0x0) semget(0x0, 0x0, 0x0) (async) 00:43:52 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x16}, @chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdf}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x88050) semget(0x3, 0x600, 0x0) 00:43:52 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000100)={0xa5, 0x73, 0x80000}, 0x20) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async, rerun: 64) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) (async, rerun: 64) socketpair(0x1a, 0x800, 0x89c, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa7d, 0x57}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 00:43:52 executing program 4: semget(0x3, 0x0, 0x41) 00:43:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x40, r0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x84) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x340, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB="080001002bef4367"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001f7060504bc1d07e20179a3f2a04087ddf4d19fa5221a3458b33019b21db4ca69fae5adb88f1f29f8101467b9bf3d6c13b02734aa8c0acac9259fcaa3a58bd3835ecd946255bcc8bffc3f141fcb55b01f8206b4742633fb12064930b5f041b635a6ebd86eb0a11f839650d4b2395096789f67732860609e0362499c302c8c2cec8e2d0670594c93d022d02de72d5f08bd88926fec4de00208ba38372b12f8573b92e4cc99a12eeef6aca00df9ced5433004c5b02b1cb0f496708ac3266951ea9dc79e4ec017561", @ANYRES16=r6, @ANYBLOB="000229bd7000fbdbdf25760000000c0058002a000000000000000c0058002e000000000000000c0058004d000000000000000c00580035000000000000000c0058003c000000000000000c0058001f00000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x40) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x3b8, r8, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0xc1, 0x7f, @device_a, 0x6, @device_a, 0x6, 0x1, @broadcast, 0x20}}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='w'}, @NL80211_ATTR_IE={0xc, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x70, 0x81}}, @dsss={0x3, 0x1, 0xb8}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19b, 0x2a, [@dsss={0x3, 0x1, 0x24}, @perr={0x84, 0x102, {0xde, 0x10, [@not_ext={{}, @broadcast, 0x2, "", 0x26}, @not_ext={{}, @broadcast, 0x4, "", 0x3c}, @ext={{}, @device_a, 0x45e064f4, @device_b, 0x37}, @not_ext={{}, @device_b, 0x1, "", 0x21}, @ext={{}, @device_a, 0x0, @device_a, 0x35}, @not_ext={{}, @broadcast, 0x8001, "", 0x1e}, @not_ext={{}, @device_b, 0x2, "", 0x18}, @not_ext={{}, @broadcast, 0x7, "", 0x39}, @not_ext={{}, @device_a, 0x0, "", 0x30}, @ext={{}, @device_a, 0x7, @device_b, 0x34}, @ext={{}, @device_b, 0x4, @broadcast, 0x3d}, @ext={{}, @device_a, 0x400, @device_b, 0x11}, @ext={{}, @broadcast, 0x80000000, @device_a, 0x11}, @ext={{}, @device_b, 0x0, @broadcast, 0x1d}, @not_ext={{}, @device_a, 0x8, "", 0xa}, @ext={{}, @device_a, 0x2}]}}, @tim={0x5, 0x74, {0xae, 0xfb, 0x79, "1934aa7115bdb6f7374bb7b8568923186cbe1021aa951d0e8ed162e59057fc7f09de5e3640a3ed3187d894b456039bfb48e5830d76c01a1e6e9ea65c7a1d0e51f740386367022be139d26419c492336158c91fe52c8823204e299be598e9847d8e99d567fab24f93a33968d6762e0688cc"}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x8, 0x81, @device_b, 0x5, 0xdd, 0x200}}, @challenge={0x10, 0x1, 0x10}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x190, 0x2a, [@perr={0x84, 0x108, {0x49, 0x10, [@not_ext={{}, @device_b, 0x3, "", 0x13}, @ext={{}, @broadcast, 0x5b, @device_a, 0x1f}, @ext={{}, @broadcast, 0x3ff, @device_b, 0x40}, @ext={{}, @device_b, 0x4, @device_b, 0x14}, @ext={{}, @device_a, 0x6, @broadcast, 0x2f}, @ext={{}, @device_a, 0x6, @broadcast, 0x40}, @ext={{}, @device_a, 0xfffffb01, @broadcast, 0x21}, @not_ext={{}, @device_a, 0x7ff, "", 0x3c}, @not_ext={{}, @device_a, 0x100, "", 0x38}, @ext={{}, @device_b, 0x6, @device_b, 0x14}, @not_ext={{}, @device_a, 0x8, "", 0x38}, @not_ext={{}, @device_b, 0x5, "", 0x8}, @not_ext={{}, @device_b, 0x100, "", 0x1c}, @ext={{}, @device_b, 0x8, @device_a, 0x2e}, @ext={{}, @broadcast, 0x8, @device_a, 0x23}, @not_ext={{}, @device_a, 0x9, "", 0x22}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6}, @tim={0x5, 0x4d, {0x9, 0xa4, 0xcf, "d3ca8735895ac7c93674c88e934298fbac9a3b46f64e80237f8de88fc38b80ecd2374b72521aa82ceba05f1cfed1e2fe620f780dcd495d562919dbf366f79370fb7c7f4b80e5f0ec1f99"}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x7, 0x3}}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x5, 0x0, 0x7fff, 0x2}}, @challenge={0x10, 0x1, 0xa6}, @measure_req={0x26, 0x5, {0x20, 0x9, 0x8, "67ae"}}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4c080}, 0x4841) 00:43:53 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) (async) 00:43:53 executing program 2: semget(0x3, 0x1, 0x0) 00:43:53 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x16}, @chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdf}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x88050) (async) semget(0x3, 0x600, 0x0) 00:43:53 executing program 4: semget(0x3, 0x0, 0x41) semget(0x3, 0x0, 0x41) (async) 00:43:53 executing program 5: syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="3b71072c59ad44177e4784ca606fc725fb378e8126796cf8", 0x0, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) getpgrp(0xffffffffffffffff) 00:43:53 executing program 2: semget(0x3, 0x1, 0x0) 00:43:53 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x16}, @chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdf}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x88050) (async) semget(0x3, 0x600, 0x0) [ 2570.510641][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:53 executing program 5: syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="3b71072c59ad44177e4784ca606fc725fb378e8126796cf8", 0x0, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) getpgrp(0xffffffffffffffff) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="3b71072c59ad44177e4784ca606fc725fb378e8126796cf8", 0x0, 0x18) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) getpgrp(0xffffffffffffffff) (async) 00:43:53 executing program 4: semget(0x3, 0x0, 0x41) 00:43:53 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000100)={0xa5, 0x73, 0x80000}, 0x20) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) (async) socketpair(0x1a, 0x800, 0x89c, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa7d, 0x57}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 00:43:53 executing program 2: semget(0x3, 0x1, 0x0) semget(0x3, 0x1, 0x0) (async) 00:43:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x40, r0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x84) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x340, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB="080001002bef4367"], 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001f7060504bc1d07e20179a3f2a04087ddf4d19fa5221a3458b33019b21db4ca69fae5adb88f1f29f8101467b9bf3d6c13b02734aa8c0acac9259fcaa3a58bd3835ecd946255bcc8bffc3f141fcb55b01f8206b4742633fb12064930b5f041b635a6ebd86eb0a11f839650d4b2395096789f67732860609e0362499c302c8c2cec8e2d0670594c93d022d02de72d5f08bd88926fec4de00208ba38372b12f8573b92e4cc99a12eeef6aca00df9ced5433004c5b02b1cb0f496708ac3266951ea9dc79e4ec017561", @ANYRES16=r6, @ANYBLOB="000229bd7000fbdbdf25760000000c0058002a000000000000000c0058002e000000000000000c0058004d000000000000000c00580035000000000000000c0058003c000000000000000c0058001f00000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x40) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x3b8, r8, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0xc1, 0x7f, @device_a, 0x6, @device_a, 0x6, 0x1, @broadcast, 0x20}}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='w'}, @NL80211_ATTR_IE={0xc, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x70, 0x81}}, @dsss={0x3, 0x1, 0xb8}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19b, 0x2a, [@dsss={0x3, 0x1, 0x24}, @perr={0x84, 0x102, {0xde, 0x10, [@not_ext={{}, @broadcast, 0x2, "", 0x26}, @not_ext={{}, @broadcast, 0x4, "", 0x3c}, @ext={{}, @device_a, 0x45e064f4, @device_b, 0x37}, @not_ext={{}, @device_b, 0x1, "", 0x21}, @ext={{}, @device_a, 0x0, @device_a, 0x35}, @not_ext={{}, @broadcast, 0x8001, "", 0x1e}, @not_ext={{}, @device_b, 0x2, "", 0x18}, @not_ext={{}, @broadcast, 0x7, "", 0x39}, @not_ext={{}, @device_a, 0x0, "", 0x30}, @ext={{}, @device_a, 0x7, @device_b, 0x34}, @ext={{}, @device_b, 0x4, @broadcast, 0x3d}, @ext={{}, @device_a, 0x400, @device_b, 0x11}, @ext={{}, @broadcast, 0x80000000, @device_a, 0x11}, @ext={{}, @device_b, 0x0, @broadcast, 0x1d}, @not_ext={{}, @device_a, 0x8, "", 0xa}, @ext={{}, @device_a, 0x2}]}}, @tim={0x5, 0x74, {0xae, 0xfb, 0x79, "1934aa7115bdb6f7374bb7b8568923186cbe1021aa951d0e8ed162e59057fc7f09de5e3640a3ed3187d894b456039bfb48e5830d76c01a1e6e9ea65c7a1d0e51f740386367022be139d26419c492336158c91fe52c8823204e299be598e9847d8e99d567fab24f93a33968d6762e0688cc"}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x8, 0x81, @device_b, 0x5, 0xdd, 0x200}}, @challenge={0x10, 0x1, 0x10}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x190, 0x2a, [@perr={0x84, 0x108, {0x49, 0x10, [@not_ext={{}, @device_b, 0x3, "", 0x13}, @ext={{}, @broadcast, 0x5b, @device_a, 0x1f}, @ext={{}, @broadcast, 0x3ff, @device_b, 0x40}, @ext={{}, @device_b, 0x4, @device_b, 0x14}, @ext={{}, @device_a, 0x6, @broadcast, 0x2f}, @ext={{}, @device_a, 0x6, @broadcast, 0x40}, @ext={{}, @device_a, 0xfffffb01, @broadcast, 0x21}, @not_ext={{}, @device_a, 0x7ff, "", 0x3c}, @not_ext={{}, @device_a, 0x100, "", 0x38}, @ext={{}, @device_b, 0x6, @device_b, 0x14}, @not_ext={{}, @device_a, 0x8, "", 0x38}, @not_ext={{}, @device_b, 0x5, "", 0x8}, @not_ext={{}, @device_b, 0x100, "", 0x1c}, @ext={{}, @device_b, 0x8, @device_a, 0x2e}, @ext={{}, @broadcast, 0x8, @device_a, 0x23}, @not_ext={{}, @device_a, 0x9, "", 0x22}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6}, @tim={0x5, 0x4d, {0x9, 0xa4, 0xcf, "d3ca8735895ac7c93674c88e934298fbac9a3b46f64e80237f8de88fc38b80ecd2374b72521aa82ceba05f1cfed1e2fe620f780dcd495d562919dbf366f79370fb7c7f4b80e5f0ec1f99"}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x7, 0x3}}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x5, 0x0, 0x7fff, 0x2}}, @challenge={0x10, 0x1, 0xa6}, @measure_req={0x26, 0x5, {0x20, 0x9, 0x8, "67ae"}}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4c080}, 0x4841) 00:43:53 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x76d, 0x2a}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x7f, 0xffff, 0x5, 0xf2}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x0, 0x0, {0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x970e5e, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000054}, 0x8080) r1 = semget(0x3, 0x600, 0x0) semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000000180)=""/140) 00:43:53 executing program 3: semop(0xffffffffffffffff, &(0x7f00000001c0)=[{0x3, 0x80}, {0x0, 0x795, 0x800}, {0x0, 0x76, 0x1000}, {0x9d5dca21ced7295e, 0x1, 0x800}, {0x0, 0x2}, {0x0, 0x1, 0x1000}, {0x3, 0x8, 0x1800}, {0x3, 0x5, 0x800}, {0x0, 0x7ff, 0x1800}], 0x9) prctl$PR_SET_PDEATHSIG(0x1, 0x2) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x404800, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000000100)={0x100004, 0x2}, 0x20) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0x2a, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4088040}, 0x20000841) [ 2570.787578][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2570.800596][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:53 executing program 5: syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="3b71072c59ad44177e4784ca606fc725fb378e8126796cf8", 0x0, 0x18) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) getpgrp(0xffffffffffffffff) 00:43:53 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x538, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x240}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000050) semget(0x3, 0x0, 0x0) 00:43:54 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000000)=0x7) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/77) 00:43:54 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4824}, 0x80) [ 2571.052295][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:54 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x538, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x240}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000050) semget(0x3, 0x0, 0x0) 00:43:54 executing program 3: semop(0xffffffffffffffff, &(0x7f00000001c0)=[{0x3, 0x80}, {0x0, 0x795, 0x800}, {0x0, 0x76, 0x1000}, {0x9d5dca21ced7295e, 0x1, 0x800}, {0x0, 0x2}, {0x0, 0x1, 0x1000}, {0x3, 0x8, 0x1800}, {0x3, 0x5, 0x800}, {0x0, 0x7ff, 0x1800}], 0x9) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x2) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x404800, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000000100)={0x100004, 0x2}, 0x20) (async) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0x2a, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4088040}, 0x20000841) 00:43:54 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0x4, 0x1, 0x9, 0x0, 0x1f, 0x36123, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x5800a, 0x4, 0x800, 0x5, 0xfffffffffffffffb, 0x2, 0x8, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffffff, 0x10, r0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x7) 00:43:54 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000000)=0x7) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/77) semget(0x3, 0x0, 0x0) (async) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000000)=0x7) (async) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/77) (async) 00:43:54 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x76d, 0x2a}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x7f, 0xffff, 0x5, 0xf2}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x0, 0x0, {0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x970e5e, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000054}, 0x8080) r1 = semget(0x3, 0x600, 0x0) semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000000180)=""/140) 00:43:54 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4824}, 0x80) 00:43:54 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x538, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x240}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000050) semget(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x538, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x240}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000050) (async) semget(0x3, 0x0, 0x0) (async) 00:43:54 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x76d, 0x2a}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x7f, 0xffff, 0x5, 0xf2}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x0, 0x0, {0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x970e5e, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000054}, 0x8080) r1 = semget(0x3, 0x600, 0x0) semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000000180)=""/140) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x76d, 0x2a}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x7f, 0xffff, 0x5, 0xf2}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x0, 0x0, {0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x970e5e, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000054}, 0x8080) (async) semget(0x3, 0x600, 0x0) (async) semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000000180)=""/140) (async) 00:43:54 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0x4, 0x1, 0x9, 0x0, 0x1f, 0x36123, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x5800a, 0x4, 0x800, 0x5, 0xfffffffffffffffb, 0x2, 0x8, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffffff, 0x10, r0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0x4, 0x1, 0x9, 0x0, 0x1f, 0x36123, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x5800a, 0x4, 0x800, 0x5, 0xfffffffffffffffb, 0x2, 0x8, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffffff, 0x10, r0, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x7) (async) 00:43:54 executing program 3: semop(0xffffffffffffffff, &(0x7f00000001c0)=[{0x3, 0x80}, {0x0, 0x795, 0x800}, {0x0, 0x76, 0x1000}, {0x9d5dca21ced7295e, 0x1, 0x800}, {0x0, 0x2}, {0x0, 0x1, 0x1000}, {0x3, 0x8, 0x1800}, {0x3, 0x5, 0x800}, {0x0, 0x7ff, 0x1800}], 0x9) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x2) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) (async, rerun: 32) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x404800, 0x0) (rerun: 32) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000000100)={0x100004, 0x2}, 0x20) (async, rerun: 64) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0x2a, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4088040}, 0x20000841) (rerun: 64) 00:43:54 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4824}, 0x80) 00:43:54 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000000)=0x7) (async) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/77) 00:43:54 executing program 4: semget(0x1, 0x3, 0x214) r0 = semget(0x1, 0x2, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000000)=""/134) 00:43:55 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) 00:43:55 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) semget(0x3, 0x600, 0x0) 00:43:55 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0x4, 0x1, 0x9, 0x0, 0x1f, 0x36123, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x5800a, 0x4, 0x800, 0x5, 0xfffffffffffffffb, 0x2, 0x8, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffffff, 0x10, r0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0x4, 0x1, 0x9, 0x0, 0x1f, 0x36123, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x5800a, 0x4, 0x800, 0x5, 0xfffffffffffffffb, 0x2, 0x8, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffffff, 0x10, r0, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x7) (async) 00:43:55 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x3b}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x158}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0xffff8001}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2229}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8008000}, 0x8000) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:43:55 executing program 2: semget(0x3, 0x3, 0x463) 00:43:55 executing program 2: semget(0x3, 0x3, 0x463) semget(0x3, 0x3, 0x463) (async) 00:43:55 executing program 4: semget(0x1, 0x3, 0x214) r0 = semget(0x1, 0x2, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000000)=""/134) semget(0x1, 0x3, 0x214) (async) semget(0x1, 0x2, 0x6) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000000)=""/134) (async) 00:43:55 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x3b}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x158}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0xffff8001}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2229}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8008000}, 0x8000) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:43:55 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) (async) 00:43:55 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) (async) semget(0x3, 0x600, 0x0) 00:43:55 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000080)={0x0}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000340)={r7, 0x0, r8, 0x9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r10, 0x3, 0xffffffffffffffff, 0x8001, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000340)={r2, 0x0, r3, 0x9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r2) 00:43:55 executing program 2: semget(0x3, 0x3, 0x463) semget(0x3, 0x3, 0x463) (async) [ 2572.638432][ T24] audit: type=1326 audit(1643417035.681:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19264 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81fceca059 code=0x0 00:43:55 executing program 4: semget(0x1, 0x3, 0x214) r0 = semget(0x1, 0x2, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000000)=""/134) semget(0x1, 0x3, 0x214) (async) semget(0x1, 0x2, 0x6) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000000)=""/134) (async) 00:43:55 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) (async) semget(0x3, 0x600, 0x0) [ 2572.759521][ T24] audit: type=1326 audit(1643417035.801:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19264 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81fceca059 code=0x0 00:43:55 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x3b}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x158}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0xffff8001}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2229}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8008000}, 0x8000) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x3b}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x158}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0xffff8001}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2229}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8008000}, 0x8000) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) 00:43:56 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) 00:43:56 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget(0x3, 0x0, 0x460) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000000)=""/4) 00:43:56 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000500)=""/103, 0x67}], 0x8, &(0x7f0000000780)=[{&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/195, 0xc3}], 0x2, 0x0) r1 = semget(0x3, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000000)=""/69) 00:43:56 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000000)=""/40) 00:43:56 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_vp702x', 0x121200, 0xa1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair(0x2a, 0xa, 0x10001, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) bind$phonet(r0, &(0x7f0000000200)={0x23, 0x0, 0x33, 0x7f}, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}}, 0xc5) mount_setattr(r1, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x3, 0x40000, {r0}}, 0x20) 00:43:56 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop7', 0x0, 0x0) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:43:56 executing program 2: semget(0x3, 0x0, 0x0) (async, rerun: 32) r0 = semget(0x3, 0x0, 0x460) (rerun: 32) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000000)=""/4) 00:43:56 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000080)={0x0}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000340)={r7, 0x0, r8, 0x9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r10, 0x3, 0xffffffffffffffff, 0x8001, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000340)={r2, 0x0, r3, 0x9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x7) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000080)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000340)={r7, 0x0, r8, 0x9, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000140)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r10, 0x3, 0xffffffffffffffff, 0x8001, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000340)={r2, 0x0, r3, 0x9, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r2) (async) 00:43:56 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000500)=""/103, 0x67}], 0x8, &(0x7f0000000780)=[{&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/195, 0xc3}], 0x2, 0x0) r1 = semget(0x3, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000000)=""/69) 00:43:56 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_vp702x', 0x121200, 0xa1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair(0x2a, 0xa, 0x10001, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) bind$phonet(r0, &(0x7f0000000200)={0x23, 0x0, 0x33, 0x7f}, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}}, 0xc5) mount_setattr(r1, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x3, 0x40000, {r0}}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_vp702x', 0x121200, 0xa1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) socketpair(0x2a, 0xa, 0x10001, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) (async) bind$phonet(r0, &(0x7f0000000200)={0x23, 0x0, 0x33, 0x7f}, 0x10) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}}, 0xc5) (async) mount_setattr(r1, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x3, 0x40000, {r0}}, 0x20) (async) 00:43:56 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000000)=""/40) semget(0x3, 0x600, 0x0) (async) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000000)=""/40) (async) 00:43:56 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop7', 0x0, 0x0) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) [ 2573.751540][ T24] audit: type=1326 audit(1643417036.791:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19316 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81fceca059 code=0x0 00:43:56 executing program 2: semget(0x3, 0x0, 0x0) (async) r0 = semget(0x3, 0x0, 0x460) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000000)=""/4) [ 2573.855472][ T24] audit: type=1326 audit(1643417036.891:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19316 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81fceca059 code=0x0 00:43:57 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000500)=""/103, 0x67}], 0x8, &(0x7f0000000780)=[{&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/195, 0xc3}], 0x2, 0x0) r1 = semget(0x3, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000000)=""/69) getpid() (async) process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000500)=""/103, 0x67}], 0x8, &(0x7f0000000780)=[{&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/195, 0xc3}], 0x2, 0x0) (async) semget(0x3, 0x0, 0x0) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000000)=""/69) (async) 00:43:57 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000000)=""/40) 00:43:57 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop7', 0x0, 0x0) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop7', 0x0, 0x0) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) 00:43:57 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_vp702x', 0x121200, 0xa1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair(0x2a, 0xa, 0x10001, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) bind$phonet(r0, &(0x7f0000000200)={0x23, 0x0, 0x33, 0x7f}, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}}, 0xc5) mount_setattr(r1, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x3, 0x40000, {r0}}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_vp702x', 0x121200, 0xa1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) socketpair(0x2a, 0xa, 0x10001, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) (async) bind$phonet(r0, &(0x7f0000000200)={0x23, 0x0, 0x33, 0x7f}, 0x10) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}}, 0xc5) (async) mount_setattr(r1, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x3, 0x40000, {r0}}, 0x20) (async) 00:43:57 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000080)={0x0}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000340)={r7, 0x0, r8, 0x9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r10, 0x3, 0xffffffffffffffff, 0x8001, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000340)={r2, 0x0, r3, 0x9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x7) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000080)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000340)={r7, 0x0, r8, 0x9, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000140)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r10, 0x3, 0xffffffffffffffff, 0x8001, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000340)={r2, 0x0, r3, 0x9, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r2) (async) 00:43:57 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget(0x2, 0x4, 0x600) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x85, 0x0, 0x0]) 00:43:57 executing program 4: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = semget$private(0x0, 0x3, 0x241) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000040)=""/127) 00:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x40801) semget(0x2, 0x607, 0x246) 00:43:57 executing program 1: socketpair(0x5, 0x80000, 0x7ff, &(0x7f0000000040)) [ 2574.467940][ T24] audit: type=1326 audit(1643417037.511:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19368 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81fceca059 code=0x0 00:43:57 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3ff) [ 2574.587094][ T24] audit: type=1326 audit(1643417037.601:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19368 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81fceca059 code=0x0 00:43:57 executing program 2: semget(0x3, 0x0, 0x0) (async) r0 = semget(0x2, 0x4, 0x600) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x85, 0x0, 0x0]) 00:43:57 executing program 4: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = semget$private(0x0, 0x3, 0x241) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000040)=""/127) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) (async) semget$private(0x0, 0x3, 0x241) (async) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) (async) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000040)=""/127) (async) 00:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x40801) (async, rerun: 32) semget(0x2, 0x607, 0x246) (rerun: 32) 00:43:58 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181801, 0x0) 00:43:58 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget(0x2, 0x4, 0x600) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x85, 0x0, 0x0]) semget(0x3, 0x0, 0x0) (async) semget(0x2, 0x4, 0x600) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x85, 0x0, 0x0]) (async) 00:43:58 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3ff) 00:43:58 executing program 1: socketpair(0x5, 0x80000, 0x7ff, &(0x7f0000000040)) socketpair(0x5, 0x80000, 0x7ff, &(0x7f0000000040)) (async) [ 2575.166302][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:58 executing program 4: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = semget$private(0x0, 0x3, 0x241) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000040)=""/127) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) (async) semget$private(0x0, 0x3, 0x241) (async) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) (async) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000040)=""/127) (async) 00:43:58 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x19) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181801, 0x0) 00:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x40801) semget(0x2, 0x607, 0x246) 00:43:58 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3ff) 00:43:58 executing program 2: r0 = semget(0x3, 0x0, 0x241) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/160) r1 = semget$private(0x0, 0x1, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000000100)=""/143) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = semget$private(0x0, 0x0, 0x4) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f00000001c0)=""/158) semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f00000000c0)=""/3) [ 2575.450339][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:58 executing program 4: r0 = semget$private(0x0, 0x4, 0x2) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000000)=""/242) r1 = semget(0x2, 0x0, 0x0) semget$private(0x0, 0x2, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/4096) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000001100)=""/49) semctl$IPC_RMID(r2, 0x0, 0x0) 00:43:58 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x19) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181801, 0x0) 00:43:58 executing program 2: r0 = semget(0x3, 0x0, 0x241) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/160) (async) r1 = semget$private(0x0, 0x1, 0x0) (async) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000000100)=""/143) (async) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = semget$private(0x0, 0x0, 0x4) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f00000001c0)=""/158) semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f00000000c0)=""/3) 00:43:58 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0xf4240) semget(0x3, 0x600, 0xa0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) 00:43:58 executing program 1: socketpair(0x5, 0x80000, 0x7ff, &(0x7f0000000040)) 00:43:58 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x1c0000}, 0x20) 00:43:59 executing program 4: r0 = semget$private(0x0, 0x4, 0x2) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000000)=""/242) r1 = semget(0x2, 0x0, 0x0) semget$private(0x0, 0x2, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/4096) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000001100)=""/49) semctl$IPC_RMID(r2, 0x0, 0x0) semget$private(0x0, 0x4, 0x2) (async) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000000)=""/242) (async) semget(0x2, 0x0, 0x0) (async) semget$private(0x0, 0x2, 0x0) (async) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/4096) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000001100)=""/49) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) [ 2576.000346][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:43:59 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 00:43:59 executing program 2: r0 = semget(0x3, 0x0, 0x241) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/160) r1 = semget$private(0x0, 0x1, 0x0) (async) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000000100)=""/143) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) r3 = semget$private(0x0, 0x0, 0x4) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f00000001c0)=""/158) (async) semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f00000000c0)=""/3) 00:43:59 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0xf4240) (async, rerun: 32) semget(0x3, 0x600, 0xa0) (rerun: 32) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) 00:43:59 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="045992be11a6ae90569ea25629e9b05ad0cd494e5eaf0408474bfacf6b2cabe3d89ab715ff26859d3ac1bf50b735f4eee647d2d75164dcf130172993e7d831c928c03a46d94372e59459d42d4cc9746503ed5a97c08672fb5a0a850d2da41b90bb75f6c49c82303c425c640937d3d2830d28ba62b16a843dbe58a2a75bb49a530d8719193426cf764388860930f8ecdde214a7f68a441d033488560bcc2c08c2f96dddebf3515b621741e3837874ebf334d737d29892808a30925b451ee0598723d0e7d250286521c9575c551febe251c6cba6bc2a472789e0d3f9f5d3a032712c450babb1475ca4e6cc97480629576ba6c4d95d9ff5daa49a3c25a2091d43cdcb99a6f91af870f11671e0a15622990246ecb374b0cc232e01863985a3b998a5e1c23153e8b78b931790e419d2384de120be6012f1"], 0x7) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) 00:43:59 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x1c0000}, 0x20) 00:43:59 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x40, 0x8, 0x9}, 0x10) 00:43:59 executing program 4: r0 = semget$private(0x0, 0x4, 0x2) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000000)=""/242) r1 = semget(0x2, 0x0, 0x0) semget$private(0x0, 0x2, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/4096) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000001100)=""/49) semctl$IPC_RMID(r2, 0x0, 0x0) semget$private(0x0, 0x4, 0x2) (async) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000000)=""/242) (async) semget(0x2, 0x0, 0x0) (async) semget$private(0x0, 0x2, 0x0) (async) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/4096) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000001100)=""/49) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) 00:43:59 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0xf4240) (async) semget(0x3, 0x600, 0xa0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) 00:43:59 executing program 2: r0 = semget(0x3, 0x0, 0x80) semctl$IPC_RMID(r0, 0x0, 0x0) 00:43:59 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="045992be11a6ae90569ea25629e9b05ad0cd494e5eaf0408474bfacf6b2cabe3d89ab715ff26859d3ac1bf50b735f4eee647d2d75164dcf130172993e7d831c928c03a46d94372e59459d42d4cc9746503ed5a97c08672fb5a0a850d2da41b90bb75f6c49c82303c425c640937d3d2830d28ba62b16a843dbe58a2a75bb49a530d8719193426cf764388860930f8ecdde214a7f68a441d033488560bcc2c08c2f96dddebf3515b621741e3837874ebf334d737d29892808a30925b451ee0598723d0e7d250286521c9575c551febe251c6cba6bc2a472789e0d3f9f5d3a032712c450babb1475ca4e6cc97480629576ba6c4d95d9ff5daa49a3c25a2091d43cdcb99a6f91af870f11671e0a15622990246ecb374b0cc232e01863985a3b998a5e1c23153e8b78b931790e419d2384de120be6012f1"], 0x7) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 00:43:59 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x1c0000}, 0x20) 00:44:00 executing program 2: r0 = semget(0x3, 0x0, 0x80) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:00 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x40, 0x8, 0x9}, 0x10) 00:44:00 executing program 4: r0 = semget(0x3, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/45) 00:44:00 executing program 0: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="2ff1d84b03e5fb5ca438345b4c1781ce452b61480d167f1bd1073eee2cb202ebfe0faa6e260d8aadef70a7fc6e4eeef129e3811256bfafdda842aead04a8114e990dee6feaabb84fc966794ea9cfef14dbfe14f648988c94af87b79fe93ddf36b9ff2419bf32df3910bf11eb66e3b7bad46078cd2cdfc777cbeb75227c146e80b84442fa09f111cb0edb84f0f4138c8078db8574041e0ec20cbd330a3b02fcf6b6107289475b25973fb38b52b28904f6adc79b2f48b63460e2c4e0b36a6fa9ab380cc6362c", 0xc5, 0xb36, &(0x7f0000000140)) 00:44:00 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f00000002c0)={0x2f}, 0xffffffffffffff4f) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c041}, 0x2000c010) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002abd709e1edbdf254b0000002b6104d8", @ANYRES32=r3, @ANYBLOB="0400ff000600eb000100000024002c8008000000020000000800000002000000080000000800000008000000740000000400ec001c002c800800000006000000080000006694000008000000020000000800dc0008000000040087000600980010050000"], 0x80}, 0x1, 0x0, 0x0, 0x20c3}, 0x801) socketpair(0x26, 0xa, 0x3, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1e5}, @device_b, @random="36594c49e4b6"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @from_mac, {0xf, 0x5}}, @tdls_chsw_resp={0xc, 0x6, {0x50, {0x65, 0x12, {@random="43583a7bcf6c", @broadcast, @device_b}}, {0x68, 0x4, {0x72, 0x8000}}}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x20}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 00:44:00 executing program 2: r0 = semget(0x3, 0x0, 0x80) semctl$IPC_RMID(r0, 0x0, 0x0) semget(0x3, 0x0, 0x80) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) 00:44:00 executing program 4: r0 = semget(0x3, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/45) 00:44:00 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0480509f9f0f3f408bc0a53b77825995155929d7657dec366f88c98a109c4518f63e9157a4f157e932568ad6a0643c48342d04afe820a08849bc35bc3dec9aedfec69e154e9202d322703b8564a95424c1c9707175bfec16b85d1f35b291b3d2398092ee"], 0x7) 00:44:00 executing program 0: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="2ff1d84b03e5fb5ca438345b4c1781ce452b61480d167f1bd1073eee2cb202ebfe0faa6e260d8aadef70a7fc6e4eeef129e3811256bfafdda842aead04a8114e990dee6feaabb84fc966794ea9cfef14dbfe14f648988c94af87b79fe93ddf36b9ff2419bf32df3910bf11eb66e3b7bad46078cd2cdfc777cbeb75227c146e80b84442fa09f111cb0edb84f0f4138c8078db8574041e0ec20cbd330a3b02fcf6b6107289475b25973fb38b52b28904f6adc79b2f48b63460e2c4e0b36a6fa9ab380cc6362c", 0xc5, 0xb36, &(0x7f0000000140)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="2ff1d84b03e5fb5ca438345b4c1781ce452b61480d167f1bd1073eee2cb202ebfe0faa6e260d8aadef70a7fc6e4eeef129e3811256bfafdda842aead04a8114e990dee6feaabb84fc966794ea9cfef14dbfe14f648988c94af87b79fe93ddf36b9ff2419bf32df3910bf11eb66e3b7bad46078cd2cdfc777cbeb75227c146e80b84442fa09f111cb0edb84f0f4138c8078db8574041e0ec20cbd330a3b02fcf6b6107289475b25973fb38b52b28904f6adc79b2f48b63460e2c4e0b36a6fa9ab380cc6362c", 0xc5, 0xb36, &(0x7f0000000140)) (async) 00:44:00 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x40, 0x8, 0x9}, 0x10) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x40, 0x8, 0x9}, 0x10) (async) 00:44:00 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_INFO(r0, 0x9, 0x13, &(0x7f0000000040)=""/169) semget(0x0, 0x2, 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x3f, 0x7, 0x101, 0x68a, 0x6]) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000100)=""/55) 00:44:00 executing program 0: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="2ff1d84b03e5fb5ca438345b4c1781ce452b61480d167f1bd1073eee2cb202ebfe0faa6e260d8aadef70a7fc6e4eeef129e3811256bfafdda842aead04a8114e990dee6feaabb84fc966794ea9cfef14dbfe14f648988c94af87b79fe93ddf36b9ff2419bf32df3910bf11eb66e3b7bad46078cd2cdfc777cbeb75227c146e80b84442fa09f111cb0edb84f0f4138c8078db8574041e0ec20cbd330a3b02fcf6b6107289475b25973fb38b52b28904f6adc79b2f48b63460e2c4e0b36a6fa9ab380cc6362c", 0xc5, 0xb36, &(0x7f0000000140)) 00:44:00 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f00000002c0)={0x2f}, 0xffffffffffffff4f) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c041}, 0x2000c010) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002abd709e1edbdf254b0000002b6104d8", @ANYRES32=r3, @ANYBLOB="0400ff000600eb000100000024002c8008000000020000000800000002000000080000000800000008000000740000000400ec001c002c800800000006000000080000006694000008000000020000000800dc0008000000040087000600980010050000"], 0x80}, 0x1, 0x0, 0x0, 0x20c3}, 0x801) socketpair(0x26, 0xa, 0x3, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1e5}, @device_b, @random="36594c49e4b6"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @from_mac, {0xf, 0x5}}, @tdls_chsw_resp={0xc, 0x6, {0x50, {0x65, 0x12, {@random="43583a7bcf6c", @broadcast, @device_b}}, {0x68, 0x4, {0x72, 0x8000}}}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x20}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f00000002c0)={0x2f}, 0xffffffffffffff4f) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c041}, 0x2000c010) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002abd709e1edbdf254b0000002b6104d8", @ANYRES32=r3, @ANYBLOB="0400ff000600eb000100000024002c8008000000020000000800000002000000080000000800000008000000740000000400ec001c002c800800000006000000080000006694000008000000020000000800dc0008000000040087000600980010050000"], 0x80}, 0x1, 0x0, 0x0, 0x20c3}, 0x801) (async) socketpair(0x26, 0xa, 0x3, &(0x7f0000000400)) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1e5}, @device_b, @random="36594c49e4b6"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @from_mac, {0xf, 0x5}}, @tdls_chsw_resp={0xc, 0x6, {0x50, {0x65, 0x12, {@random="43583a7bcf6c", @broadcast, @device_b}}, {0x68, 0x4, {0x72, 0x8000}}}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x20}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) 00:44:00 executing program 4: r0 = semget(0x3, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/45) semget(0x3, 0x0, 0x0) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/45) (async) 00:44:00 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0480509f9f0f3f408bc0a53b77825995155929d7657dec366f88c98a109c4518f63e9157a4f157e932568ad6a0643c48342d04afe820a08849bc35bc3dec9aedfec69e154e9202d322703b8564a95424c1c9707175bfec16b85d1f35b291b3d2398092ee"], 0x7) 00:44:00 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_INFO(r0, 0x9, 0x13, &(0x7f0000000040)=""/169) semget(0x0, 0x2, 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x3f, 0x7, 0x101, 0x68a, 0x6]) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000100)=""/55) semget(0x3, 0x0, 0x0) (async) semctl$SEM_INFO(r0, 0x9, 0x13, &(0x7f0000000040)=""/169) (async) semget(0x0, 0x2, 0x4) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x3f, 0x7, 0x101, 0x68a, 0x6]) (async) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000100)=""/55) (async) 00:44:00 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc}, 0x0) 00:44:01 executing program 0: semget(0x3, 0x600, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semget$private(0x0, 0x2, 0x3) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/169) r1 = semget$private(0x0, 0x3, 0x80) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x6, 0x800}, {0x0, 0x5, 0x1800}, {0x4, 0x100, 0x1000}], 0x3, &(0x7f0000000040)) 00:44:01 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0480509f9f0f3f408bc0a53b77825995155929d7657dec366f88c98a109c4518f63e9157a4f157e932568ad6a0643c48342d04afe820a08849bc35bc3dec9aedfec69e154e9202d322703b8564a95424c1c9707175bfec16b85d1f35b291b3d2398092ee"], 0x7) 00:44:01 executing program 4: r0 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r0}], 0xa5, 0x0, &(0x7f0000000040)="d1220f44d6f338dddb004f546fb82e4be494b70569863ce676a935a17bd1583f0f6a522b19ea0776bbc7005b61ad47bb3963c487d2e9772fe1dddc584e582dce05e02ebce65d146d9d6285ef77a58461a1d8a9a616c2b18dc19ad63b6f182f88a0d29c7ed34ef2d3c027086a6555c033946867402d7f485a5d16f022319cbe1b55ec3fac43df007d3dfa4fe275d37b214c7f73221f8333b8ef1cfb448d2f2fac58f26c78cd"}) semget(0x3, 0x0, 0x0) 00:44:01 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_INFO(r0, 0x9, 0x13, &(0x7f0000000040)=""/169) (async) semget(0x0, 0x2, 0x4) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x3f, 0x7, 0x101, 0x68a, 0x6]) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000100)=""/55) 00:44:01 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc}, 0x0) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc}, 0x0) (async) 00:44:01 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f00000002c0)={0x2f}, 0xffffffffffffff4f) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c041}, 0x2000c010) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002abd709e1edbdf254b0000002b6104d8", @ANYRES32=r3, @ANYBLOB="0400ff000600eb000100000024002c8008000000020000000800000002000000080000000800000008000000740000000400ec001c002c800800000006000000080000006694000008000000020000000800dc0008000000040087000600980010050000"], 0x80}, 0x1, 0x0, 0x0, 0x20c3}, 0x801) socketpair(0x26, 0xa, 0x3, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1e5}, @device_b, @random="36594c49e4b6"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @from_mac, {0xf, 0x5}}, @tdls_chsw_resp={0xc, 0x6, {0x50, {0x65, 0x12, {@random="43583a7bcf6c", @broadcast, @device_b}}, {0x68, 0x4, {0x72, 0x8000}}}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x20}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 00:44:01 executing program 4: r0 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r0}], 0xa5, 0x0, &(0x7f0000000040)="d1220f44d6f338dddb004f546fb82e4be494b70569863ce676a935a17bd1583f0f6a522b19ea0776bbc7005b61ad47bb3963c487d2e9772fe1dddc584e582dce05e02ebce65d146d9d6285ef77a58461a1d8a9a616c2b18dc19ad63b6f182f88a0d29c7ed34ef2d3c027086a6555c033946867402d7f485a5d16f022319cbe1b55ec3fac43df007d3dfa4fe275d37b214c7f73221f8333b8ef1cfb448d2f2fac58f26c78cd"}) semget(0x3, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r0}], 0xa5, 0x0, &(0x7f0000000040)="d1220f44d6f338dddb004f546fb82e4be494b70569863ce676a935a17bd1583f0f6a522b19ea0776bbc7005b61ad47bb3963c487d2e9772fe1dddc584e582dce05e02ebce65d146d9d6285ef77a58461a1d8a9a616c2b18dc19ad63b6f182f88a0d29c7ed34ef2d3c027086a6555c033946867402d7f485a5d16f022319cbe1b55ec3fac43df007d3dfa4fe275d37b214c7f73221f8333b8ef1cfb448d2f2fac58f26c78cd"}) (async) semget(0x3, 0x0, 0x0) (async) 00:44:01 executing program 0: semget(0x3, 0x600, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semget$private(0x0, 0x2, 0x3) (async) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/169) (async) r1 = semget$private(0x0, 0x3, 0x80) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x6, 0x800}, {0x0, 0x5, 0x1800}, {0x4, 0x100, 0x1000}], 0x3, &(0x7f0000000040)) 00:44:01 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x400800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x10001, 0x3, 0x1, 0x1}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1101, 0x3}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0xffffff3a) 00:44:01 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f0000000040)=""/128) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000000)=""/49) 00:44:01 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc}, 0x0) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc}, 0x0) (async) 00:44:01 executing program 4: r0 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r0}], 0xa5, 0x0, &(0x7f0000000040)="d1220f44d6f338dddb004f546fb82e4be494b70569863ce676a935a17bd1583f0f6a522b19ea0776bbc7005b61ad47bb3963c487d2e9772fe1dddc584e582dce05e02ebce65d146d9d6285ef77a58461a1d8a9a616c2b18dc19ad63b6f182f88a0d29c7ed34ef2d3c027086a6555c033946867402d7f485a5d16f022319cbe1b55ec3fac43df007d3dfa4fe275d37b214c7f73221f8333b8ef1cfb448d2f2fac58f26c78cd"}) (async) semget(0x3, 0x0, 0x0) 00:44:01 executing program 0: semget(0x3, 0x600, 0x0) (async) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semget$private(0x0, 0x2, 0x3) (async) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/169) (async) r1 = semget$private(0x0, 0x3, 0x80) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x6, 0x800}, {0x0, 0x5, 0x1800}, {0x4, 0x100, 0x1000}], 0x3, &(0x7f0000000040)) 00:44:01 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x400800) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) write$rfkill(r1, &(0x7f0000000080)={0x10001, 0x3, 0x1, 0x1}, 0x8) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1101, 0x3}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0xffffff3a) 00:44:01 executing program 2: semget(0x3, 0x0, 0x0) (async) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) (async) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f0000000040)=""/128) (async) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000000)=""/49) 00:44:01 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x6360908f89aa5910}, 0x10) 00:44:02 executing program 0: r0 = semget(0x3, 0x0, 0x44) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000040)=""/25) semop(r0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}, {0x4, 0x1}, {0x0, 0x0, 0x800}, {0x2, 0x7929, 0x1000}, {0x1, 0x57cd, 0x1800}], 0x5) semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000080)=""/57) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f00000000c0)=0x2) semget(0x3, 0x600, 0x0) 00:44:02 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2ad66b5c", @ANYRES16=r1, @ANYBLOB="000328bd7000fbdbdf253d00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:02 executing program 4: r0 = semget(0x2, 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x3, 0xe, 0x3}, 0x10) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000000)=0x401) 00:44:02 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f0000000040)=""/128) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000000)=""/49) 00:44:02 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x400800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x10001, 0x3, 0x1, 0x1}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1101, 0x3}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0xffffff3a) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x400800) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) write$rfkill(r1, &(0x7f0000000080)={0x10001, 0x3, 0x1, 0x1}, 0x8) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1101, 0x3}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0xffffff3a) (async) 00:44:02 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x6360908f89aa5910}, 0x10) 00:44:02 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000100)=""/153) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/221) 00:44:02 executing program 0: r0 = semget(0x3, 0x0, 0x44) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000040)=""/25) semop(r0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}, {0x4, 0x1}, {0x0, 0x0, 0x800}, {0x2, 0x7929, 0x1000}, {0x1, 0x57cd, 0x1800}], 0x5) semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000080)=""/57) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f00000000c0)=0x2) semget(0x3, 0x600, 0x0) semget(0x3, 0x0, 0x44) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000040)=""/25) (async) semop(r0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}, {0x4, 0x1}, {0x0, 0x0, 0x800}, {0x2, 0x7929, 0x1000}, {0x1, 0x57cd, 0x1800}], 0x5) (async) semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000080)=""/57) (async) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f00000000c0)=0x2) (async) semget(0x3, 0x600, 0x0) (async) 00:44:02 executing program 4: r0 = semget(0x2, 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x3, 0xe, 0x3}, 0x10) (async) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000000)=0x401) 00:44:02 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2ad66b5c", @ANYRES16=r1, @ANYBLOB="000328bd7000fbdbdf253d00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:02 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x5051c2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="83de8ebd8afbb01ef0000000"], 0x7) 00:44:02 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x6360908f89aa5910}, 0x10) 00:44:02 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000100)=""/153) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/221) semget(0x3, 0x0, 0x0) (async) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000100)=""/153) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/221) (async) 00:44:02 executing program 0: r0 = semget(0x3, 0x0, 0x44) (async, rerun: 64) r1 = semget$private(0x0, 0x1, 0x0) (rerun: 64) semctl$IPC_RMID(r1, 0x0, 0x0) (async, rerun: 64) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000040)=""/25) (async, rerun: 64) semop(r0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}, {0x4, 0x1}, {0x0, 0x0, 0x800}, {0x2, 0x7929, 0x1000}, {0x1, 0x57cd, 0x1800}], 0x5) (async) semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000080)=""/57) (async) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f00000000c0)=0x2) (async) semget(0x3, 0x600, 0x0) 00:44:02 executing program 4: r0 = semget(0x2, 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x3, 0xe, 0x3}, 0x10) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000000)=0x401) semget(0x2, 0x0, 0x0) (async) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x3, 0xe, 0x3}, 0x10) (async) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000000)=0x401) (async) 00:44:02 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x5051c2, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="83de8ebd8afbb01ef0000000"], 0x7) 00:44:02 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000100)=""/153) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/221) semget(0x3, 0x0, 0x0) (async) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000100)=""/153) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/221) (async) 00:44:02 executing program 3: rt_sigreturn() mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:03 executing program 0: semget(0x0, 0x4, 0x320) 00:44:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/orangefs', 0x90600, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) semget(0x3, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) recvfrom$phonet(r1, &(0x7f0000000080)=""/176, 0xb0, 0x1, &(0x7f0000000140)={0x23, 0x7, 0x80, 0x14}, 0x10) 00:44:03 executing program 2: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) semget(0x3, 0x0, 0x0) 00:44:03 executing program 3: rt_sigreturn() (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/orangefs', 0x90600, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) semget(0x3, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) recvfrom$phonet(r1, &(0x7f0000000080)=""/176, 0xb0, 0x1, &(0x7f0000000140)={0x23, 0x7, 0x80, 0x14}, 0x10) 00:44:03 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x5051c2, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="83de8ebd8afbb01ef0000000"], 0x7) 00:44:03 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2ad66b5c", @ANYRES16=r1, @ANYBLOB="000328bd7000fbdbdf253d00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00\b\x00]\x00\x00\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:03 executing program 2: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) semget(0x3, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) (async) semget(0x3, 0x0, 0x0) (async) 00:44:03 executing program 0: semget(0x0, 0x4, 0x320) 00:44:03 executing program 0: semget(0x0, 0x4, 0x320) 00:44:03 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) mq_open(&(0x7f0000000040), 0x1, 0x0, &(0x7f0000000040)={0xb, 0xfffffffffffffff7, 0x7, 0x200000}) 00:44:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/orangefs', 0x90600, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) semget(0x3, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) recvfrom$phonet(r1, &(0x7f0000000080)=""/176, 0xb0, 0x1, &(0x7f0000000140)={0x23, 0x7, 0x80, 0x14}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/orangefs', 0x90600, 0x20) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) semget(0x3, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) recvfrom$phonet(r1, &(0x7f0000000080)=""/176, 0xb0, 0x1, &(0x7f0000000140)={0x23, 0x7, 0x80, 0x14}, 0x10) (async) 00:44:03 executing program 3: rt_sigreturn() (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:04 executing program 2: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) semget(0x3, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) (async) semget(0x3, 0x0, 0x0) (async) 00:44:04 executing program 1: mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) [ 2580.972180][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:04 executing program 0: semget(0x2, 0x600, 0x461) 00:44:04 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) mq_open(&(0x7f0000000040), 0x1, 0x0, &(0x7f0000000040)={0xb, 0xfffffffffffffff7, 0x7, 0x200000}) 00:44:04 executing program 2: r0 = semget(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/module/snd_seq_dummy', 0x10801, 0x0) semctl$GETNCNT(r0, 0x7, 0xe, &(0x7f0000000000)=""/154) semget(0x2, 0x3, 0x454) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x6, 0x1000}, {0x1, 0x0, 0x1000}, {0x1, 0x8000, 0x800}, {0x0, 0x6, 0x1000}, {0x0, 0x8000, 0x1000}, {0x4, 0x44, 0x800}, {0x1, 0xfbff, 0x1000}, {0x3, 0x9, 0x1000}], 0x8, &(0x7f0000000140)={r1, r2+60000000}) 00:44:04 executing program 4: semget(0x3, 0x0, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x20b5c7fd) 00:44:04 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6008000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x10}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7fff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x100}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffff107d}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x30}, {0x16, 0x1}, {0x2, 0x1}, {0xb}, {0x52, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x29, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x9}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf562}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf9}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x12}, {0x36, 0x1}, {0x3, 0x1}, {0xc}, {0xb, 0x1}, {0x6, 0x1}, {0x3}, {0x9, 0x1}, {0x3, 0x1}, {0x2}, {0x6}, {0x18}, {0x5, 0x1}, {0x36}, {0x2, 0x1}, {0x0, 0x1}, {0x1b, 0x1}, {0x12}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mount_setattr(r0, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000}, 0x20) 00:44:04 executing program 1: mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:04 executing program 0: semget(0x2, 0x600, 0x461) [ 2581.366467][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:04 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) mq_open(&(0x7f0000000040), 0x1, 0x0, &(0x7f0000000040)={0xb, 0xfffffffffffffff7, 0x7, 0x200000}) 00:44:04 executing program 2: r0 = semget(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/module/snd_seq_dummy', 0x10801, 0x0) (async) semctl$GETNCNT(r0, 0x7, 0xe, &(0x7f0000000000)=""/154) (async) semget(0x2, 0x3, 0x454) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x6, 0x1000}, {0x1, 0x0, 0x1000}, {0x1, 0x8000, 0x800}, {0x0, 0x6, 0x1000}, {0x0, 0x8000, 0x1000}, {0x4, 0x44, 0x800}, {0x1, 0xfbff, 0x1000}, {0x3, 0x9, 0x1000}], 0x8, &(0x7f0000000140)={r1, r2+60000000}) 00:44:04 executing program 4: semget(0x3, 0x0, 0x2) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x20b5c7fd) 00:44:04 executing program 1: mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) 00:44:04 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6008000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x10}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7fff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x100}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffff107d}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x30}, {0x16, 0x1}, {0x2, 0x1}, {0xb}, {0x52, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x29, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x9}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf562}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf9}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x12}, {0x36, 0x1}, {0x3, 0x1}, {0xc}, {0xb, 0x1}, {0x6, 0x1}, {0x3}, {0x9, 0x1}, {0x3, 0x1}, {0x2}, {0x6}, {0x18}, {0x5, 0x1}, {0x36}, {0x2, 0x1}, {0x0, 0x1}, {0x1b, 0x1}, {0x12}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mount_setattr(r0, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6008000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x10}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7fff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x100}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffff107d}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x30}, {0x16, 0x1}, {0x2, 0x1}, {0xb}, {0x52, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x29, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x9}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf562}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf9}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x12}, {0x36, 0x1}, {0x3, 0x1}, {0xc}, {0xb, 0x1}, {0x6, 0x1}, {0x3}, {0x9, 0x1}, {0x3, 0x1}, {0x2}, {0x6}, {0x18}, {0x5, 0x1}, {0x36}, {0x2, 0x1}, {0x0, 0x1}, {0x1b, 0x1}, {0x12}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) mount_setattr(r0, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000}, 0x20) (async) 00:44:04 executing program 0: semget(0x2, 0x600, 0x461) [ 2581.772698][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:04 executing program 2: r0 = semget(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/module/snd_seq_dummy', 0x10801, 0x0) (async) semctl$GETNCNT(r0, 0x7, 0xe, &(0x7f0000000000)=""/154) (async) semget(0x2, 0x3, 0x454) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x6, 0x1000}, {0x1, 0x0, 0x1000}, {0x1, 0x8000, 0x800}, {0x0, 0x6, 0x1000}, {0x0, 0x8000, 0x1000}, {0x4, 0x44, 0x800}, {0x1, 0xfbff, 0x1000}, {0x3, 0x9, 0x1000}], 0x8, &(0x7f0000000140)={r1, r2+60000000}) 00:44:05 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x33}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x8010) 00:44:05 executing program 0: r0 = semget(0x3, 0x600, 0x48e) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/4096) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000010c0)=""/34) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x4, 0x14, &(0x7f0000000000)=""/146) 00:44:05 executing program 4: semget(0x3, 0x0, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x20b5c7fd) semget(0x3, 0x0, 0x2) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x20b5c7fd) (async) 00:44:05 executing program 1: landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) [ 2582.135234][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:05 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6008000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x10}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7fff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x100}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffff107d}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x30}, {0x16, 0x1}, {0x2, 0x1}, {0xb}, {0x52, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x29, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x9}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf562}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf9}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x12}, {0x36, 0x1}, {0x3, 0x1}, {0xc}, {0xb, 0x1}, {0x6, 0x1}, {0x3}, {0x9, 0x1}, {0x3, 0x1}, {0x2}, {0x6}, {0x18}, {0x5, 0x1}, {0x36}, {0x2, 0x1}, {0x0, 0x1}, {0x1b, 0x1}, {0x12}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mount_setattr(r0, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x100000}, 0x20) 00:44:05 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50f97f00", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf2501000000080007000700000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x801) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x5c7, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x52}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = semget(0x0, 0x3, 0x432) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x52}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bd65aec83a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8ae5f56313"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xddd6aababc89ac93) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x43c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_TX_RATES={0x400, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x7}, {0x0, 0x4}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x4, 0x5}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x6}, {0x5, 0x3}, {0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x200, 0xb3, 0x5, 0x0, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x40, 0x1ff, 0x4, 0x3, 0x4, 0xe6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb0, 0x0, 0x0, 0x6, 0x8, 0xffff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x4, 0x5, 0x2, 0x36, 0x36, 0x2, 0x30, 0x1b, 0x9, 0x9, 0x18, 0x2, 0xc, 0x4]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x2}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0x2}, {0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {}, {0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1b95, 0x9, 0x8001, 0x72, 0x8, 0x7, 0xffc6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x3, 0x2, 0x9f, 0xfffb, 0x6, 0x37b, 0x2]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x9}, {0x1, 0x4}, {0x5, 0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x5, 0x4}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x4, 0x9}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x2}, {0x7, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x2}, {0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x4}, {0x2, 0x1}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x3, 0x3}, {0x5, 0x9}, {}, {0x0, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x2}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x56, 0x22, 0x20, 0x0, 0x8, 0x1, 0x7]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x5}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7f, 0x4, 0x401, 0x8, 0xf000, 0xbb, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x27, 0x3, 0x1b, 0x1b, 0x24, 0x36, 0x4d, 0x2, 0x48, 0x12, 0xb, 0x4, 0x60, 0x24, 0xb, 0x36, 0x18, 0x9, 0x18, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x78, 0x6, 0x6, 0x3, 0x3, 0x36, 0x18, 0x30, 0x18, 0x5, 0x1, 0x60, 0x6c, 0x60, 0x5, 0x2]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x4}, {0x7, 0x6}, {0x3}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x1c}, {0x7, 0xa}, {0x2, 0x3}, {0x2}, {0x5, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x1}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x1, 0x7}, {0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x2, 0x1}, {0x2, 0x2}, {0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x11}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0xa}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x400, 0x2, 0x0, 0x7, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x99, 0x1, 0x6, 0x2b3, 0x6, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x2995, 0x3ff, 0x40, 0x6bee, 0x3ff, 0x82]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x36, 0xc, 0x6, 0x12, 0x36, 0x36, 0xb, 0x6c, 0x18, 0x2, 0x6, 0x57, 0xc, 0x1, 0x16, 0x0, 0x5, 0x30, 0x16, 0x34, 0x18, 0x30, 0xc, 0x5, 0x36, 0x3, 0x3, 0x24, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x8}, {0x4, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x2}, {0x3, 0x7}, {0x7, 0x7}, {0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x6, 0xa}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x7}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x2}, {0x2}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x6}, {0x2, 0x9}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0xa}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x3}, {}, {0x3, 0x7}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x4, 0x3}, {0x6, 0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0xb, 0x2, 0xc, 0x12, 0x30, 0x16, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x0, 0x6c, 0x2, 0xb, 0x48, 0x6, 0x3, 0x30, 0x24, 0x6c, 0x4, 0xc, 0x4, 0x5, 0x1b, 0x48, 0xc, 0x2, 0x16]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x6}, {0x7, 0x4}, {0x6, 0x9}, {0x5, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x8}, {}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x1, 0x1}, {0x5, 0x6}, {0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0x11}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xfebf, 0x6, 0x1, 0x4, 0x81, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x215c, 0x7f, 0x9, 0x9a, 0x100, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xaa9}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 00:44:05 executing program 2: semget(0x3, 0x1, 0x0) r0 = semget$private(0x0, 0x0, 0x50c) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000000)=""/205) 00:44:05 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x33}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x8010) 00:44:05 executing program 0: r0 = semget(0x3, 0x600, 0x48e) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/4096) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000010c0)=""/34) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x4, 0x14, &(0x7f0000000000)=""/146) semget(0x3, 0x600, 0x48e) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/4096) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000010c0)=""/34) (async) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x4, 0x14, &(0x7f0000000000)=""/146) (async) 00:44:05 executing program 1: landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) [ 2582.510153][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:05 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50f97f00", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf2501000000080007000700000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x801) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x5c7, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x52}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = semget(0x0, 0x3, 0x432) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x52}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bd65aec83a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8ae5f56313"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xddd6aababc89ac93) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x43c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_TX_RATES={0x400, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x7}, {0x0, 0x4}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x4, 0x5}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x6}, {0x5, 0x3}, {0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x200, 0xb3, 0x5, 0x0, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x40, 0x1ff, 0x4, 0x3, 0x4, 0xe6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb0, 0x0, 0x0, 0x6, 0x8, 0xffff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x4, 0x5, 0x2, 0x36, 0x36, 0x2, 0x30, 0x1b, 0x9, 0x9, 0x18, 0x2, 0xc, 0x4]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x2}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0x2}, {0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {}, {0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1b95, 0x9, 0x8001, 0x72, 0x8, 0x7, 0xffc6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x3, 0x2, 0x9f, 0xfffb, 0x6, 0x37b, 0x2]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x9}, {0x1, 0x4}, {0x5, 0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x5, 0x4}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x4, 0x9}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x2}, {0x7, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x2}, {0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x4}, {0x2, 0x1}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x3, 0x3}, {0x5, 0x9}, {}, {0x0, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x2}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x56, 0x22, 0x20, 0x0, 0x8, 0x1, 0x7]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x5}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7f, 0x4, 0x401, 0x8, 0xf000, 0xbb, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x27, 0x3, 0x1b, 0x1b, 0x24, 0x36, 0x4d, 0x2, 0x48, 0x12, 0xb, 0x4, 0x60, 0x24, 0xb, 0x36, 0x18, 0x9, 0x18, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x78, 0x6, 0x6, 0x3, 0x3, 0x36, 0x18, 0x30, 0x18, 0x5, 0x1, 0x60, 0x6c, 0x60, 0x5, 0x2]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x4}, {0x7, 0x6}, {0x3}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x1c}, {0x7, 0xa}, {0x2, 0x3}, {0x2}, {0x5, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x1}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x1, 0x7}, {0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x2, 0x1}, {0x2, 0x2}, {0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x11}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0xa}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x400, 0x2, 0x0, 0x7, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x99, 0x1, 0x6, 0x2b3, 0x6, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x2995, 0x3ff, 0x40, 0x6bee, 0x3ff, 0x82]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x36, 0xc, 0x6, 0x12, 0x36, 0x36, 0xb, 0x6c, 0x18, 0x2, 0x6, 0x57, 0xc, 0x1, 0x16, 0x0, 0x5, 0x30, 0x16, 0x34, 0x18, 0x30, 0xc, 0x5, 0x36, 0x3, 0x3, 0x24, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x8}, {0x4, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x2}, {0x3, 0x7}, {0x7, 0x7}, {0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x6, 0xa}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x7}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x2}, {0x2}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x6}, {0x2, 0x9}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0xa}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x3}, {}, {0x3, 0x7}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x4, 0x3}, {0x6, 0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0xb, 0x2, 0xc, 0x12, 0x30, 0x16, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x0, 0x6c, 0x2, 0xb, 0x48, 0x6, 0x3, 0x30, 0x24, 0x6c, 0x4, 0xc, 0x4, 0x5, 0x1b, 0x48, 0xc, 0x2, 0x16]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x6}, {0x7, 0x4}, {0x6, 0x9}, {0x5, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x8}, {}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x1, 0x1}, {0x5, 0x6}, {0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0x11}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xfebf, 0x6, 0x1, 0x4, 0x81, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x215c, 0x7f, 0x9, 0x9a, 0x100, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xaa9}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 00:44:05 executing program 2: semget(0x3, 0x1, 0x0) r0 = semget$private(0x0, 0x0, 0x50c) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000000)=""/205) 00:44:05 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mount_setattr(r0, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x20000, {r2}}, 0x20) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000000)=0x3a25) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) read$msr(r3, &(0x7f0000000040)=""/108, 0x6c) 00:44:05 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x33}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x8010) 00:44:05 executing program 1: landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) 00:44:05 executing program 0: r0 = semget(0x3, 0x600, 0x48e) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/4096) (async) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000010c0)=""/34) (async) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x4, 0x14, &(0x7f0000000000)=""/146) 00:44:05 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50f97f00", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf2501000000080007000700000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x801) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x5c7, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x52}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = semget(0x0, 0x3, 0x432) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x52}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bd65aec83a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8ae5f56313"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xddd6aababc89ac93) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x43c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_TX_RATES={0x400, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x7}, {0x0, 0x4}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x4, 0x5}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x6}, {0x5, 0x3}, {0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x200, 0xb3, 0x5, 0x0, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x40, 0x1ff, 0x4, 0x3, 0x4, 0xe6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb0, 0x0, 0x0, 0x6, 0x8, 0xffff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x4, 0x5, 0x2, 0x36, 0x36, 0x2, 0x30, 0x1b, 0x9, 0x9, 0x18, 0x2, 0xc, 0x4]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x2}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0x2}, {0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {}, {0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1b95, 0x9, 0x8001, 0x72, 0x8, 0x7, 0xffc6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x3, 0x2, 0x9f, 0xfffb, 0x6, 0x37b, 0x2]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x9}, {0x1, 0x4}, {0x5, 0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x5, 0x4}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x4, 0x9}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x2}, {0x7, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x2}, {0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x4}, {0x2, 0x1}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x3, 0x3}, {0x5, 0x9}, {}, {0x0, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x2}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x56, 0x22, 0x20, 0x0, 0x8, 0x1, 0x7]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x5}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7f, 0x4, 0x401, 0x8, 0xf000, 0xbb, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x27, 0x3, 0x1b, 0x1b, 0x24, 0x36, 0x4d, 0x2, 0x48, 0x12, 0xb, 0x4, 0x60, 0x24, 0xb, 0x36, 0x18, 0x9, 0x18, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x78, 0x6, 0x6, 0x3, 0x3, 0x36, 0x18, 0x30, 0x18, 0x5, 0x1, 0x60, 0x6c, 0x60, 0x5, 0x2]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x4}, {0x7, 0x6}, {0x3}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x1c}, {0x7, 0xa}, {0x2, 0x3}, {0x2}, {0x5, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x1}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x1, 0x7}, {0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x2, 0x1}, {0x2, 0x2}, {0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x11}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0xa}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x400, 0x2, 0x0, 0x7, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x99, 0x1, 0x6, 0x2b3, 0x6, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x2995, 0x3ff, 0x40, 0x6bee, 0x3ff, 0x82]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x36, 0xc, 0x6, 0x12, 0x36, 0x36, 0xb, 0x6c, 0x18, 0x2, 0x6, 0x57, 0xc, 0x1, 0x16, 0x0, 0x5, 0x30, 0x16, 0x34, 0x18, 0x30, 0xc, 0x5, 0x36, 0x3, 0x3, 0x24, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x8}, {0x4, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x2}, {0x3, 0x7}, {0x7, 0x7}, {0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x6, 0xa}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x7}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x2}, {0x2}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x6}, {0x2, 0x9}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0xa}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x3}, {}, {0x3, 0x7}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x4, 0x3}, {0x6, 0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0xb, 0x2, 0xc, 0x12, 0x30, 0x16, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x0, 0x6c, 0x2, 0xb, 0x48, 0x6, 0x3, 0x30, 0x24, 0x6c, 0x4, 0xc, 0x4, 0x5, 0x1b, 0x48, 0xc, 0x2, 0x16]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x6}, {0x7, 0x4}, {0x6, 0x9}, {0x5, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x8}, {}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x1, 0x1}, {0x5, 0x6}, {0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0x11}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xfebf, 0x6, 0x1, 0x4, 0x81, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x215c, 0x7f, 0x9, 0x9a, 0x100, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xaa9}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50f97f00", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf2501000000080007000700000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x801) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x5c7, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x52}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) semget(0x0, 0x3, 0x432) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x52}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bd65aec83a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8ae5f56313"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xddd6aababc89ac93) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x43c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_TX_RATES={0x400, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x7}, {0x0, 0x4}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x4, 0x5}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x6}, {0x5, 0x3}, {0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x200, 0xb3, 0x5, 0x0, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x40, 0x1ff, 0x4, 0x3, 0x4, 0xe6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb0, 0x0, 0x0, 0x6, 0x8, 0xffff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x4, 0x5, 0x2, 0x36, 0x36, 0x2, 0x30, 0x1b, 0x9, 0x9, 0x18, 0x2, 0xc, 0x4]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x2}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0x2}, {0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {}, {0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1b95, 0x9, 0x8001, 0x72, 0x8, 0x7, 0xffc6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x3, 0x2, 0x9f, 0xfffb, 0x6, 0x37b, 0x2]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x9}, {0x1, 0x4}, {0x5, 0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x5, 0x4}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x4, 0x9}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x2}, {0x7, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x2}, {0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x4}, {0x2, 0x1}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x3, 0x3}, {0x5, 0x9}, {}, {0x0, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x2}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x56, 0x22, 0x20, 0x0, 0x8, 0x1, 0x7]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x5}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7f, 0x4, 0x401, 0x8, 0xf000, 0xbb, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x27, 0x3, 0x1b, 0x1b, 0x24, 0x36, 0x4d, 0x2, 0x48, 0x12, 0xb, 0x4, 0x60, 0x24, 0xb, 0x36, 0x18, 0x9, 0x18, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x78, 0x6, 0x6, 0x3, 0x3, 0x36, 0x18, 0x30, 0x18, 0x5, 0x1, 0x60, 0x6c, 0x60, 0x5, 0x2]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x4}, {0x7, 0x6}, {0x3}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x1c}, {0x7, 0xa}, {0x2, 0x3}, {0x2}, {0x5, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x1}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x1, 0x7}, {0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x2, 0x1}, {0x2, 0x2}, {0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x11}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0xa}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x400, 0x2, 0x0, 0x7, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x99, 0x1, 0x6, 0x2b3, 0x6, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x2995, 0x3ff, 0x40, 0x6bee, 0x3ff, 0x82]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x36, 0xc, 0x6, 0x12, 0x36, 0x36, 0xb, 0x6c, 0x18, 0x2, 0x6, 0x57, 0xc, 0x1, 0x16, 0x0, 0x5, 0x30, 0x16, 0x34, 0x18, 0x30, 0xc, 0x5, 0x36, 0x3, 0x3, 0x24, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x8}, {0x4, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x2}, {0x3, 0x7}, {0x7, 0x7}, {0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x6, 0xa}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x7}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x2}, {0x2}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x6}, {0x2, 0x9}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0xa}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x3}, {}, {0x3, 0x7}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x4, 0x3}, {0x6, 0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0xb, 0x2, 0xc, 0x12, 0x30, 0x16, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x0, 0x6c, 0x2, 0xb, 0x48, 0x6, 0x3, 0x30, 0x24, 0x6c, 0x4, 0xc, 0x4, 0x5, 0x1b, 0x48, 0xc, 0x2, 0x16]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x6}, {0x7, 0x4}, {0x6, 0x9}, {0x5, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x8}, {}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x1, 0x1}, {0x5, 0x6}, {0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0x11}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xfebf, 0x6, 0x1, 0x4, 0x81, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x215c, 0x7f, 0x9, 0x9a, 0x100, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xaa9}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) 00:44:05 executing program 2: semget(0x3, 0x1, 0x0) (async) r0 = semget$private(0x0, 0x0, 0x50c) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000000)=""/205) [ 2582.932336][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:06 executing program 5: syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x7) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) 00:44:06 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mount_setattr(r0, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x20000, {r2}}, 0x20) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000000)=0x3a25) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) read$msr(r3, &(0x7f0000000040)=""/108, 0x6c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) mount_setattr(r0, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x20000, {r2}}, 0x20) (async) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000000)=0x3a25) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) read$msr(r3, &(0x7f0000000040)=""/108, 0x6c) (async) 00:44:06 executing program 1: socketpair(0x29, 0x4, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000180)=[0x9, 0x48, 0x6, 0xf342, 0x4, 0x200, 0x8000, 0x6]) 00:44:06 executing program 0: r0 = semget(0x3, 0x3, 0x1) r1 = semget$private(0x0, 0x1, 0x0) r2 = semget(0x2, 0x2, 0x400) semctl$GETPID(r2, 0x0, 0xb, &(0x7f00000011c0)=""/91) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x8}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/109) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r3, 0x1, 0x3, &(0x7f0000000100)=""/175) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000001240)="5624910dbd8654a262eb282b1258c0fbc0885aec9fb5e228", 0x0, 0x18) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f00000001c0)=""/4096) 00:44:06 executing program 2: socketpair(0x18, 0x2, 0x0, &(0x7f0000000040)) r0 = semget(0x3, 0x0, 0x0) semget(0x2, 0x4, 0x250) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000080)=""/182) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x200, 0xfff9, 0x1, 0xb1a, 0xc9, 0x7, 0x5]) 00:44:06 executing program 4: semget(0x3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 00:44:06 executing program 5: syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041a1f000097d8c6a6f3896bb297a5754d4b549ff21e2cad9d984c56c88457b64f13f36c94eb43356336df7dc97f5d6a18fb52969fa5e500e79bb658030a9c3dbfc1532872e570789d28d893adbe40ce99d2901d56b82c8fade9b289bd15cf28cb11579310a7fc0857f7a7f763803e559ee5466e4001f5c0a5ceadf2bb6cd8971bcbb918d1942bec65987656472c0ff766b65ddb77d11a0cd00c815b0697374cc1e43a3c1fc7f1d986cbad00774048cb65a8782e0000000018e643b226259044bd1caf0e634116e89ef18ac5572a3dfab520a955e0348478388294e31884c3847488850b14e793977227f3d326a6cb66e01fe7ff1e5e4cfa26c61c641572de206328ed33800103d0b8b9a8f1a4ea081edeede3dac7f99495fdde533adb27bee4f41f82960dfa446baaf207d1ca0757eb6005be9ad1fd9aab6ca7b88c26fd95cb431ebee7c22d13eb87db2ad82f073ff1335846dac19cf92481e50ab7f7de27c2616b8c9764daafd40a8b29d771daf2f152775159bf269f4767ad03b84f3c"], 0x7) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x7) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) (async) 00:44:06 executing program 1: socketpair(0x29, 0x4, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000180)=[0x9, 0x48, 0x6, 0xf342, 0x4, 0x200, 0x8000, 0x6]) 00:44:06 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mount_setattr(r0, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x20000, {r2}}, 0x20) (async) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000000)=0x3a25) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) read$msr(r3, &(0x7f0000000040)=""/108, 0x6c) 00:44:06 executing program 0: r0 = semget(0x3, 0x3, 0x1) r1 = semget$private(0x0, 0x1, 0x0) (async) r2 = semget(0x2, 0x2, 0x400) semctl$GETPID(r2, 0x0, 0xb, &(0x7f00000011c0)=""/91) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x8}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/109) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r3, 0x1, 0x3, &(0x7f0000000100)=""/175) (async) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000001240)="5624910dbd8654a262eb282b1258c0fbc0885aec9fb5e228", 0x0, 0x18) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f00000001c0)=""/4096) 00:44:06 executing program 2: socketpair(0x18, 0x2, 0x0, &(0x7f0000000040)) (async, rerun: 32) r0 = semget(0x3, 0x0, 0x0) (rerun: 32) semget(0x2, 0x4, 0x250) r1 = semget$private(0x0, 0x1, 0x0) (async) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000080)=""/182) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x200, 0xfff9, 0x1, 0xb1a, 0xc9, 0x7, 0x5]) 00:44:06 executing program 4: semget(0x3, 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 00:44:06 executing program 5: syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x7) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) 00:44:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa8e562a529a23b08}, 0x801) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:06 executing program 0: r0 = semget(0x3, 0x3, 0x1) (async) r1 = semget$private(0x0, 0x1, 0x0) r2 = semget(0x2, 0x2, 0x400) semctl$GETPID(r2, 0x0, 0xb, &(0x7f00000011c0)=""/91) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x8}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/109) (async) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_INFO(r3, 0x1, 0x3, &(0x7f0000000100)=""/175) (async) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000001240)="5624910dbd8654a262eb282b1258c0fbc0885aec9fb5e228", 0x0, 0x18) (async) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f00000001c0)=""/4096) 00:44:07 executing program 1: socketpair(0x29, 0x4, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000180)=[0x9, 0x48, 0x6, 0xf342, 0x4, 0x200, 0x8000, 0x6]) socketpair(0x29, 0x4, 0x7ff, &(0x7f0000000040)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000180)=[0x9, 0x48, 0x6, 0xf342, 0x4, 0x200, 0x8000, 0x6]) (async) 00:44:07 executing program 2: socketpair(0x18, 0x2, 0x0, &(0x7f0000000040)) (async) r0 = semget(0x3, 0x0, 0x0) (async) semget(0x2, 0x4, 0x250) (async) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000080)=""/182) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x200, 0xfff9, 0x1, 0xb1a, 0xc9, 0x7, 0x5]) 00:44:07 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = geteuid() setfsuid(r0) 00:44:07 executing program 4: semget(0x3, 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 00:44:07 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'r\x00'}, 0x8) semget(0x3, 0x600, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x40}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x5b}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x15}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4004011) [ 2584.210769][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa8e562a529a23b08}, 0x801) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) gettid() (async) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa8e562a529a23b08}, 0x801) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) 00:44:07 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 00:44:07 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x166}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x25d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) socketpair(0x2c, 0x80000, 0x1000, &(0x7f0000000000)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x10400, 0x0) openat$cgroup_devices(r1, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='.\x00', 0x0, 0x30}, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf251d0000000c009900ff000000750000000c009900e3ffffff5200000014002380050007000600000008001c00020000001c002380060012000700000005001e0000000000060018000104000008000100420000002400238008001c0001000000080014001effffff05001d000100000005000e000000000008000100690000000800010054000000140023800500050001000000050000000000"], 0xac}, 0x1, 0x0, 0x0, 0x20084800}, 0x44000) 00:44:07 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = geteuid() setfsuid(r0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) geteuid() (async) setfsuid(r0) (async) 00:44:07 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'r\x00'}, 0x8) semget(0x3, 0x600, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x40}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x5b}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x15}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4004011) 00:44:07 executing program 4: semget(0x3, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0xd738, 0x1, 0x1, 0x7d, 0x6, 0x1]) [ 2584.576588][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2584.588019][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:07 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x166}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x25d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async, rerun: 64) socketpair(0x2c, 0x80000, 0x1000, &(0x7f0000000000)) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x10400, 0x0) openat$cgroup_devices(r1, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='.\x00', 0x0, 0x30}, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf251d0000000c009900ff000000750000000c009900e3ffffff5200000014002380050007000600000008001c00020000001c002380060012000700000005001e0000000000060018000104000008000100420000002400238008001c0001000000080014001effffff05001d000100000005000e000000000008000100690000000800010054000000140023800500050001000000050000000000"], 0xac}, 0x1, 0x0, 0x0, 0x20084800}, 0x44000) 00:44:07 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = geteuid() setfsuid(r0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) geteuid() (async) setfsuid(r0) (async) 00:44:07 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) 00:44:07 executing program 4: semget(0x3, 0x0, 0x0) (async) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0xd738, 0x1, 0x1, 0x7d, 0x6, 0x1]) 00:44:07 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'r\x00'}, 0x8) (async) semget(0x3, 0x600, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x40}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x5b}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x15}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4004011) 00:44:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa8e562a529a23b08}, 0x801) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) [ 2585.024324][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2585.061005][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:08 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x166}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x25d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async) socketpair(0x2c, 0x80000, 0x1000, &(0x7f0000000000)) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x10400, 0x0) openat$cgroup_devices(r1, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='.\x00', 0x0, 0x30}, 0x10) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf251d0000000c009900ff000000750000000c009900e3ffffff5200000014002380050007000600000008001c00020000001c002380060012000700000005001e0000000000060018000104000008000100420000002400238008001c0001000000080014001effffff05001d000100000005000e000000000008000100690000000800010054000000140023800500050001000000050000000000"], 0xac}, 0x1, 0x0, 0x0, 0x20084800}, 0x44000) 00:44:08 executing program 4: semget(0x3, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0xd738, 0x1, 0x1, 0x7d, 0x6, 0x1]) 00:44:08 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 00:44:08 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x4, 0x3f, 0x1800}, {0x0, 0x4, 0x800}, {0x1, 0x2, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x1000, 0x400}, {0x0, 0x4}], 0x7) 00:44:08 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x9) semget(0x3, 0x600, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8, 0x4, 0x6, 0x7f}, {0x50, 0x81, 0xeb, 0x1}, {0x5, 0x1f, 0x4, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x35ba}) 00:44:08 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = semget$private(0x0, 0x1, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000100)=""/27) semget$private(0x0, 0x0, 0x320) r3 = semget$private(0x0, 0x4, 0x568) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000000140)=""/155) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/222) semctl$IPC_RMID(r1, 0x0, 0x0) 00:44:08 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x76}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfb}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xc1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xca}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x20}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x78}, 0x20) 00:44:08 executing program 2: getitimer(0x1, &(0x7f0000000000)) 00:44:08 executing program 1: socketpair(0x29, 0x4, 0x7ff, &(0x7f0000000040)) 00:44:08 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semop(r0, &(0x7f0000000040)=[{0x4, 0x3f, 0x1800}, {0x0, 0x4, 0x800}, {0x1, 0x2, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x1000, 0x400}, {0x0, 0x4}], 0x7) 00:44:08 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x9) semget(0x3, 0x600, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8, 0x4, 0x6, 0x7f}, {0x50, 0x81, 0xeb, 0x1}, {0x5, 0x1f, 0x4, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x35ba}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x9) (async) semget(0x3, 0x600, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8, 0x4, 0x6, 0x7f}, {0x50, 0x81, 0xeb, 0x1}, {0x5, 0x1f, 0x4, 0x1}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x35ba}) (async) 00:44:08 executing program 4: r0 = semget(0x3, 0x0, 0x0) (async) r1 = semget$private(0x0, 0x1, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000100)=""/27) (async) semget$private(0x0, 0x0, 0x320) r3 = semget$private(0x0, 0x4, 0x568) semctl$IPC_RMID(r3, 0x0, 0x0) (async) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000000140)=""/155) (async) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/222) (async) semctl$IPC_RMID(r1, 0x0, 0x0) 00:44:08 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x76}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfb}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xc1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xca}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x20}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x78}, 0x20) 00:44:08 executing program 1: socketpair(0x29, 0x4, 0x7ff, &(0x7f0000000040)) 00:44:08 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x4, 0x3f, 0x1800}, {0x0, 0x4, 0x800}, {0x1, 0x2, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x1000, 0x400}, {0x0, 0x4}], 0x7) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semop(r0, &(0x7f0000000040)=[{0x4, 0x3f, 0x1800}, {0x0, 0x4, 0x800}, {0x1, 0x2, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x1000, 0x400}, {0x0, 0x4}], 0x7) (async) 00:44:09 executing program 2: getitimer(0x1, &(0x7f0000000000)) getitimer(0x1, &(0x7f0000000000)) (async) 00:44:09 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = semget$private(0x0, 0x1, 0x0) (async) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000100)=""/27) (async, rerun: 32) semget$private(0x0, 0x0, 0x320) (async, rerun: 32) r3 = semget$private(0x0, 0x4, 0x568) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000000140)=""/155) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/222) (async) semctl$IPC_RMID(r1, 0x0, 0x0) 00:44:09 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x9) semget(0x3, 0x600, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8, 0x4, 0x6, 0x7f}, {0x50, 0x81, 0xeb, 0x1}, {0x5, 0x1f, 0x4, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x35ba}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x9) (async) semget(0x3, 0x600, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8, 0x4, 0x6, 0x7f}, {0x50, 0x81, 0xeb, 0x1}, {0x5, 0x1f, 0x4, 0x1}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x35ba}) (async) 00:44:09 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x76}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfb}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xc1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xca}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x20}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x78}, 0x20) 00:44:09 executing program 1: socketpair(0x29, 0x4, 0x7ff, &(0x7f0000000040)) 00:44:09 executing program 2: getitimer(0x1, &(0x7f0000000000)) 00:44:09 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x329901, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYBLOB="1d4fb681df4bde8a6cab4bec9171ee121b02529ba1da640ce7d298fcd3f5a5535aaf0fa56e6b69aecc5a310d5a42ba471152f919532ddeb04b1d8d523598a9ae3724dfe82c6f726d7fc5c0ae504f07104f68750b4d99ddf432f694185981673f552eeabd2ac272f4dedb676855cd871eea06ed7feba7344f033e4e90b10d1a4e4d5438db1f72539c1b6962561e4f64eebcb2adb9b9710b3c473de8e48c8add", @ANYRESDEC=r2, @ANYRES32=r3], 0x7) 00:44:09 executing program 4: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x10) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000000)=""/191) 00:44:09 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0x25) socket$pppl2tp(0x18, 0x1, 0x1) semget(0x3, 0x600, 0x0) [ 2586.412254][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:09 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x329901, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYBLOB="1d4fb681df4bde8a6cab4bec9171ee121b02529ba1da640ce7d298fcd3f5a5535aaf0fa56e6b69aecc5a310d5a42ba471152f919532ddeb04b1d8d523598a9ae3724dfe82c6f726d7fc5c0ae504f07104f68750b4d99ddf432f694185981673f552eeabd2ac272f4dedb676855cd871eea06ed7feba7344f033e4e90b10d1a4e4d5438db1f72539c1b6962561e4f64eebcb2adb9b9710b3c473de8e48c8add", @ANYRESDEC=r2, @ANYRES32=r3], 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x329901, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYBLOB="1d4fb681df4bde8a6cab4bec9171ee121b02529ba1da640ce7d298fcd3f5a5535aaf0fa56e6b69aecc5a310d5a42ba471152f919532ddeb04b1d8d523598a9ae3724dfe82c6f726d7fc5c0ae504f07104f68750b4d99ddf432f694185981673f552eeabd2ac272f4dedb676855cd871eea06ed7feba7344f033e4e90b10d1a4e4d5438db1f72539c1b6962561e4f64eebcb2adb9b9710b3c473de8e48c8add", @ANYRESDEC=r2, @ANYRES32=r3], 0x7) (async) 00:44:09 executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffff2a79, 0x80000001, 0x348, 0x4}, &(0x7f0000000080)) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 00:44:09 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000100)={0x100065}, 0x20) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1a}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "04b34ffb12302c9c732c51bf2d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "bf8061d4b7"}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "892c58b208cb03cb365fee9219"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) 00:44:09 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x34) 00:44:09 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0x25) socket$pppl2tp(0x18, 0x1, 0x1) semget(0x3, 0x600, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) semget(0x3, 0x600, 0x0) (async) 00:44:09 executing program 4: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x10) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000000)=""/191) [ 2586.659010][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2586.674367][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:09 executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffff2a79, 0x80000001, 0x348, 0x4}, &(0x7f0000000080)) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffff2a79, 0x80000001, 0x348, 0x4}, &(0x7f0000000080)) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) 00:44:09 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x329901, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYBLOB="1d4fb681df4bde8a6cab4bec9171ee121b02529ba1da640ce7d298fcd3f5a5535aaf0fa56e6b69aecc5a310d5a42ba471152f919532ddeb04b1d8d523598a9ae3724dfe82c6f726d7fc5c0ae504f07104f68750b4d99ddf432f694185981673f552eeabd2ac272f4dedb676855cd871eea06ed7feba7344f033e4e90b10d1a4e4d5438db1f72539c1b6962561e4f64eebcb2adb9b9710b3c473de8e48c8add", @ANYRESDEC=r2, @ANYRES32=r3], 0x7) 00:44:10 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x34) 00:44:10 executing program 4: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x10) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000000)=""/191) semget(0x3, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x10) (async) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000000)=""/191) (async) 00:44:10 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000100)={0x100065}, 0x20) (async) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1a}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "04b34ffb12302c9c732c51bf2d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "bf8061d4b7"}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "892c58b208cb03cb365fee9219"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) 00:44:10 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0x25) socket$pppl2tp(0x18, 0x1, 0x1) semget(0x3, 0x600, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) semget(0x3, 0x600, 0x0) (async) [ 2587.119893][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:10 executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffff2a79, 0x80000001, 0x348, 0x4}, &(0x7f0000000080)) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffff2a79, 0x80000001, 0x348, 0x4}, &(0x7f0000000080)) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) 00:44:10 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRESOCT=0x0], 0xfffffffffffffddc) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="8be48e77521413417d6cc0824425080e745d97ddc005eacc", 0x0, 0x18) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) 00:44:10 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000100)={0x100065}, 0x20) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1a}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "04b34ffb12302c9c732c51bf2d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "bf8061d4b7"}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "892c58b208cb03cb365fee9219"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000100)={0x100065}, 0x20) (async) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1a}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "04b34ffb12302c9c732c51bf2d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "bf8061d4b7"}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "892c58b208cb03cb365fee9219"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) (async) 00:44:10 executing program 4: r0 = semget(0x0, 0x0, 0x8c) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000000)=""/67) r1 = semget(0x3, 0x4, 0x20) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/213) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x1a9) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000100)) 00:44:10 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x34) 00:44:10 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x3f) 00:44:10 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRESOCT=0x0], 0xfffffffffffffddc) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="8be48e77521413417d6cc0824425080e745d97ddc005eacc", 0x0, 0x18) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRESOCT=0x0], 0xfffffffffffffddc) (async) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="8be48e77521413417d6cc0824425080e745d97ddc005eacc", 0x0, 0x18) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) (async) 00:44:10 executing program 4: r0 = semget(0x0, 0x0, 0x8c) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000000)=""/67) r1 = semget(0x3, 0x4, 0x20) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/213) (async, rerun: 32) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) (async, rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x1a9) (async) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) (async) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000100)) 00:44:10 executing program 1: socketpair(0x29, 0x800, 0x4, &(0x7f0000000000)) 00:44:10 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x3, 0x3, 0x240) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000000)=0x7ff) 00:44:10 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfs', 0x3440, 0x44) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0), 0x2140, 0x0) mount_setattr(r2, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x1, 0x0, 0x100000}, 0x20) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) mq_open(&(0x7f00000000c0)='.,(]@]]%,\x00', 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)={0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000340)={r4, 0x0, r5, 0x9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000300)=r4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setns(r0, 0xaeaca7421e2c0056) mount_setattr(r1, &(0x7f0000000380)='./file0\x00', 0x1900, &(0x7f00000003c0)={0x81, 0x8, 0x100000, {r2}}, 0x20) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x210040, 0x3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xbc, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="85616466000000000800000000ff000001000000000000001a00000000000000856164660000000007000000000000007f000080000000003c00000000000000852a6873010000000100"/88], &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="852a62770a00000003000000000000000000000000000000852a68773a3bc1b803000000000000000000000000000000852a62730001000003000000000022000000000000000000"], &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @enter_looper, @request_death={0x400c630e, 0x3}], 0x1000, 0x0, &(0x7f0000001a40)="c01b242271d52cd8cce1e7110f596eabc8d12340b08a2fb4841e2cbeddb5f71fc1f92346e83c09d63b9b79a326f176f0da82865b8ad21c65b7b319b44139fd04830746f77edde4cca28a8111c54046afdcb6f6f347b243d56ba76b7ccc338278113d6ed92622b3d9962f91b4237c8ee8a9f9049c43ec58c7c47b40b851d412d6c324541b714433588004e2a5846f1b2b9172e95ed7ff47816328ea6f85c08fded7221cac6f7d2a46039c121b3d732d1c5ac4bb28fadb9748d1da89d0bff91cbbed53c77e875310c153a6c79b1bf3ed7fe590ee7895f808618dacc340b8fb311c08559d53fe7837a88b8c814afb7329226f77e1ba35c35d309d97826571be46bc1ce533c4a45ebbc72d385c356c951e5308f7c1de85220eaea9c709e8ea2c07387b2def71562db724b9eb1f8a99a22e7e6e78444d42e6bec033bd3e2f858f47136267e819336e7595dd767bc6892201b85140dc7fd7c0b9a7dedb6c5989b231df386db324107d88a6d83ee1d8aa8b15360285f522ebd1ff2e43772fe1e27fbb48a99b79aaba2c2a28145f799a0b2d05ea5bd4bc5e332ddb9195c9867f3c338767e667373c4567d1c7a921775b7a80c586819129a2e77681225b9f6a83dd5cb9ff307f67f4bec5f2a6c58403abe457670d27801c1858aefbf37195498a6fcf477289745a98004f21002cad9778e48d31c7e8129b0142b4ff355e01dbc079662ffecd590e15b73da30f2e08cc2af9e80bd970d11d92c22a9612f129a223c2e31fbbd063d2bd287db88c87ee4b594c3aff4bfc85f691fdf7060f50c3c4d1b3f3ef519ddea0ccabe60c91173123025d7d52fc4d0dbd46f09df2ced35d038a70afb8c1d375624e5504998689c5ec7cb2f85dfab05bae64ae40320dc405fdbf8ea1aad73025cbdd5ff4a73bcabc1a56d3597095cb30f7037cd791e2db2d14bad3083288f2a1cc3a3b18f97e1c16db4bc082e3631ddd5a7fee883c3c6f159d438ffcf8d6c4ef6b50c49a4f1851ed538e006b4562f8341caae1168db721053d5480f62d2a317c9c8e5d8b077bf8533acdfa8afbd9e472d2319847d18428161d1d39746c08ea05bf0b7e6dfb02d2701d1933a7828ac2898108f04e8574e9b7d88b2415a3f82d374fa5e6d2ebe9b9b8c4be17af62044bbfdb67b530df46384b2f04547d5707a199d8f509359f929bd10ebf45dc155fc87e99d5900816aa289a9694c1a3396ee280d161a4ab641f063092701f8f02c1b99553e87063b3434d92add7a8ba31d927a0cd04916564ecf9e4909661bc20194f74730ec41db5daf809ec9fe51a6dd3fdb3492a72f26d6f5856f39edcd4c183c8cf21a3fbf5bfd859897065fdf1621bd1d1026bfd772e157b50ed47cea433fa5cba125721c4c9938f81cf360dbbb4effe71ded7d60c3fa1169aa0488285e189ffeddad0bc381d9c457ed3770181f2e2401caf1898690f7ba5a071979dfefaee9a14a7a681008f57a23cf4fb76eda6b20a297e3fcee2f44af9ed63bde28c23ca794a4fa754e1c65c7e0243348e5f21eb78a658dcb7d6300bf4d0c314928545401a3d9b1baa096afe947691872574dbe3b8d6935012331845b2f4c48f7ccc7caa3fff13938b3abe5548a95455533e4ad3248b537c6529ef3a3299ebfa11a8062d5e1e31cbfc9875b5afbdb5438a510dbdf7f0411ef4d1aecc0c1c0b491c3817bae0baf939c765c041cc5ce0644d959695f82b1e76a8947c499d4506225e5beb13767f35b1ab3084f31a780f7ce9797b63202797714cc9ff944faad8a2907e517f1ff6755bae68ee1acf2a557351b40ed42bcb2715e8b6b639b221ca93f9e4e510bf9a9b9da0d5a67f9043e4019396d5bfde06646b41d118e144f6caf466bb4f9fe726d45f565b9916503642e3b410b7544615d8ac335b5dbeb0b9d03ebf8938065e4bd7f024895b592111edfc88ff8d3045da481988a50c3c6eb290c52ea8ff9e6d3adf849e98a702fd8b7fe9a520c5aae18fa5f9667724770e0d676c05b542969300f308ac45702885619e407869afa7c737133b009c2a1086be7dfa1fa0b0d63c91c6d1270b7bd766a3b0ccec56a6f93bb21c9ee52c85c7725fccfff44f564f2a4c138eda5bd8c9db4b1dafdd8f3513b44484c716101c7dd7aa0e71390992cbd793365c8f01a4f89d3b49bebdfd514f326820e84d1bd84771c2c832481237d7a44c6f220ba88e10c32286c8855c00b7e2c2069914cfea21cf7e8ab3a5c6903279f05d86300a64a863132cd8b01aaa4e11c6fdab6b95fdb0b1f07ec4689699b64120e595e550f7a23d8430d2c0b26b78220d63705a340401f993a88bfb83ed2744ec81ca1918fcae7963ad06b2d55b0ac7eb79ae6793e3a0ef60486276c8ea3ef43036f9db2dd3a27a5242f6cb27a1bb3decdcaadfdd5064f8497630c5bda9cae56253bd456a9abf871845a26ffb8369add0e1d90440512dcc2b332d986900e5f94e46a8d9a382ce70c6b51f3d3f237bdb7ec879b8ca960a63c7452e57e3bc9331e50f805f8cc5cc3a8dee99c247c78abb19b22b2d3eceb014a88566f6d5b7310a2ca2e84e0d5ca5a3512716c8dea73002c2c318b787f12b56c945e524716f77361873b2c999c3059adffa742c2129b1591162a94f2f9eb4523bb6bd56019ac9448721ac145ab0ccdb0664cf78776ac4826936cd4b9c8aaac408172ab7a5c22b13beab044500b39444dd943b21d142cb2ea958c29c32fa41a4435714c1027442309c4acf0a01a933d63143fc722e1d3153cddd6a5538eb845c4b90027f032dff0614dd00333b367275e645fe2f53edeea42e7bdb6351a7097117dd744b6f99f0a38c548071ab424eb84b15d84d5d13e2749f48ac1ffd1b90dcd832bad580d6b67bce8774bf28f21b6c0207bd97078b83cb45210f1c8a9c4c8ab8870e39731d041b81ead936a8153553c57571bc9ccff2e427ca8815d3d5ce0470511b661e2ed27c16509e748f51cd7773782274598423bbbadf8ac2e6169aafa951347ebfec0144906df1abf3273cf09cfa73baa851cc32656f6ec7eca1218fa439ace1b04e0e11f18c4276d9ac4dcc4ad09d86b75ca4ed1957bfd330228312cf903a02b203bbbc8b2f88cc00db5d54d11b082e6b5085092e47b66507b15a2455f6ac920ce45f523962c2ba4cdb29088c1e50b4eb7c4f0d6a843734373c2f051d7141811d7b32db25f895f46000206c1f1e9049a67961db1c3bbb13554c32ae01ae8ca1389c0712ab9923daf3a096e21fcefee1773b13a3577967520f8deb65e232cd7b41d171e51f02677ab74a2464d05af709bcdccad4fd5bee1a88d5e16186f20edabd82c9412acfa42b97a24595ba908f5a899a0a50459009680a9ab595bca2cf0631edb609ca3a3f1688b251279d42137b464aa81af6bb9a307aa43ce57502f14971d95bf9d54ebd7c24914473b6bb018b89e151d0d50943ca68050217112ff50ef52f93bc60cb21589735bc620d44bd5b2c635dcd1e357eb86bb52d990b8f7209c935950d2ada5c1015d48d6189246e23fdd167c88907ad5f45f69f311fb7d5f677178f0eb86eca38e8cc810d9a599212c4e9a9db33e894c8efa1a564c433df93bee9aafd26ec45bcbd892363f2fd20babe69efd4f015ee5cc677fce172214e020e7642278058aca2888202d2aae16220692f769f61fa66b821c0bb3c4244a666a2ad7f57297ecc9a5cd68e2d775f406bed9ff76889d7efa147277e1ec874650f304015d9d7ba4f325b2606b79d7a3ad692b4b9fb2bda57c9b2d43c09afab7b87984a662a04d0f24246b0f7015ae6bf8d1864be82c35d639151f396b5c5d22120ba5b5e6721737dd31b357c768f34a44f9318ea4e9cea8e076f31e566b441c27c482da7ed3a0fe172dfa7a5ca947e491a5b9567fb7c99a248b13663329b36061f710be25854cb7d870b92c3ea02bd3d8d531b04a9667842fa5b6bde509dd45c44167fa5340abcb495a34cf6767fcc624be444f2d945dd514d6e18ad78599e902d9f1ebb2937b3d03a37ef7f89ffc3d63a7e5e84adacb88de4dfb8872043ec62809b9b0a9c98f6efc7b8422ddb5ad28e4ce003899b92e59121e68e858fdc03017807f5b2a301adb1e242dd0a9eecc655dc4b43e36d523e0c5fbf468be9ea6af57ba8049ad8fd92540e13d7390d64a7b53863631f6385f3ea7a1827117ef368c17c10e1a5e8526889fa3497895045542cabbac5aca3f82bdc886ed1cb38185f3bd53c4921b589db0117b9c15982a8c8bc08c6f0489ea9d43f5b161c8c1bcc85c8bbf4b68e3c493a16c7d9f6aa1aed9cc19000c3dcb8629895e58c0ea9d51af8cb32bce6d8657587d1da2f18ceec945a2f88a7744cc36a8974204ad1e60205f2d62b8079511db4a1ed6621fb79369dc8c28dfe06e74430e4121531d6219f40d5b94d510e6c3d1b76f175b060c5227ad6ff266944763e842dbede695da6f20e39654c368b01b088d7a14fab0af2778dfcbec0e1f7caa2b9ef0a77593fbf7cc03bc964538e6b64c5ffe195e1c21936ca4c8b5eaa1ea4fbd3644b76cfcf137b510a0d57e5e2ba49e1528d4750a75589de34d4af1c08492fbf4109d122b3b552c5ab645debd09e845d475d37ae748868b35235ce8af6444d8fe0a5b4ecf6cb092e234f55532c1b4d6f9b17850b0e1de7018b13e01fb239529aaccc67bb70ab6fec0ebc7ceb5e2afe2ce06cb11b0884390abe475e4ba6347450038f410b147e822d57d777b64f6187d24bfb54c8f09b7a804f0c31c1e874ceb656e99f9d852e156ca4e73499e15f3b10ad6c1ea8f4c1245c7e620d6955b7d3b65e714ce18fb163f6d61a15a60e7981fb39c3612b60d426be708549902964468dd925106758834c161d2a5dde9d200155892a4167d9c9bf40967547c2d83b181c53e3c04d69e35c222dcc26fab5ba3cf2c32b04b8fcab6e4de057ee5b6f7e4c2e737474d6d636318ddfacdca4ceab4bdc70244caf2c51a2181a87b0a1cf3df1c369a61d7e395e72d3a8cdded324ce42dfe4efb98b25032fb0e45cb2b97390a0415a1530ad1d8c114fc30823c1c49a8cba24a700ff44c1f0c419b97742980122290868da82e7419c98469384a76d5bbd4f511b49026597264aea609e68ffee0a5c12a61170550b6700480a01e84f25bd09cc1ec39648a01bb12e34e8f77699c1d4a693f82c52c9db1c28b11ef442bb2d5a8738a065b07c46be265fc289f3d1e30a705a0d321162da18959b05c3e24618e77b40460ce18f2014d9ab2864c5e251e6679f5b1888780994fae4c6552f15578e0ec99421138b5d322154356b70f43f6ab0a194625eefb9a8b32d8e795c1f0724d0c21f7fc84dc42e4ba08ed36f70643ae6e87e8b6ea911dde27edb3e0c3403f0a4fe88df976f28bf5e0778fc771fa2a62a5abe889fa0553abe3b419573bc72f2cea166d803a66b452372242c0bf359cec4f5c9b4b496869b2877a547e11c5f6a873f164f0a4ff4efce141e7aecbaeb9ef505073fcd6fc64a9a40b3cb834c5da67398b21f8e3c0cf313292ab322a2bf6ad634d93441b78d296eab20472274c6a14057ae01b18bd3996486fcc528b60b30eac944b5e332a99d959e1512eb7aa42e05c522fdce8ce32a24c75ded38b0fc6fd11bddcc3af6fcc4fc0d440ac301f2fe5285474fd9acd488f7074e1c0d02cbb5005aaa24d27682344d36fa44e4f1f0782d12cdf43784ae2a2dfdbdb7dea2ade049e02a78021464e159a97e2bf471c6ee64284f57542ee9a8532941b479255056d4654cf1c2f491558c85012db7b41265d22e12bb340dee3692ad96b114c0"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000000)={0x1}) 00:44:10 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x3f) semget(0x3, 0x600, 0x0) (async) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x3f) (async) 00:44:10 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRESOCT=0x0], 0xfffffffffffffddc) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="8be48e77521413417d6cc0824425080e745d97ddc005eacc", 0x0, 0x18) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) 00:44:11 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x3, 0x3, 0x240) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000000)=0x7ff) semget(0x3, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semget(0x3, 0x3, 0x240) (async) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000000)=0x7ff) (async) [ 2587.984949][ T24] audit: type=1326 audit(1643417051.031:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20070 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe35248059 code=0x0 00:44:11 executing program 1: socketpair(0x29, 0x800, 0x4, &(0x7f0000000000)) socketpair(0x29, 0x800, 0x4, &(0x7f0000000000)) (async) 00:44:11 executing program 4: r0 = semget(0x0, 0x0, 0x8c) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000000)=""/67) r1 = semget(0x3, 0x4, 0x20) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/213) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x1a9) (async) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) (async) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000100)) 00:44:11 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x3f) 00:44:11 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0406149a64451ec7eb3ef8fc11704b35ffba521b6686ebdf657ff52da1b1ee7435153e6d45b18d3cafc3915d84526542958175d58e976e067e12e472dd32c36cdcba73a7eda96205705ab4b96386272a34d46d819035670a5565692c49d49b13d7fb4afd90f69ff3472e28791897b65c4b3010e409b3e28949e8fea579b051ba08de3744b681b5d0d294a30191a67a060025be2097f358775fab25fa66b86606d28dd21c8407d106488b48d8fcd5ac1472cbcee9c06b5cd38358d0b300d5ef9e0de54b56720e81f59584f35a1fa9f6f679563da07519dbf5595100000000"], 0x7) 00:44:11 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/tpm_crb', 0x101080, 0x12) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc673, 0x7a}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x60}, 0x1, 0x0, 0x0, 0xa4}, 0x404c010) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r6}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008011) semget(0x3, 0x0, 0x8) r7 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) semctl$SEM_STAT_ANY(r7, 0x0, 0x14, &(0x7f0000000000)=""/235) 00:44:11 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x3, 0x3, 0x240) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000000)=0x7ff) semget(0x3, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semget(0x3, 0x3, 0x240) (async) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000000)=0x7ff) (async) 00:44:11 executing program 1: socketpair(0x29, 0x800, 0x4, &(0x7f0000000000)) 00:44:11 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0406149a64451ec7eb3ef8fc11704b35ffba521b6686ebdf657ff52da1b1ee7435153e6d45b18d3cafc3915d84526542958175d58e976e067e12e472dd32c36cdcba73a7eda96205705ab4b96386272a34d46d819035670a5565692c49d49b13d7fb4afd90f69ff3472e28791897b65c4b3010e409b3e28949e8fea579b051ba08de3744b681b5d0d294a30191a67a060025be2097f358775fab25fa66b86606d28dd21c8407d106488b48d8fcd5ac1472cbcee9c06b5cd38358d0b300d5ef9e0de54b56720e81f59584f35a1fa9f6f679563da07519dbf5595100000000"], 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0406149a64451ec7eb3ef8fc11704b35ffba521b6686ebdf657ff52da1b1ee7435153e6d45b18d3cafc3915d84526542958175d58e976e067e12e472dd32c36cdcba73a7eda96205705ab4b96386272a34d46d819035670a5565692c49d49b13d7fb4afd90f69ff3472e28791897b65c4b3010e409b3e28949e8fea579b051ba08de3744b681b5d0d294a30191a67a060025be2097f358775fab25fa66b86606d28dd21c8407d106488b48d8fcd5ac1472cbcee9c06b5cd38358d0b300d5ef9e0de54b56720e81f59584f35a1fa9f6f679563da07519dbf5595100000000"], 0x7) (async) 00:44:11 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfs', 0x3440, 0x44) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0), 0x2140, 0x0) mount_setattr(r2, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x1, 0x0, 0x100000}, 0x20) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) mq_open(&(0x7f00000000c0)='.,(]@]]%,\x00', 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)={0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000340)={r4, 0x0, r5, 0x9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000300)=r4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setns(r0, 0xaeaca7421e2c0056) mount_setattr(r1, &(0x7f0000000380)='./file0\x00', 0x1900, &(0x7f00000003c0)={0x81, 0x8, 0x100000, {r2}}, 0x20) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x210040, 0x3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xbc, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="85616466000000000800000000ff000001000000000000001a00000000000000856164660000000007000000000000007f000080000000003c00000000000000852a6873010000000100"/88], &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="852a62770a00000003000000000000000000000000000000852a68773a3bc1b803000000000000000000000000000000852a62730001000003000000000022000000000000000000"], &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @enter_looper, @request_death={0x400c630e, 0x3}], 0x1000, 0x0, &(0x7f0000001a40)="c01b242271d52cd8cce1e7110f596eabc8d12340b08a2fb4841e2cbeddb5f71fc1f92346e83c09d63b9b79a326f176f0da82865b8ad21c65b7b319b44139fd04830746f77edde4cca28a8111c54046afdcb6f6f347b243d56ba76b7ccc338278113d6ed92622b3d9962f91b4237c8ee8a9f9049c43ec58c7c47b40b851d412d6c324541b714433588004e2a5846f1b2b9172e95ed7ff47816328ea6f85c08fded7221cac6f7d2a46039c121b3d732d1c5ac4bb28fadb9748d1da89d0bff91cbbed53c77e875310c153a6c79b1bf3ed7fe590ee7895f808618dacc340b8fb311c08559d53fe7837a88b8c814afb7329226f77e1ba35c35d309d97826571be46bc1ce533c4a45ebbc72d385c356c951e5308f7c1de85220eaea9c709e8ea2c07387b2def71562db724b9eb1f8a99a22e7e6e78444d42e6bec033bd3e2f858f47136267e819336e7595dd767bc6892201b85140dc7fd7c0b9a7dedb6c5989b231df386db324107d88a6d83ee1d8aa8b15360285f522ebd1ff2e43772fe1e27fbb48a99b79aaba2c2a28145f799a0b2d05ea5bd4bc5e332ddb9195c9867f3c338767e667373c4567d1c7a921775b7a80c586819129a2e77681225b9f6a83dd5cb9ff307f67f4bec5f2a6c58403abe457670d27801c1858aefbf37195498a6fcf477289745a98004f21002cad9778e48d31c7e8129b0142b4ff355e01dbc079662ffecd590e15b73da30f2e08cc2af9e80bd970d11d92c22a9612f129a223c2e31fbbd063d2bd287db88c87ee4b594c3aff4bfc85f691fdf7060f50c3c4d1b3f3ef519ddea0ccabe60c91173123025d7d52fc4d0dbd46f09df2ced35d038a70afb8c1d375624e5504998689c5ec7cb2f85dfab05bae64ae40320dc405fdbf8ea1aad73025cbdd5ff4a73bcabc1a56d3597095cb30f7037cd791e2db2d14bad3083288f2a1cc3a3b18f97e1c16db4bc082e3631ddd5a7fee883c3c6f159d438ffcf8d6c4ef6b50c49a4f1851ed538e006b4562f8341caae1168db721053d5480f62d2a317c9c8e5d8b077bf8533acdfa8afbd9e472d2319847d18428161d1d39746c08ea05bf0b7e6dfb02d2701d1933a7828ac2898108f04e8574e9b7d88b2415a3f82d374fa5e6d2ebe9b9b8c4be17af62044bbfdb67b530df46384b2f04547d5707a199d8f509359f929bd10ebf45dc155fc87e99d5900816aa289a9694c1a3396ee280d161a4ab641f063092701f8f02c1b99553e87063b3434d92add7a8ba31d927a0cd04916564ecf9e4909661bc20194f74730ec41db5daf809ec9fe51a6dd3fdb3492a72f26d6f5856f39edcd4c183c8cf21a3fbf5bfd859897065fdf1621bd1d1026bfd772e157b50ed47cea433fa5cba125721c4c9938f81cf360dbbb4effe71ded7d60c3fa1169aa0488285e189ffeddad0bc381d9c457ed3770181f2e2401caf1898690f7ba5a071979dfefaee9a14a7a681008f57a23cf4fb76eda6b20a297e3fcee2f44af9ed63bde28c23ca794a4fa754e1c65c7e0243348e5f21eb78a658dcb7d6300bf4d0c314928545401a3d9b1baa096afe947691872574dbe3b8d6935012331845b2f4c48f7ccc7caa3fff13938b3abe5548a95455533e4ad3248b537c6529ef3a3299ebfa11a8062d5e1e31cbfc9875b5afbdb5438a510dbdf7f0411ef4d1aecc0c1c0b491c3817bae0baf939c765c041cc5ce0644d959695f82b1e76a8947c499d4506225e5beb13767f35b1ab3084f31a780f7ce9797b63202797714cc9ff944faad8a2907e517f1ff6755bae68ee1acf2a557351b40ed42bcb2715e8b6b639b221ca93f9e4e510bf9a9b9da0d5a67f9043e4019396d5bfde06646b41d118e144f6caf466bb4f9fe726d45f565b9916503642e3b410b7544615d8ac335b5dbeb0b9d03ebf8938065e4bd7f024895b592111edfc88ff8d3045da481988a50c3c6eb290c52ea8ff9e6d3adf849e98a702fd8b7fe9a520c5aae18fa5f9667724770e0d676c05b542969300f308ac45702885619e407869afa7c737133b009c2a1086be7dfa1fa0b0d63c91c6d1270b7bd766a3b0ccec56a6f93bb21c9ee52c85c7725fccfff44f564f2a4c138eda5bd8c9db4b1dafdd8f3513b44484c716101c7dd7aa0e71390992cbd793365c8f01a4f89d3b49bebdfd514f326820e84d1bd84771c2c832481237d7a44c6f220ba88e10c32286c8855c00b7e2c2069914cfea21cf7e8ab3a5c6903279f05d86300a64a863132cd8b01aaa4e11c6fdab6b95fdb0b1f07ec4689699b64120e595e550f7a23d8430d2c0b26b78220d63705a340401f993a88bfb83ed2744ec81ca1918fcae7963ad06b2d55b0ac7eb79ae6793e3a0ef60486276c8ea3ef43036f9db2dd3a27a5242f6cb27a1bb3decdcaadfdd5064f8497630c5bda9cae56253bd456a9abf871845a26ffb8369add0e1d90440512dcc2b332d986900e5f94e46a8d9a382ce70c6b51f3d3f237bdb7ec879b8ca960a63c7452e57e3bc9331e50f805f8cc5cc3a8dee99c247c78abb19b22b2d3eceb014a88566f6d5b7310a2ca2e84e0d5ca5a3512716c8dea73002c2c318b787f12b56c945e524716f77361873b2c999c3059adffa742c2129b1591162a94f2f9eb4523bb6bd56019ac9448721ac145ab0ccdb0664cf78776ac4826936cd4b9c8aaac408172ab7a5c22b13beab044500b39444dd943b21d142cb2ea958c29c32fa41a4435714c1027442309c4acf0a01a933d63143fc722e1d3153cddd6a5538eb845c4b90027f032dff0614dd00333b367275e645fe2f53edeea42e7bdb6351a7097117dd744b6f99f0a38c548071ab424eb84b15d84d5d13e2749f48ac1ffd1b90dcd832bad580d6b67bce8774bf28f21b6c0207bd97078b83cb45210f1c8a9c4c8ab8870e39731d041b81ead936a8153553c57571bc9ccff2e427ca8815d3d5ce0470511b661e2ed27c16509e748f51cd7773782274598423bbbadf8ac2e6169aafa951347ebfec0144906df1abf3273cf09cfa73baa851cc32656f6ec7eca1218fa439ace1b04e0e11f18c4276d9ac4dcc4ad09d86b75ca4ed1957bfd330228312cf903a02b203bbbc8b2f88cc00db5d54d11b082e6b5085092e47b66507b15a2455f6ac920ce45f523962c2ba4cdb29088c1e50b4eb7c4f0d6a843734373c2f051d7141811d7b32db25f895f46000206c1f1e9049a67961db1c3bbb13554c32ae01ae8ca1389c0712ab9923daf3a096e21fcefee1773b13a3577967520f8deb65e232cd7b41d171e51f02677ab74a2464d05af709bcdccad4fd5bee1a88d5e16186f20edabd82c9412acfa42b97a24595ba908f5a899a0a50459009680a9ab595bca2cf0631edb609ca3a3f1688b251279d42137b464aa81af6bb9a307aa43ce57502f14971d95bf9d54ebd7c24914473b6bb018b89e151d0d50943ca68050217112ff50ef52f93bc60cb21589735bc620d44bd5b2c635dcd1e357eb86bb52d990b8f7209c935950d2ada5c1015d48d6189246e23fdd167c88907ad5f45f69f311fb7d5f677178f0eb86eca38e8cc810d9a599212c4e9a9db33e894c8efa1a564c433df93bee9aafd26ec45bcbd892363f2fd20babe69efd4f015ee5cc677fce172214e020e7642278058aca2888202d2aae16220692f769f61fa66b821c0bb3c4244a666a2ad7f57297ecc9a5cd68e2d775f406bed9ff76889d7efa147277e1ec874650f304015d9d7ba4f325b2606b79d7a3ad692b4b9fb2bda57c9b2d43c09afab7b87984a662a04d0f24246b0f7015ae6bf8d1864be82c35d639151f396b5c5d22120ba5b5e6721737dd31b357c768f34a44f9318ea4e9cea8e076f31e566b441c27c482da7ed3a0fe172dfa7a5ca947e491a5b9567fb7c99a248b13663329b36061f710be25854cb7d870b92c3ea02bd3d8d531b04a9667842fa5b6bde509dd45c44167fa5340abcb495a34cf6767fcc624be444f2d945dd514d6e18ad78599e902d9f1ebb2937b3d03a37ef7f89ffc3d63a7e5e84adacb88de4dfb8872043ec62809b9b0a9c98f6efc7b8422ddb5ad28e4ce003899b92e59121e68e858fdc03017807f5b2a301adb1e242dd0a9eecc655dc4b43e36d523e0c5fbf468be9ea6af57ba8049ad8fd92540e13d7390d64a7b53863631f6385f3ea7a1827117ef368c17c10e1a5e8526889fa3497895045542cabbac5aca3f82bdc886ed1cb38185f3bd53c4921b589db0117b9c15982a8c8bc08c6f0489ea9d43f5b161c8c1bcc85c8bbf4b68e3c493a16c7d9f6aa1aed9cc19000c3dcb8629895e58c0ea9d51af8cb32bce6d8657587d1da2f18ceec945a2f88a7744cc36a8974204ad1e60205f2d62b8079511db4a1ed6621fb79369dc8c28dfe06e74430e4121531d6219f40d5b94d510e6c3d1b76f175b060c5227ad6ff266944763e842dbede695da6f20e39654c368b01b088d7a14fab0af2778dfcbec0e1f7caa2b9ef0a77593fbf7cc03bc964538e6b64c5ffe195e1c21936ca4c8b5eaa1ea4fbd3644b76cfcf137b510a0d57e5e2ba49e1528d4750a75589de34d4af1c08492fbf4109d122b3b552c5ab645debd09e845d475d37ae748868b35235ce8af6444d8fe0a5b4ecf6cb092e234f55532c1b4d6f9b17850b0e1de7018b13e01fb239529aaccc67bb70ab6fec0ebc7ceb5e2afe2ce06cb11b0884390abe475e4ba6347450038f410b147e822d57d777b64f6187d24bfb54c8f09b7a804f0c31c1e874ceb656e99f9d852e156ca4e73499e15f3b10ad6c1ea8f4c1245c7e620d6955b7d3b65e714ce18fb163f6d61a15a60e7981fb39c3612b60d426be708549902964468dd925106758834c161d2a5dde9d200155892a4167d9c9bf40967547c2d83b181c53e3c04d69e35c222dcc26fab5ba3cf2c32b04b8fcab6e4de057ee5b6f7e4c2e737474d6d636318ddfacdca4ceab4bdc70244caf2c51a2181a87b0a1cf3df1c369a61d7e395e72d3a8cdded324ce42dfe4efb98b25032fb0e45cb2b97390a0415a1530ad1d8c114fc30823c1c49a8cba24a700ff44c1f0c419b97742980122290868da82e7419c98469384a76d5bbd4f511b49026597264aea609e68ffee0a5c12a61170550b6700480a01e84f25bd09cc1ec39648a01bb12e34e8f77699c1d4a693f82c52c9db1c28b11ef442bb2d5a8738a065b07c46be265fc289f3d1e30a705a0d321162da18959b05c3e24618e77b40460ce18f2014d9ab2864c5e251e6679f5b1888780994fae4c6552f15578e0ec99421138b5d322154356b70f43f6ab0a194625eefb9a8b32d8e795c1f0724d0c21f7fc84dc42e4ba08ed36f70643ae6e87e8b6ea911dde27edb3e0c3403f0a4fe88df976f28bf5e0778fc771fa2a62a5abe889fa0553abe3b419573bc72f2cea166d803a66b452372242c0bf359cec4f5c9b4b496869b2877a547e11c5f6a873f164f0a4ff4efce141e7aecbaeb9ef505073fcd6fc64a9a40b3cb834c5da67398b21f8e3c0cf313292ab322a2bf6ad634d93441b78d296eab20472274c6a14057ae01b18bd3996486fcc528b60b30eac944b5e332a99d959e1512eb7aa42e05c522fdce8ce32a24c75ded38b0fc6fd11bddcc3af6fcc4fc0d440ac301f2fe5285474fd9acd488f7074e1c0d02cbb5005aaa24d27682344d36fa44e4f1f0782d12cdf43784ae2a2dfdbdb7dea2ade049e02a78021464e159a97e2bf471c6ee64284f57542ee9a8532941b479255056d4654cf1c2f491558c85012db7b41265d22e12bb340dee3692ad96b114c0"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000000)={0x1}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfs', 0x3440, 0x44) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0), 0x2140, 0x0) (async) mount_setattr(r2, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x1, 0x0, 0x100000}, 0x20) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) (async) mq_open(&(0x7f00000000c0)='.,(]@]]%,\x00', 0x0, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000340)={r4, 0x0, r5, 0x9, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000300)=r4) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) setns(r0, 0xaeaca7421e2c0056) (async) mount_setattr(r1, &(0x7f0000000380)='./file0\x00', 0x1900, &(0x7f00000003c0)={0x81, 0x8, 0x100000, {r2}}, 0x20) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x210040, 0x3) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xbc, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="85616466000000000800000000ff000001000000000000001a00000000000000856164660000000007000000000000007f000080000000003c00000000000000852a6873010000000100"/88], &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="852a62770a00000003000000000000000000000000000000852a68773a3bc1b803000000000000000000000000000000852a62730001000003000000000022000000000000000000"], &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @enter_looper, @request_death={0x400c630e, 0x3}], 0x1000, 0x0, &(0x7f0000001a40)="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"}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000000)={0x1}) (async) 00:44:11 executing program 0: semget(0x3, 0x600, 0x0) semget$private(0x0, 0x1, 0x20) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4e}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ba84721ecf1888d3e36df5ad98513d52"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10000011) 00:44:11 executing program 2: bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x7, 0x46, 0xc1}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e, 0x6, &(0x7f00000000c0)={r0, r1+10000000}) semget(0x3, 0x0, 0x0) 00:44:11 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/tpm_crb', 0x101080, 0x12) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc673, 0x7a}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x60}, 0x1, 0x0, 0x0, 0xa4}, 0x404c010) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r6}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008011) semget(0x3, 0x0, 0x8) (async) r7 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) semctl$SEM_STAT_ANY(r7, 0x0, 0x14, &(0x7f0000000000)=""/235) 00:44:11 executing program 1: socketpair(0x18, 0x2, 0xe53, &(0x7f0000000040)) socketpair(0x26, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0xa18, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000003) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x5c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8f}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0f691421914b"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "675751356da4"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd7000fddbdf25310000000800010054000000ff4df0bf", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 00:44:11 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0406149a64451ec7eb3ef8fc11704b35ffba521b6686ebdf657ff52da1b1ee7435153e6d45b18d3cafc3915d84526542958175d58e976e067e12e472dd32c36cdcba73a7eda96205705ab4b96386272a34d46d819035670a5565692c49d49b13d7fb4afd90f69ff3472e28791897b65c4b3010e409b3e28949e8fea579b051ba08de3744b681b5d0d294a30191a67a060025be2097f358775fab25fa66b86606d28dd21c8407d106488b48d8fcd5ac1472cbcee9c06b5cd38358d0b300d5ef9e0de54b56720e81f59584f35a1fa9f6f679563da07519dbf5595100000000"], 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0406149a64451ec7eb3ef8fc11704b35ffba521b6686ebdf657ff52da1b1ee7435153e6d45b18d3cafc3915d84526542958175d58e976e067e12e472dd32c36cdcba73a7eda96205705ab4b96386272a34d46d819035670a5565692c49d49b13d7fb4afd90f69ff3472e28791897b65c4b3010e409b3e28949e8fea579b051ba08de3744b681b5d0d294a30191a67a060025be2097f358775fab25fa66b86606d28dd21c8407d106488b48d8fcd5ac1472cbcee9c06b5cd38358d0b300d5ef9e0de54b56720e81f59584f35a1fa9f6f679563da07519dbf5595100000000"], 0x7) (async) 00:44:12 executing program 2: bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x7, 0x46, 0xc1}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e, 0x6, &(0x7f00000000c0)={r0, r1+10000000}) (async) semget(0x3, 0x0, 0x0) 00:44:12 executing program 0: semget(0x3, 0x600, 0x0) (async) semget$private(0x0, 0x1, 0x20) (async) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4e}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ba84721ecf1888d3e36df5ad98513d52"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10000011) [ 2589.062106][ T24] audit: type=1326 audit(1643417052.101:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20111 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe35248059 code=0x0 00:44:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1d}, @l2cap_cid_signaling={{0x19}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8}}, @l2cap_disconn_rsp={{0x7, 0xf9, 0x4}, {0x5, 0xa0}}, @l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x0, 0x6, 0xff}}]}}, 0x22) 00:44:12 executing program 1: socketpair(0x18, 0x2, 0xe53, &(0x7f0000000040)) (async, rerun: 64) socketpair(0x26, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0xa18, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000003) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x5c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8f}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0f691421914b"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "675751356da4"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd7000fddbdf25310000000800010054000000ff4df0bf", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (rerun: 32) 00:44:12 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/tpm_crb', 0x101080, 0x12) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc673, 0x7a}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x60}, 0x1, 0x0, 0x0, 0xa4}, 0x404c010) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r6}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008011) semget(0x3, 0x0, 0x8) (async) r7 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) (async) semctl$SEM_STAT_ANY(r7, 0x0, 0x14, &(0x7f0000000000)=""/235) 00:44:12 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async, rerun: 64) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfs', 0x3440, 0x44) (rerun: 64) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0), 0x2140, 0x0) mount_setattr(r2, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x1, 0x0, 0x100000}, 0x20) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) mq_open(&(0x7f00000000c0)='.,(]@]]%,\x00', 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)={0x0}) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x7f, 0xe1f0}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000340)={r4, 0x0, r5, 0x9, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000300)=r4) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setns(r0, 0xaeaca7421e2c0056) (async) mount_setattr(r1, &(0x7f0000000380)='./file0\x00', 0x1900, &(0x7f00000003c0)={0x81, 0x8, 0x100000, {r2}}, 0x20) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x210040, 0x3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xbc, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="85616466000000000800000000ff000001000000000000001a00000000000000856164660000000007000000000000007f000080000000003c00000000000000852a6873010000000100"/88], &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="852a62770a00000003000000000000000000000000000000852a68773a3bc1b803000000000000000000000000000000852a62730001000003000000000022000000000000000000"], &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @enter_looper, @request_death={0x400c630e, 0x3}], 0x1000, 0x0, &(0x7f0000001a40)="c01b242271d52cd8cce1e7110f596eabc8d12340b08a2fb4841e2cbeddb5f71fc1f92346e83c09d63b9b79a326f176f0da82865b8ad21c65b7b319b44139fd04830746f77edde4cca28a8111c54046afdcb6f6f347b243d56ba76b7ccc338278113d6ed92622b3d9962f91b4237c8ee8a9f9049c43ec58c7c47b40b851d412d6c324541b714433588004e2a5846f1b2b9172e95ed7ff47816328ea6f85c08fded7221cac6f7d2a46039c121b3d732d1c5ac4bb28fadb9748d1da89d0bff91cbbed53c77e875310c153a6c79b1bf3ed7fe590ee7895f808618dacc340b8fb311c08559d53fe7837a88b8c814afb7329226f77e1ba35c35d309d97826571be46bc1ce533c4a45ebbc72d385c356c951e5308f7c1de85220eaea9c709e8ea2c07387b2def71562db724b9eb1f8a99a22e7e6e78444d42e6bec033bd3e2f858f47136267e819336e7595dd767bc6892201b85140dc7fd7c0b9a7dedb6c5989b231df386db324107d88a6d83ee1d8aa8b15360285f522ebd1ff2e43772fe1e27fbb48a99b79aaba2c2a28145f799a0b2d05ea5bd4bc5e332ddb9195c9867f3c338767e667373c4567d1c7a921775b7a80c586819129a2e77681225b9f6a83dd5cb9ff307f67f4bec5f2a6c58403abe457670d27801c1858aefbf37195498a6fcf477289745a98004f21002cad9778e48d31c7e8129b0142b4ff355e01dbc079662ffecd590e15b73da30f2e08cc2af9e80bd970d11d92c22a9612f129a223c2e31fbbd063d2bd287db88c87ee4b594c3aff4bfc85f691fdf7060f50c3c4d1b3f3ef519ddea0ccabe60c91173123025d7d52fc4d0dbd46f09df2ced35d038a70afb8c1d375624e5504998689c5ec7cb2f85dfab05bae64ae40320dc405fdbf8ea1aad73025cbdd5ff4a73bcabc1a56d3597095cb30f7037cd791e2db2d14bad3083288f2a1cc3a3b18f97e1c16db4bc082e3631ddd5a7fee883c3c6f159d438ffcf8d6c4ef6b50c49a4f1851ed538e006b4562f8341caae1168db721053d5480f62d2a317c9c8e5d8b077bf8533acdfa8afbd9e472d2319847d18428161d1d39746c08ea05bf0b7e6dfb02d2701d1933a7828ac2898108f04e8574e9b7d88b2415a3f82d374fa5e6d2ebe9b9b8c4be17af62044bbfdb67b530df46384b2f04547d5707a199d8f509359f929bd10ebf45dc155fc87e99d5900816aa289a9694c1a3396ee280d161a4ab641f063092701f8f02c1b99553e87063b3434d92add7a8ba31d927a0cd04916564ecf9e4909661bc20194f74730ec41db5daf809ec9fe51a6dd3fdb3492a72f26d6f5856f39edcd4c183c8cf21a3fbf5bfd859897065fdf1621bd1d1026bfd772e157b50ed47cea433fa5cba125721c4c9938f81cf360dbbb4effe71ded7d60c3fa1169aa0488285e189ffeddad0bc381d9c457ed3770181f2e2401caf1898690f7ba5a071979dfefaee9a14a7a681008f57a23cf4fb76eda6b20a297e3fcee2f44af9ed63bde28c23ca794a4fa754e1c65c7e0243348e5f21eb78a658dcb7d6300bf4d0c314928545401a3d9b1baa096afe947691872574dbe3b8d6935012331845b2f4c48f7ccc7caa3fff13938b3abe5548a95455533e4ad3248b537c6529ef3a3299ebfa11a8062d5e1e31cbfc9875b5afbdb5438a510dbdf7f0411ef4d1aecc0c1c0b491c3817bae0baf939c765c041cc5ce0644d959695f82b1e76a8947c499d4506225e5beb13767f35b1ab3084f31a780f7ce9797b63202797714cc9ff944faad8a2907e517f1ff6755bae68ee1acf2a557351b40ed42bcb2715e8b6b639b221ca93f9e4e510bf9a9b9da0d5a67f9043e4019396d5bfde06646b41d118e144f6caf466bb4f9fe726d45f565b9916503642e3b410b7544615d8ac335b5dbeb0b9d03ebf8938065e4bd7f024895b592111edfc88ff8d3045da481988a50c3c6eb290c52ea8ff9e6d3adf849e98a702fd8b7fe9a520c5aae18fa5f9667724770e0d676c05b542969300f308ac45702885619e407869afa7c737133b009c2a1086be7dfa1fa0b0d63c91c6d1270b7bd766a3b0ccec56a6f93bb21c9ee52c85c7725fccfff44f564f2a4c138eda5bd8c9db4b1dafdd8f3513b44484c716101c7dd7aa0e71390992cbd793365c8f01a4f89d3b49bebdfd514f326820e84d1bd84771c2c832481237d7a44c6f220ba88e10c32286c8855c00b7e2c2069914cfea21cf7e8ab3a5c6903279f05d86300a64a863132cd8b01aaa4e11c6fdab6b95fdb0b1f07ec4689699b64120e595e550f7a23d8430d2c0b26b78220d63705a340401f993a88bfb83ed2744ec81ca1918fcae7963ad06b2d55b0ac7eb79ae6793e3a0ef60486276c8ea3ef43036f9db2dd3a27a5242f6cb27a1bb3decdcaadfdd5064f8497630c5bda9cae56253bd456a9abf871845a26ffb8369add0e1d90440512dcc2b332d986900e5f94e46a8d9a382ce70c6b51f3d3f237bdb7ec879b8ca960a63c7452e57e3bc9331e50f805f8cc5cc3a8dee99c247c78abb19b22b2d3eceb014a88566f6d5b7310a2ca2e84e0d5ca5a3512716c8dea73002c2c318b787f12b56c945e524716f77361873b2c999c3059adffa742c2129b1591162a94f2f9eb4523bb6bd56019ac9448721ac145ab0ccdb0664cf78776ac4826936cd4b9c8aaac408172ab7a5c22b13beab044500b39444dd943b21d142cb2ea958c29c32fa41a4435714c1027442309c4acf0a01a933d63143fc722e1d3153cddd6a5538eb845c4b90027f032dff0614dd00333b367275e645fe2f53edeea42e7bdb6351a7097117dd744b6f99f0a38c548071ab424eb84b15d84d5d13e2749f48ac1ffd1b90dcd832bad580d6b67bce8774bf28f21b6c0207bd97078b83cb45210f1c8a9c4c8ab8870e39731d041b81ead936a8153553c57571bc9ccff2e427ca8815d3d5ce0470511b661e2ed27c16509e748f51cd7773782274598423bbbadf8ac2e6169aafa951347ebfec0144906df1abf3273cf09cfa73baa851cc32656f6ec7eca1218fa439ace1b04e0e11f18c4276d9ac4dcc4ad09d86b75ca4ed1957bfd330228312cf903a02b203bbbc8b2f88cc00db5d54d11b082e6b5085092e47b66507b15a2455f6ac920ce45f523962c2ba4cdb29088c1e50b4eb7c4f0d6a843734373c2f051d7141811d7b32db25f895f46000206c1f1e9049a67961db1c3bbb13554c32ae01ae8ca1389c0712ab9923daf3a096e21fcefee1773b13a3577967520f8deb65e232cd7b41d171e51f02677ab74a2464d05af709bcdccad4fd5bee1a88d5e16186f20edabd82c9412acfa42b97a24595ba908f5a899a0a50459009680a9ab595bca2cf0631edb609ca3a3f1688b251279d42137b464aa81af6bb9a307aa43ce57502f14971d95bf9d54ebd7c24914473b6bb018b89e151d0d50943ca68050217112ff50ef52f93bc60cb21589735bc620d44bd5b2c635dcd1e357eb86bb52d990b8f7209c935950d2ada5c1015d48d6189246e23fdd167c88907ad5f45f69f311fb7d5f677178f0eb86eca38e8cc810d9a599212c4e9a9db33e894c8efa1a564c433df93bee9aafd26ec45bcbd892363f2fd20babe69efd4f015ee5cc677fce172214e020e7642278058aca2888202d2aae16220692f769f61fa66b821c0bb3c4244a666a2ad7f57297ecc9a5cd68e2d775f406bed9ff76889d7efa147277e1ec874650f304015d9d7ba4f325b2606b79d7a3ad692b4b9fb2bda57c9b2d43c09afab7b87984a662a04d0f24246b0f7015ae6bf8d1864be82c35d639151f396b5c5d22120ba5b5e6721737dd31b357c768f34a44f9318ea4e9cea8e076f31e566b441c27c482da7ed3a0fe172dfa7a5ca947e491a5b9567fb7c99a248b13663329b36061f710be25854cb7d870b92c3ea02bd3d8d531b04a9667842fa5b6bde509dd45c44167fa5340abcb495a34cf6767fcc624be444f2d945dd514d6e18ad78599e902d9f1ebb2937b3d03a37ef7f89ffc3d63a7e5e84adacb88de4dfb8872043ec62809b9b0a9c98f6efc7b8422ddb5ad28e4ce003899b92e59121e68e858fdc03017807f5b2a301adb1e242dd0a9eecc655dc4b43e36d523e0c5fbf468be9ea6af57ba8049ad8fd92540e13d7390d64a7b53863631f6385f3ea7a1827117ef368c17c10e1a5e8526889fa3497895045542cabbac5aca3f82bdc886ed1cb38185f3bd53c4921b589db0117b9c15982a8c8bc08c6f0489ea9d43f5b161c8c1bcc85c8bbf4b68e3c493a16c7d9f6aa1aed9cc19000c3dcb8629895e58c0ea9d51af8cb32bce6d8657587d1da2f18ceec945a2f88a7744cc36a8974204ad1e60205f2d62b8079511db4a1ed6621fb79369dc8c28dfe06e74430e4121531d6219f40d5b94d510e6c3d1b76f175b060c5227ad6ff266944763e842dbede695da6f20e39654c368b01b088d7a14fab0af2778dfcbec0e1f7caa2b9ef0a77593fbf7cc03bc964538e6b64c5ffe195e1c21936ca4c8b5eaa1ea4fbd3644b76cfcf137b510a0d57e5e2ba49e1528d4750a75589de34d4af1c08492fbf4109d122b3b552c5ab645debd09e845d475d37ae748868b35235ce8af6444d8fe0a5b4ecf6cb092e234f55532c1b4d6f9b17850b0e1de7018b13e01fb239529aaccc67bb70ab6fec0ebc7ceb5e2afe2ce06cb11b0884390abe475e4ba6347450038f410b147e822d57d777b64f6187d24bfb54c8f09b7a804f0c31c1e874ceb656e99f9d852e156ca4e73499e15f3b10ad6c1ea8f4c1245c7e620d6955b7d3b65e714ce18fb163f6d61a15a60e7981fb39c3612b60d426be708549902964468dd925106758834c161d2a5dde9d200155892a4167d9c9bf40967547c2d83b181c53e3c04d69e35c222dcc26fab5ba3cf2c32b04b8fcab6e4de057ee5b6f7e4c2e737474d6d636318ddfacdca4ceab4bdc70244caf2c51a2181a87b0a1cf3df1c369a61d7e395e72d3a8cdded324ce42dfe4efb98b25032fb0e45cb2b97390a0415a1530ad1d8c114fc30823c1c49a8cba24a700ff44c1f0c419b97742980122290868da82e7419c98469384a76d5bbd4f511b49026597264aea609e68ffee0a5c12a61170550b6700480a01e84f25bd09cc1ec39648a01bb12e34e8f77699c1d4a693f82c52c9db1c28b11ef442bb2d5a8738a065b07c46be265fc289f3d1e30a705a0d321162da18959b05c3e24618e77b40460ce18f2014d9ab2864c5e251e6679f5b1888780994fae4c6552f15578e0ec99421138b5d322154356b70f43f6ab0a194625eefb9a8b32d8e795c1f0724d0c21f7fc84dc42e4ba08ed36f70643ae6e87e8b6ea911dde27edb3e0c3403f0a4fe88df976f28bf5e0778fc771fa2a62a5abe889fa0553abe3b419573bc72f2cea166d803a66b452372242c0bf359cec4f5c9b4b496869b2877a547e11c5f6a873f164f0a4ff4efce141e7aecbaeb9ef505073fcd6fc64a9a40b3cb834c5da67398b21f8e3c0cf313292ab322a2bf6ad634d93441b78d296eab20472274c6a14057ae01b18bd3996486fcc528b60b30eac944b5e332a99d959e1512eb7aa42e05c522fdce8ce32a24c75ded38b0fc6fd11bddcc3af6fcc4fc0d440ac301f2fe5285474fd9acd488f7074e1c0d02cbb5005aaa24d27682344d36fa44e4f1f0782d12cdf43784ae2a2dfdbdb7dea2ade049e02a78021464e159a97e2bf471c6ee64284f57542ee9a8532941b479255056d4654cf1c2f491558c85012db7b41265d22e12bb340dee3692ad96b114c0"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000000)={0x1}) 00:44:12 executing program 2: bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x7, 0x46, 0xc1}, 0x10) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0x7e, 0x6, &(0x7f00000000c0)={r0, r1+10000000}) (async, rerun: 64) semget(0x3, 0x0, 0x0) (rerun: 64) 00:44:12 executing program 0: semget(0x3, 0x600, 0x0) semget$private(0x0, 0x1, 0x20) (async) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4e}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ba84721ecf1888d3e36df5ad98513d52"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10000011) 00:44:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1d}, @l2cap_cid_signaling={{0x19}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8}}, @l2cap_disconn_rsp={{0x7, 0xf9, 0x4}, {0x5, 0xa0}}, @l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x0, 0x6, 0xff}}]}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1d}, @l2cap_cid_signaling={{0x19}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8}}, @l2cap_disconn_rsp={{0x7, 0xf9, 0x4}, {0x5, 0xa0}}, @l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x0, 0x6, 0xff}}]}}, 0x22) (async) 00:44:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c841}, 0x20008800) semget(0x3, 0x0, 0x0) [ 2589.676364][ T24] audit: type=1326 audit(1643417052.721:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe35248059 code=0x0 00:44:12 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:12 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) socketpair(0x3, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$phonet(r1, &(0x7f0000000040)=""/236, 0xec, 0x40012020, 0x0, 0x0) semget(0x3, 0x4, 0x0) 00:44:12 executing program 1: socketpair(0x18, 0x2, 0xe53, &(0x7f0000000040)) socketpair(0x26, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0xa18, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000003) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x5c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8f}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0f691421914b"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "675751356da4"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd7000fddbdf25310000000800010054000000ff4df0bf", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0x18, 0x2, 0xe53, &(0x7f0000000040)) (async) socketpair(0x26, 0x1, 0x5, &(0x7f0000000000)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0xa18, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000003) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x5c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8f}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0f691421914b"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "675751356da4"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd7000fddbdf25310000000800010054000000ff4df0bf", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) 00:44:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1d}, @l2cap_cid_signaling={{0x19}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8}}, @l2cap_disconn_rsp={{0x7, 0xf9, 0x4}, {0x5, 0xa0}}, @l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x0, 0x6, 0xff}}]}}, 0x22) 00:44:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c841}, 0x20008800) semget(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c841}, 0x20008800) (async) semget(0x3, 0x0, 0x0) (async) 00:44:13 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:13 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) socketpair(0x3, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$phonet(r1, &(0x7f0000000040)=""/236, 0xec, 0x40012020, 0x0, 0x0) (async) semget(0x3, 0x4, 0x0) 00:44:13 executing program 3: r0 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="2a6a4ca20a70d5fd54c3b804e70e42272f032767d714a151b7014cd7a2a3d34a26a9c1d0f966fbb09ea525a8a217fd224be5946c821967932091aa8a65e6c57643664c60082099a4", 0x0, 0x48) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:13 executing program 5: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000001040)=""/148) semctl$SETVAL(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)=0x1) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000040)=""/4096) 00:44:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c841}, 0x20008800) semget(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c841}, 0x20008800) (async) semget(0x3, 0x0, 0x0) (async) 00:44:13 executing program 1: socketpair(0xb, 0x4, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)) 00:44:13 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:13 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) socketpair(0x3, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$phonet(r1, &(0x7f0000000040)=""/236, 0xec, 0x40012020, 0x0, 0x0) semget(0x3, 0x4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) (async) socketpair(0x3, 0xa, 0x3, &(0x7f0000000000)) (async) recvfrom$phonet(r1, &(0x7f0000000040)=""/236, 0xec, 0x40012020, 0x0, 0x0) (async) semget(0x3, 0x4, 0x0) (async) 00:44:13 executing program 2: semget(0x2, 0x2, 0x51c) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x2000) 00:44:13 executing program 1: socketpair(0xb, 0x4, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)) 00:44:13 executing program 5: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) (async) semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000001040)=""/148) (async) semctl$SETVAL(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)=0x1) (async) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000040)=""/4096) 00:44:13 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pch_udc', 0x2, 0x8f) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x800) semget(0x2, 0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x481) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000000)=""/24) 00:44:13 executing program 0: semget(0x3, 0x600, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:13 executing program 3: r0 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="2a6a4ca20a70d5fd54c3b804e70e42272f032767d714a151b7014cd7a2a3d34a26a9c1d0f966fbb09ea525a8a217fd224be5946c821967932091aa8a65e6c57643664c60082099a4", 0x0, 0x48) (async, rerun: 64) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (rerun: 64) 00:44:14 executing program 2: semget(0x2, 0x2, 0x51c) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x2000) semget(0x2, 0x2, 0x51c) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x2000) (async) 00:44:14 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pch_udc', 0x2, 0x8f) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x800) (async) semget(0x2, 0x0, 0x0) (async) r2 = semget$private(0x0, 0x1, 0x481) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000000)=""/24) 00:44:14 executing program 1: socketpair(0xb, 0x4, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)) 00:44:14 executing program 5: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) (async) semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000001040)=""/148) (async) semctl$SETVAL(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)=0x1) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000040)=""/4096) 00:44:14 executing program 0: semget(0x3, 0x600, 0x0) (async) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:14 executing program 1: socketpair(0x29, 0x2, 0x802, &(0x7f0000000040)) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/image_size', 0x8000, 0x84) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf99013b913d91ce866d5532ae2c49250a0000000c009900877e00002c00000004002800"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 00:44:14 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pch_udc', 0x2, 0x8f) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x800) (async) semget(0x2, 0x0, 0x0) (async) r2 = semget$private(0x0, 0x1, 0x481) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000000)=""/24) 00:44:14 executing program 3: r0 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="2a6a4ca20a70d5fd54c3b804e70e42272f032767d714a151b7014cd7a2a3d34a26a9c1d0f966fbb09ea525a8a217fd224be5946c821967932091aa8a65e6c57643664c60082099a4", 0x0, 0x48) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:14 executing program 5: landlock_create_ruleset(&(0x7f0000000040)={0xc4}, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) 00:44:14 executing program 0: semget(0x3, 0x600, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semget(0x3, 0x600, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) 00:44:14 executing program 2: semget(0x2, 0x2, 0x51c) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x2000) (rerun: 64) 00:44:14 executing program 1: socketpair(0x29, 0x2, 0x802, &(0x7f0000000040)) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/image_size', 0x8000, 0x84) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf99013b913d91ce866d5532ae2c49250a0000000c009900877e00002c00000004002800"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 00:44:14 executing program 4: semget(0x3, 0x0, 0x94) 00:44:14 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0xf1}, 0x20) [ 2591.752787][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:14 executing program 5: landlock_create_ruleset(&(0x7f0000000040)={0xc4}, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) 00:44:15 executing program 4: semget(0x3, 0x0, 0x94) 00:44:15 executing program 1: socketpair(0x29, 0x2, 0x802, &(0x7f0000000040)) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/image_size', 0x8000, 0x84) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf99013b913d91ce866d5532ae2c49250a0000000c009900877e00002c00000004002800"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) socketpair(0x29, 0x2, 0x802, &(0x7f0000000040)) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/image_size', 0x8000, 0x84) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf99013b913d91ce866d5532ae2c49250a0000000c009900877e00002c00000004002800"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) 00:44:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x100}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}}, 0x4091) semget(0x3, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000000)=""/4096) r3 = semget$private(0x0, 0x1, 0x100) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000001000)=""/29) r4 = semget$private(0x0, 0x1, 0x80) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000001040)) [ 2591.990095][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:15 executing program 5: landlock_create_ruleset(&(0x7f0000000040)={0xc4}, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) 00:44:15 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0xf1}, 0x20) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0xf1}, 0x20) (async) 00:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00d96624ab0ed8654f2d69a8d132d9aad8497d718c73a90ba2cf327bb93ec7e477b25a7ca6184c5a24a56f1c6fa8600394ae364f4550345fa94f90c59fca111e83dac086ebc68b82058d47a1e1cc0debc0721874c79efab9760476c5ff286b0e26e08b35c37ef1a271618d1127869e01ed4109624bc5e3577b28a661ecc9ea1d05ea5ed5c97bf7a2647546ca5bbd5df697495da2a273736115583908d262", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x70}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0x6, 0x0, @random="dc9f"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x4}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x68}}, 0x10000010) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48081}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x33}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/arvo', 0x200080, 0x88) semget(0x3, 0x600, 0x0) [ 2592.267220][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:15 executing program 4: semget(0x3, 0x0, 0x94) semget(0x3, 0x0, 0x94) (async) 00:44:15 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04cd475d4849861a8dc7d895534ac7e5e0039387f5f3cf21cc93"], 0x7) 00:44:15 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0xf1}, 0x20) 00:44:15 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mq_timedsend(r0, &(0x7f0000000000)="81a224aae2a5441e9650e49601c6bf4924b39a573c1f573e7484a28961c5919d27395ab9ec355914", 0x28, 0x6c, &(0x7f0000000080)={0x0, 0x3938700}) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x100}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}}, 0x4091) (async) semget(0x3, 0x0, 0x0) (async) r2 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000000)=""/4096) r3 = semget$private(0x0, 0x1, 0x100) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000001000)=""/29) (async) r4 = semget$private(0x0, 0x1, 0x80) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000001040)) 00:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/mnt\x00') (async, rerun: 32) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00d96624ab0ed8654f2d69a8d132d9aad8497d718c73a90ba2cf327bb93ec7e477b25a7ca6184c5a24a56f1c6fa8600394ae364f4550345fa94f90c59fca111e83dac086ebc68b82058d47a1e1cc0debc0721874c79efab9760476c5ff286b0e26e08b35c37ef1a271618d1127869e01ed4109624bc5e3577b28a661ecc9ea1d05ea5ed5c97bf7a2647546ca5bbd5df697495da2a273736115583908d262", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x70}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0x6, 0x0, @random="dc9f"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x4}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x68}}, 0x10000010) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48081}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x33}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/arvo', 0x200080, 0x88) (async) semget(0x3, 0x600, 0x0) 00:44:15 executing program 4: r0 = semget(0x3, 0x3, 0x610) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000000)=""/194) 00:44:15 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40c000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x5, 0x4010, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x0, {r1}}, 0x20) 00:44:15 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04cd475d4849861a8dc7d895534ac7e5e0039387f5f3cf21cc93"], 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04cd475d4849861a8dc7d895534ac7e5e0039387f5f3cf21cc93"], 0x7) (async) 00:44:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x100}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}}, 0x4091) semget(0x3, 0x0, 0x0) (async) r2 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000000)=""/4096) (async) r3 = semget$private(0x0, 0x1, 0x100) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000001000)=""/29) (async) r4 = semget$private(0x0, 0x1, 0x80) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000001040)) 00:44:15 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mq_timedsend(r0, &(0x7f0000000000)="81a224aae2a5441e9650e49601c6bf4924b39a573c1f573e7484a28961c5919d27395ab9ec355914", 0x28, 0x6c, &(0x7f0000000080)={0x0, 0x3938700}) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) mq_timedsend(r0, &(0x7f0000000000)="81a224aae2a5441e9650e49601c6bf4924b39a573c1f573e7484a28961c5919d27395ab9ec355914", 0x28, 0x6c, &(0x7f0000000080)={0x0, 0x3938700}) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) 00:44:15 executing program 4: r0 = semget(0x3, 0x3, 0x610) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000000)=""/194) semget(0x3, 0x3, 0x610) (async) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000000)=""/194) (async) 00:44:16 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40c000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x5, 0x4010, r0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x0, {r1}}, 0x20) 00:44:16 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04cd475d4849861a8dc7d895534ac7e5e0039387f5f3cf21cc93"], 0x7) 00:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) (async, rerun: 32) r3 = gettid() (rerun: 32) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00d96624ab0ed8654f2d69a8d132d9aad8497d718c73a90ba2cf327bb93ec7e477b25a7ca6184c5a24a56f1c6fa8600394ae364f4550345fa94f90c59fca111e83dac086ebc68b82058d47a1e1cc0debc0721874c79efab9760476c5ff286b0e26e08b35c37ef1a271618d1127869e01ed4109624bc5e3577b28a661ecc9ea1d05ea5ed5c97bf7a2647546ca5bbd5df697495da2a273736115583908d262", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x70}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0x6, 0x0, @random="dc9f"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x4}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x68}}, 0x10000010) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async, rerun: 32) r5 = gettid() (rerun: 32) syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48081}, 0x40) (async) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x33}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/arvo', 0x200080, 0x88) (async) semget(0x3, 0x600, 0x0) 00:44:16 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mq_timedsend(r0, &(0x7f0000000000)="81a224aae2a5441e9650e49601c6bf4924b39a573c1f573e7484a28961c5919d27395ab9ec355914", 0x28, 0x6c, &(0x7f0000000080)={0x0, 0x3938700}) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:16 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x4]) 00:44:16 executing program 4: r0 = semget(0x3, 0x3, 0x610) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000000)=""/194) 00:44:16 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40c000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x5, 0x4010, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x0, 0x0, {r1}}, 0x20) 00:44:16 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000001, 0x50, 0xffffffffffffffff, 0x0) 00:44:16 executing program 2: semget(0x3, 0x0, 0x0) (async) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x4]) 00:44:16 executing program 1: socketpair(0x29, 0x2, 0x7fe, &(0x7f0000000040)) 00:44:16 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = semget(0x1, 0x4, 0x214) semop(r1, &(0x7f0000000000)=[{0x4, 0x5, 0x1000}, {0x0, 0x9, 0x800}, {0x1, 0x5, 0x1000}], 0x3) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/212) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000140)=""/211) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) [ 2593.527937][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:16 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:16 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000001, 0x50, 0xffffffffffffffff, 0x0) 00:44:16 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x4]) semget(0x3, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x4]) (async) 00:44:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x400000c}, 0x8005) semget(0x3, 0x600, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x168, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x8b, 0x5}, {0x15}, {0x9, 0x3}, {0x8e, 0x7}, {0xfd, 0x6}, {0x1f, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0xff, 0x5}, {0x0, 0x6}, {0x9, 0x4}, {0xa0, 0x6}], "b352613b133991ad"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x5}, {0x9}, {0x3, 0x5}, {0x8, 0x1}, {0x80, 0x6}, {0x0, 0x2}, {0x1}], "f9c8318b29413bc7"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x3, 0x2}, {0x90, 0x7}], "f93a6485b8ccfcdc"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x90, 0x6}, {0x0, 0x4}, {0x3f, 0x6}, {0x5, 0x7}, {0x20, 0x1}], "d9018acd279fe20f"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xff}, {0x3, 0x5}, {0x80, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x3}, {0xf2, 0x3}, {0x20, 0x6}, {0x3f, 0x5}, {0xff, 0x3}], "22d58780d3c9c44e"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xff, 0x5}, {0xb8, 0x6}, {0x5, 0x5}, {0x9, 0x5}, {0x2, 0x2}, {0x6, 0x4}, {0x9, 0x1}, {0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x79, 0x2}, {0x5, 0x3}], "e58900a639298e0f"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3}, {0x5b}, {0x9, 0x2}, {0x6, 0x6}, {0x2, 0x1}], "8e171d4ffb7421d2"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x0, 0x2}, {0x6, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x9, 0x4}, {0xff, 0x4}, {0x4, 0x1}, {0xcb, 0x7}, {0xff, 0x5}], "cf7d362f1e17909a"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x81, 0x4}, {0x9, 0x4}, {0x7, 0x4}, {0xc3, 0x7}, {0x8, 0x3}, {0x20, 0x2}, {0x1f, 0x7}, {0x4, 0x1}, {0x80, 0x6}, {0x0, 0x2}, {0x63, 0x6}, {0x8, 0x1}, {0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x25, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0xff, 0x1}, {0x1}], "a83a81b00b7bed00"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x81, 0x5}, {0x20, 0x4}, {0x8, 0x5}, {0x4, 0x7}, {0x8, 0x3}, {0x9}, {0x3f, 0x7}, {}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x4}, {0x4}, {0x0, 0x1}, {0x4, 0x4}, {0xf8, 0x3}, {0x8, 0x5}, {0x3f}], "acfc525d09066dce"}}]}, 0x168}, 0x1, 0x0, 0x0, 0x882}, 0x400c000) 00:44:16 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = semget(0x1, 0x4, 0x214) semop(r1, &(0x7f0000000000)=[{0x4, 0x5, 0x1000}, {0x0, 0x9, 0x800}, {0x1, 0x5, 0x1000}], 0x3) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/212) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000140)=""/211) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semget(0x3, 0x0, 0x0) (async) semget(0x1, 0x4, 0x214) (async) semop(r1, &(0x7f0000000000)=[{0x4, 0x5, 0x1000}, {0x0, 0x9, 0x800}, {0x1, 0x5, 0x1000}], 0x3) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/212) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000140)=""/211) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) 00:44:16 executing program 1: socketpair(0x29, 0x2, 0x7fe, &(0x7f0000000040)) socketpair(0x29, 0x2, 0x7fe, &(0x7f0000000040)) (async) [ 2593.949934][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:17 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) 00:44:17 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000001, 0x50, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000001, 0x50, 0xffffffffffffffff, 0x0) (async) 00:44:17 executing program 2: semget(0x3, 0x0, 0x5f) 00:44:17 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = semget(0x1, 0x4, 0x214) semop(r1, &(0x7f0000000000)=[{0x4, 0x5, 0x1000}, {0x0, 0x9, 0x800}, {0x1, 0x5, 0x1000}], 0x3) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/212) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000140)=""/211) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semget(0x3, 0x0, 0x0) (async) semget(0x1, 0x4, 0x214) (async) semop(r1, &(0x7f0000000000)=[{0x4, 0x5, 0x1000}, {0x0, 0x9, 0x800}, {0x1, 0x5, 0x1000}], 0x3) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/212) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000140)=""/211) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) 00:44:17 executing program 1: socketpair(0x29, 0x2, 0x7fe, &(0x7f0000000040)) socketpair(0x29, 0x2, 0x7fe, &(0x7f0000000040)) (async) 00:44:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x400000c}, 0x8005) semget(0x3, 0x600, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x168, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x8b, 0x5}, {0x15}, {0x9, 0x3}, {0x8e, 0x7}, {0xfd, 0x6}, {0x1f, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0xff, 0x5}, {0x0, 0x6}, {0x9, 0x4}, {0xa0, 0x6}], "b352613b133991ad"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x5}, {0x9}, {0x3, 0x5}, {0x8, 0x1}, {0x80, 0x6}, {0x0, 0x2}, {0x1}], "f9c8318b29413bc7"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x3, 0x2}, {0x90, 0x7}], "f93a6485b8ccfcdc"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x90, 0x6}, {0x0, 0x4}, {0x3f, 0x6}, {0x5, 0x7}, {0x20, 0x1}], "d9018acd279fe20f"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xff}, {0x3, 0x5}, {0x80, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x3}, {0xf2, 0x3}, {0x20, 0x6}, {0x3f, 0x5}, {0xff, 0x3}], "22d58780d3c9c44e"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xff, 0x5}, {0xb8, 0x6}, {0x5, 0x5}, {0x9, 0x5}, {0x2, 0x2}, {0x6, 0x4}, {0x9, 0x1}, {0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x79, 0x2}, {0x5, 0x3}], "e58900a639298e0f"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3}, {0x5b}, {0x9, 0x2}, {0x6, 0x6}, {0x2, 0x1}], "8e171d4ffb7421d2"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x0, 0x2}, {0x6, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x9, 0x4}, {0xff, 0x4}, {0x4, 0x1}, {0xcb, 0x7}, {0xff, 0x5}], "cf7d362f1e17909a"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x81, 0x4}, {0x9, 0x4}, {0x7, 0x4}, {0xc3, 0x7}, {0x8, 0x3}, {0x20, 0x2}, {0x1f, 0x7}, {0x4, 0x1}, {0x80, 0x6}, {0x0, 0x2}, {0x63, 0x6}, {0x8, 0x1}, {0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x25, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0xff, 0x1}, {0x1}], "a83a81b00b7bed00"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x81, 0x5}, {0x20, 0x4}, {0x8, 0x5}, {0x4, 0x7}, {0x8, 0x3}, {0x9}, {0x3f, 0x7}, {}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x4}, {0x4}, {0x0, 0x1}, {0x4, 0x4}, {0xf8, 0x3}, {0x8, 0x5}, {0x3f}], "acfc525d09066dce"}}]}, 0x168}, 0x1, 0x0, 0x0, 0x882}, 0x400c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x400000c}, 0x8005) (async) semget(0x3, 0x600, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x168, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x8b, 0x5}, {0x15}, {0x9, 0x3}, {0x8e, 0x7}, {0xfd, 0x6}, {0x1f, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0xff, 0x5}, {0x0, 0x6}, {0x9, 0x4}, {0xa0, 0x6}], "b352613b133991ad"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x5}, {0x9}, {0x3, 0x5}, {0x8, 0x1}, {0x80, 0x6}, {0x0, 0x2}, {0x1}], "f9c8318b29413bc7"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x3, 0x2}, {0x90, 0x7}], "f93a6485b8ccfcdc"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x90, 0x6}, {0x0, 0x4}, {0x3f, 0x6}, {0x5, 0x7}, {0x20, 0x1}], "d9018acd279fe20f"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xff}, {0x3, 0x5}, {0x80, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x3}, {0xf2, 0x3}, {0x20, 0x6}, {0x3f, 0x5}, {0xff, 0x3}], "22d58780d3c9c44e"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xff, 0x5}, {0xb8, 0x6}, {0x5, 0x5}, {0x9, 0x5}, {0x2, 0x2}, {0x6, 0x4}, {0x9, 0x1}, {0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x79, 0x2}, {0x5, 0x3}], "e58900a639298e0f"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3}, {0x5b}, {0x9, 0x2}, {0x6, 0x6}, {0x2, 0x1}], "8e171d4ffb7421d2"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x0, 0x2}, {0x6, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x9, 0x4}, {0xff, 0x4}, {0x4, 0x1}, {0xcb, 0x7}, {0xff, 0x5}], "cf7d362f1e17909a"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x81, 0x4}, {0x9, 0x4}, {0x7, 0x4}, {0xc3, 0x7}, {0x8, 0x3}, {0x20, 0x2}, {0x1f, 0x7}, {0x4, 0x1}, {0x80, 0x6}, {0x0, 0x2}, {0x63, 0x6}, {0x8, 0x1}, {0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x25, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0xff, 0x1}, {0x1}], "a83a81b00b7bed00"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x81, 0x5}, {0x20, 0x4}, {0x8, 0x5}, {0x4, 0x7}, {0x8, 0x3}, {0x9}, {0x3f, 0x7}, {}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x4}, {0x4}, {0x0, 0x1}, {0x4, 0x4}, {0xf8, 0x3}, {0x8, 0x5}, {0x3f}], "acfc525d09066dce"}}]}, 0x168}, 0x1, 0x0, 0x0, 0x882}, 0x400c000) (async) [ 2594.357499][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2594.367422][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:17 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x7) 00:44:17 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:17 executing program 2: semget(0x3, 0x0, 0x5f) 00:44:17 executing program 1: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0xfffffff8, 0x9, 0x2, 0x0, 0x1}, 0x8) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x48004) 00:44:17 executing program 4: semget(0x3, 0x3, 0x100) 00:44:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x400000c}, 0x8005) semget(0x3, 0x600, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x168, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x8b, 0x5}, {0x15}, {0x9, 0x3}, {0x8e, 0x7}, {0xfd, 0x6}, {0x1f, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0xff, 0x5}, {0x0, 0x6}, {0x9, 0x4}, {0xa0, 0x6}], "b352613b133991ad"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x5}, {0x9}, {0x3, 0x5}, {0x8, 0x1}, {0x80, 0x6}, {0x0, 0x2}, {0x1}], "f9c8318b29413bc7"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x3, 0x2}, {0x90, 0x7}], "f93a6485b8ccfcdc"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x90, 0x6}, {0x0, 0x4}, {0x3f, 0x6}, {0x5, 0x7}, {0x20, 0x1}], "d9018acd279fe20f"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xff}, {0x3, 0x5}, {0x80, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x3}, {0xf2, 0x3}, {0x20, 0x6}, {0x3f, 0x5}, {0xff, 0x3}], "22d58780d3c9c44e"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xff, 0x5}, {0xb8, 0x6}, {0x5, 0x5}, {0x9, 0x5}, {0x2, 0x2}, {0x6, 0x4}, {0x9, 0x1}, {0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x79, 0x2}, {0x5, 0x3}], "e58900a639298e0f"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3}, {0x5b}, {0x9, 0x2}, {0x6, 0x6}, {0x2, 0x1}], "8e171d4ffb7421d2"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x0, 0x2}, {0x6, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x9, 0x4}, {0xff, 0x4}, {0x4, 0x1}, {0xcb, 0x7}, {0xff, 0x5}], "cf7d362f1e17909a"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x81, 0x4}, {0x9, 0x4}, {0x7, 0x4}, {0xc3, 0x7}, {0x8, 0x3}, {0x20, 0x2}, {0x1f, 0x7}, {0x4, 0x1}, {0x80, 0x6}, {0x0, 0x2}, {0x63, 0x6}, {0x8, 0x1}, {0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x25, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0xff, 0x1}, {0x1}], "a83a81b00b7bed00"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x81, 0x5}, {0x20, 0x4}, {0x8, 0x5}, {0x4, 0x7}, {0x8, 0x3}, {0x9}, {0x3f, 0x7}, {}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x4}, {0x4}, {0x0, 0x1}, {0x4, 0x4}, {0xf8, 0x3}, {0x8, 0x5}, {0x3f}], "acfc525d09066dce"}}]}, 0x168}, 0x1, 0x0, 0x0, 0x882}, 0x400c000) 00:44:17 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/pcmcia_core', 0x8001, 0x140) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x88, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012cbd7000fddbdf250100000008000700", @ANYRES32=r5, @ANYBLOB="565db724b503b0fc5daee76dde5137fa73d7eb2ebdc2960c15e499bccf63f9e755eb3b"], 0x1c}}, 0x11) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2800, 0x0) 00:44:17 executing program 2: semget(0x3, 0x0, 0x5f) semget(0x3, 0x0, 0x5f) (async) 00:44:17 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x7) (async) 00:44:18 executing program 1: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0xfffffff8, 0x9, 0x2, 0x0, 0x1}, 0x8) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x48004) 00:44:18 executing program 4: semget(0x3, 0x3, 0x100) semget(0x3, 0x3, 0x100) (async) 00:44:18 executing program 2: r0 = semget(0x3, 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000040)=""/189) 00:44:18 executing program 0: semget(0x3, 0x4, 0x0) r0 = semget(0x2, 0x1, 0x408) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/117) 00:44:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x7) 00:44:18 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/pcmcia_core', 0x8001, 0x140) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x88, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012cbd7000fddbdf250100000008000700", @ANYRES32=r5, @ANYBLOB="565db724b503b0fc5daee76dde5137fa73d7eb2ebdc2960c15e499bccf63f9e755eb3b"], 0x1c}}, 0x11) (async, rerun: 64) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2800, 0x0) 00:44:18 executing program 1: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0xfffffff8, 0x9, 0x2, 0x0, 0x1}, 0x8) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x48004) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0xfffffff8, 0x9, 0x2, 0x0, 0x1}, 0x8) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x48004) (async) 00:44:18 executing program 4: semget(0x3, 0x3, 0x100) 00:44:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = gettid() getpgrp(r0) 00:44:18 executing program 2: r0 = semget(0x3, 0x0, 0x0) (async, rerun: 64) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) (rerun: 64) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000040)=""/189) 00:44:18 executing program 0: semget(0x3, 0x4, 0x0) (async) r0 = semget(0x2, 0x1, 0x408) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/117) 00:44:18 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1f, 0x30000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x1513, r1}, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xac5a) semget(0x1, 0x0, 0x2) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x250, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x204, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x80000000}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd4b6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6cbbf5f041d372a8cae1deee82bd0a5fb5b7865e154ae77e297effe1fddb722f"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x922}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "399736f9b9005c04fc87e924c000109d04d1ecc9a91ca8847056f898bec83f2e"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffff, @mcast1, 0x5}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b6095e855d95fb64f4f9fb450d88c054a5f6c07cf60816790a5e13e549189ab5"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x250}, 0x1, 0x0, 0x0, 0x8000000}, 0x18040) 00:44:18 executing program 1: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) socketpair(0x8, 0x5, 0x8, &(0x7f0000000040)) socketpair(0x18, 0x80000, 0x5d3, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}]}, 0x54}, 0x1, 0x0, 0x0, 0x28006}, 0x4040040) 00:44:18 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/pcmcia_core', 0x8001, 0x140) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x88, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012cbd7000fddbdf250100000008000700", @ANYRES32=r5, @ANYBLOB="565db724b503b0fc5daee76dde5137fa73d7eb2ebdc2960c15e499bccf63f9e755eb3b"], 0x1c}}, 0x11) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2800, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/pcmcia_core', 0x8001, 0x140) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x88, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012cbd7000fddbdf250100000008000700", @ANYRES32=r5, @ANYBLOB="565db724b503b0fc5daee76dde5137fa73d7eb2ebdc2960c15e499bccf63f9e755eb3b"], 0x1c}}, 0x11) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2800, 0x0) (async) [ 2595.608310][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = gettid() getpgrp(r0) 00:44:18 executing program 2: r0 = semget(0x3, 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) (async, rerun: 32) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000040)=""/189) (rerun: 32) 00:44:19 executing program 0: semget(0x3, 0x4, 0x0) r0 = semget(0x2, 0x1, 0x408) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/117) 00:44:19 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1f, 0x30000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x1513, r1}, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xac5a) (async) semget(0x1, 0x0, 0x2) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x250, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x204, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x80000000}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd4b6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6cbbf5f041d372a8cae1deee82bd0a5fb5b7865e154ae77e297effe1fddb722f"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x922}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "399736f9b9005c04fc87e924c000109d04d1ecc9a91ca8847056f898bec83f2e"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffff, @mcast1, 0x5}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b6095e855d95fb64f4f9fb450d88c054a5f6c07cf60816790a5e13e549189ab5"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x250}, 0x1, 0x0, 0x0, 0x8000000}, 0x18040) 00:44:19 executing program 1: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) (async) socketpair(0x8, 0x5, 0x8, &(0x7f0000000040)) (async) socketpair(0x18, 0x80000, 0x5d3, &(0x7f0000000080)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}]}, 0x54}, 0x1, 0x0, 0x0, 0x28006}, 0x4040040) [ 2596.024156][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:19 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/orangefs', 0x610000, 0x1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40000800, 0x5}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000094}, 0x8040) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$cgroup(r2, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x1f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000005ef3e9d25d1c9d695d780714b3dc47610bcb0ff7d22c00007607a6d1323460891f2bd91add000d56a15cff1af96909", @ANYBLOB="be697b0544d13ca0862a7f00000000", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x22004080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 00:44:19 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 00:44:19 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) r0 = gettid() getpgrp(r0) 00:44:19 executing program 0: prctl$PR_GET_KEEPCAPS(0x7) semget(0x3, 0x600, 0x0) 00:44:19 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1f, 0x30000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x1513, r1}, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xac5a) semget(0x1, 0x0, 0x2) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x250, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x204, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x80000000}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd4b6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6cbbf5f041d372a8cae1deee82bd0a5fb5b7865e154ae77e297effe1fddb722f"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x922}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "399736f9b9005c04fc87e924c000109d04d1ecc9a91ca8847056f898bec83f2e"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffff, @mcast1, 0x5}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b6095e855d95fb64f4f9fb450d88c054a5f6c07cf60816790a5e13e549189ab5"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x250}, 0x1, 0x0, 0x0, 0x8000000}, 0x18040) 00:44:19 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/orangefs', 0x610000, 0x1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40000800, 0x5}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000094}, 0x8040) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async, rerun: 32) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$cgroup(r2, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (rerun: 64) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x1f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000005ef3e9d25d1c9d695d780714b3dc47610bcb0ff7d22c00007607a6d1323460891f2bd91add000d56a15cff1af96909", @ANYBLOB="be697b0544d13ca0862a7f00000000", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x22004080}, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) [ 2596.423574][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:19 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0xf8}}, 0x4) 00:44:19 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 00:44:19 executing program 0: prctl$PR_GET_KEEPCAPS(0x7) (async) semget(0x3, 0x600, 0x0) 00:44:19 executing program 1: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) socketpair(0x8, 0x5, 0x8, &(0x7f0000000040)) (async) socketpair(0x18, 0x80000, 0x5d3, &(0x7f0000000080)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}]}, 0x54}, 0x1, 0x0, 0x0, 0x28006}, 0x4040040) 00:44:19 executing program 4: semget(0x3, 0x0, 0x0) r0 = semget(0x0, 0x2, 0x400) semctl$IPC_INFO(r0, 0xf53feba61c341c6d, 0x3, &(0x7f0000000100)=""/180) r1 = semget$private(0x0, 0x1, 0x200) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000000)=""/161) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000001c0)=""/129) r3 = semget$private(0x0, 0x1, 0xc4) semget$private(0x0, 0x1, 0x10) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/145) [ 2596.765543][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:19 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/orangefs', 0x610000, 0x1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40000800, 0x5}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000094}, 0x8040) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$cgroup(r2, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x1f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000005ef3e9d25d1c9d695d780714b3dc47610bcb0ff7d22c00007607a6d1323460891f2bd91add000d56a15cff1af96909", @ANYBLOB="be697b0544d13ca0862a7f00000000", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x22004080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/orangefs', 0x610000, 0x1) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40000800, 0x5}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000094}, 0x8040) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$cgroup(r2, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x1f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000005ef3e9d25d1c9d695d780714b3dc47610bcb0ff7d22c00007607a6d1323460891f2bd91add000d56a15cff1af96909", @ANYBLOB="be697b0544d13ca0862a7f00000000", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x22004080}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) 00:44:20 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (async) 00:44:20 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0xf8}}, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0xf8}}, 0x4) (async) 00:44:20 executing program 0: prctl$PR_GET_KEEPCAPS(0x7) semget(0x3, 0x600, 0x0) 00:44:20 executing program 4: semget(0x3, 0x0, 0x0) (async) r0 = semget(0x0, 0x2, 0x400) semctl$IPC_INFO(r0, 0xf53feba61c341c6d, 0x3, &(0x7f0000000100)=""/180) (async) r1 = semget$private(0x0, 0x1, 0x200) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000000)=""/161) (async) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000001c0)=""/129) (async) r3 = semget$private(0x0, 0x1, 0xc4) semget$private(0x0, 0x1, 0x10) (async) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/145) [ 2597.154216][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2597.187177][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:20 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0xf8}}, 0x4) 00:44:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x624, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000) semget(0x3, 0x0, 0x0) r4 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, &(0x7f0000000180)=""/103) 00:44:20 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) perf_event_open$cgroup(&(0x7f0000001340)={0x4, 0x80, 0x2, 0x81, 0x5, 0x6, 0x0, 0x1ff, 0x8260, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000001300), 0x8}, 0x0, 0x662a, 0x3, 0x6, 0x40, 0x80, 0x3, 0x0, 0x8, 0x0, 0x5}, r0, 0x2, 0xffffffffffffffff, 0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001280)={&(0x7f00000013c0)=ANY=[@ANYBLOB="24ac5c77c9721200e0cba4262f89051ef042261d8b00", @ANYRES16=r1, @ANYBLOB="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"], 0x1224}, 0x1, 0x0, 0x0, 0x40005}, 0x80) semget(0x3, 0x0, 0x0) 00:44:20 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = getpgrp(0x0) r1 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657673696d30000008008b007ab0e4bd3ce120f94e2da06f7b1b0e72c480f776f73b0551e70a30f19b02c05c3f6faf1fb5b1fa3696f0c113aac01b15898f9d488b0f55496a5ca1fdfd9580b81b600281a4b0df0726ac0af42185a20ba4d741a544c269bd2886a0ae337d51e46bae467a4abeb44bd341b7cba45f3159d8754e8e7f1d", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0454982713877535ab1bed4664829abf070ea5926b8f27ce40a39b1f0acb0989aaa1859315410017bb4ca027fbab98ff3cccff6b6f5a39a45783cf2c0340253b4fd16349a95824f5548b0e3e9806c91d8d8b7e0b78045ddfa74c485035db2b3efe864dc9e61ac5e00000000000000000000800000000000000000000fdffffffffffffff00000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x44851) [ 2597.452059][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:20 executing program 4: semget(0x3, 0x0, 0x0) (async) r0 = semget(0x0, 0x2, 0x400) semctl$IPC_INFO(r0, 0xf53feba61c341c6d, 0x3, &(0x7f0000000100)=""/180) r1 = semget$private(0x0, 0x1, 0x200) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000000)=""/161) (async) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000001c0)=""/129) r3 = semget$private(0x0, 0x1, 0xc4) (async) semget$private(0x0, 0x1, 0x10) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/145) 00:44:20 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf256700080000000300", @ANYRES32=0x0, @ANYBLOB="0800c400010000000800c40006000000c200c50019276e9865aee54bd2c0ab7b17a1b9a73339039e016107b6df4de6a9f610c67e8865a7799e478000151525c9495ba8a605299f4c0554d2a2c403594ee1dd5ca5d0b1aa3f337b8ab26a1b6aea9fb3e75b8a9ff3c8e640060f132430992a71cc068fda2d876c9e16a0918c565302774ccf4c69dd4e39bacc91380ffdd2728193994eccf3215d9d2259beb8786ae165c4815dcca78ccee70fa4cc69beab0e9903a5ce6ac88561360dbba766ca0db3dab1cc001bc4c17532ebd263914343ec5300000800c300e80400000800c300000000800800c400fdffffff"], 0x108}, 0x1, 0x0, 0x0, 0x4044090}, 0x20000080) 00:44:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x624, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000) (rerun: 64) semget(0x3, 0x0, 0x0) r4 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, &(0x7f0000000180)=""/103) 00:44:20 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x7) 00:44:20 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) r0 = getpgrp(0x0) (async) r1 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657673696d30000008008b007ab0e4bd3ce120f94e2da06f7b1b0e72c480f776f73b0551e70a30f19b02c05c3f6faf1fb5b1fa3696f0c113aac01b15898f9d488b0f55496a5ca1fdfd9580b81b600281a4b0df0726ac0af42185a20ba4d741a544c269bd2886a0ae337d51e46bae467a4abeb44bd341b7cba45f3159d8754e8e7f1d", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0454982713877535ab1bed4664829abf070ea5926b8f27ce40a39b1f0acb0989aaa1859315410017bb4ca027fbab98ff3cccff6b6f5a39a45783cf2c0340253b4fd16349a95824f5548b0e3e9806c91d8d8b7e0b78045ddfa74c485035db2b3efe864dc9e61ac5e00000000000000000000800000000000000000000fdffffffffffffff00000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x44851) 00:44:20 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) perf_event_open$cgroup(&(0x7f0000001340)={0x4, 0x80, 0x2, 0x81, 0x5, 0x6, 0x0, 0x1ff, 0x8260, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000001300), 0x8}, 0x0, 0x662a, 0x3, 0x6, 0x40, 0x80, 0x3, 0x0, 0x8, 0x0, 0x5}, r0, 0x2, 0xffffffffffffffff, 0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001280)={&(0x7f00000013c0)=ANY=[@ANYBLOB="24ac5c77c9721200e0cba4262f89051ef042261d8b00", @ANYRES16=r1, @ANYBLOB="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"], 0x1224}, 0x1, 0x0, 0x0, 0x40005}, 0x80) semget(0x3, 0x0, 0x0) 00:44:20 executing program 4: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000000)=""/19) 00:44:21 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x7) 00:44:21 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = getpgrp(0x0) r1 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657673696d30000008008b007ab0e4bd3ce120f94e2da06f7b1b0e72c480f776f73b0551e70a30f19b02c05c3f6faf1fb5b1fa3696f0c113aac01b15898f9d488b0f55496a5ca1fdfd9580b81b600281a4b0df0726ac0af42185a20ba4d741a544c269bd2886a0ae337d51e46bae467a4abeb44bd341b7cba45f3159d8754e8e7f1d", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0454982713877535ab1bed4664829abf070ea5926b8f27ce40a39b1f0acb0989aaa1859315410017bb4ca027fbab98ff3cccff6b6f5a39a45783cf2c0340253b4fd16349a95824f5548b0e3e9806c91d8d8b7e0b78045ddfa74c485035db2b3efe864dc9e61ac5e00000000000000000000800000000000000000000fdffffffffffffff00000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x44851) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) getpgrp(0x0) (async) getpid() (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657673696d30000008008b007ab0e4bd3ce120f94e2da06f7b1b0e72c480f776f73b0551e70a30f19b02c05c3f6faf1fb5b1fa3696f0c113aac01b15898f9d488b0f55496a5ca1fdfd9580b81b600281a4b0df0726ac0af42185a20ba4d741a544c269bd2886a0ae337d51e46bae467a4abeb44bd341b7cba45f3159d8754e8e7f1d", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0454982713877535ab1bed4664829abf070ea5926b8f27ce40a39b1f0acb0989aaa1859315410017bb4ca027fbab98ff3cccff6b6f5a39a45783cf2c0340253b4fd16349a95824f5548b0e3e9806c91d8d8b7e0b78045ddfa74c485035db2b3efe864dc9e61ac5e00000000000000000000800000000000000000000fdffffffffffffff00000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x44851) (async) 00:44:21 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf256700080000000300", @ANYRES32=0x0, @ANYBLOB="0800c400010000000800c40006000000c200c50019276e9865aee54bd2c0ab7b17a1b9a73339039e016107b6df4de6a9f610c67e8865a7799e478000151525c9495ba8a605299f4c0554d2a2c403594ee1dd5ca5d0b1aa3f337b8ab26a1b6aea9fb3e75b8a9ff3c8e640060f132430992a71cc068fda2d876c9e16a0918c565302774ccf4c69dd4e39bacc91380ffdd2728193994eccf3215d9d2259beb8786ae165c4815dcca78ccee70fa4cc69beab0e9903a5ce6ac88561360dbba766ca0db3dab1cc001bc4c17532ebd263914343ec5300000800c300e80400000800c300000000800800c400fdffffff"], 0x108}, 0x1, 0x0, 0x0, 0x4044090}, 0x20000080) 00:44:21 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 32) perf_event_open$cgroup(&(0x7f0000001340)={0x4, 0x80, 0x2, 0x81, 0x5, 0x6, 0x0, 0x1ff, 0x8260, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000001300), 0x8}, 0x0, 0x662a, 0x3, 0x6, 0x40, 0x80, 0x3, 0x0, 0x8, 0x0, 0x5}, r0, 0x2, 0xffffffffffffffff, 0x3) (rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001280)={&(0x7f00000013c0)=ANY=[@ANYBLOB="24ac5c77c9721200e0cba4262f89051ef042261d8b00", @ANYRES16=r1, @ANYBLOB="08002abd7000fedbdf257a000000ec002a008c18200aa1242fadde06eba754ee5f6bbb83579ace5421f317f4250301af81060200000006020202020202823b05085e0200000008021100000102000000d2000000000200000305ffffffffffffc6040000050802110000017b559f43000802110000000800000037767f01493c96679656ec8b51aeaabc5468739452257c7c22466098c6ab1943e1875de39adb3a333071fc715d456e321a7bc606b8c4ea76c9e5fb13ba29169b2227f724f54bbb88481400989fe1b41fc9db39b0032251e29e80dfc2847f5f491a1473661c6daa1541c926b725a1e12058d8b344c65ac2690406ff093f00c96a0c012a003c04010388f972060303030303030602040005f1081705a5ce079db326dbaf615d0b59c464a560a80b39822a0164ff471b74c0daa270c439c9892299e070ee7cb8349366e814de8ee4e712fb6cebccf4c8a7b7bbfac65d3c2cca80bff7028e3831e2eb19b0b92cb3ba3a2568ce4581bae2401da24cd66a2e5637ecfbc75d252e84028f541cdbf4efa107dcf50c776885dabced665e4c4eefb9b6e897285f558d37b9ff21f0bf46ff9e22ab7183311bb9c86843acd7119b33588196fd660f5591010f0df19f0a0657d0e9d5b967391a8a6d9c0374391dca0e6bf6a0d39e8b243ac7e3b11357566e890f32eae4fe1d2d50dcb2846ba087e42ad68a17c79dfd67bd5fe2acccdf03010317102a006804ff01ff03260381dc093c7e58d419508ecea650762f998899d1dd810528f257f4d7ca5ce6e86116aaf4e37747c2ff29176fecd48e14776617a00cc32089002332b4699ff8bd3617f30169c1e4f37ef533a83bc590eb2b860bfc59dcf128a16d6c55e751c77727f780afed3b84d3b52d18140eca5528e6143e24fe450529fcc5e3a5db45079742e4b3bd01cce7dadd42e5c37cc1680c0949dc35fda9efa08f72ecd66789f2926fc355c3c31c8ad3f7fd88351094d34b824c352d4596b29f966115ee03b7b2281cb28bbcd9a897d1dc32901ecf0767a1c87c8833280103670a2167a7af56e961e2b171cddacc8dc20da96940d542ff37222b736152c7299afea3f50deb0cd59648b7fe670059ae37ee7bb5bb445275a979d868d64c8e8e7a9f6e6aaf01ccc844e978e00425d7025c094e0ab382d82b4e6b1e2eef32677454048086a0f0e1aaf89d5bd5b52a869f68bc47c900bb06521e98e578500dc2864998df9e3fe1bdf091502bce277119b6939966a736de09eba7e7167439e481a26de893bcfcfb20c6c113b20907ccb60100f05a020f6f5b04ff99d01de5a0ece6989409f69ffea12937528b04bf761b4b3c76f9a1430d5384b9f095f2d9c55370a7afebed2a3cec89e0c2ead20fea32fd11ebe550cfa4eb4fda87723fc375d8ca879123312f417b78ead2e436509c6baddb78a654bf2845535070374272dde7bd2ccd13013a29aafc67703cb5e1fd553b63b7c8b161048ce073216df1c54ab26d058d5c04c4ed2e3774c6a7284589d1fa2f018499413a19946641503640e7d2a3e29f92feabd199a17e0e88a99b576203669221aaed16648f65b5eccd0dd36c03df4c229880e92e2bb7c53b50b4cf66979f9927ad448f58ed8919eafdaba97642a9eb8e3d7192c4f24cbd910b57b02b44a2970003a9d08a343d272a5315caed3f0123220e6bae68193a168dd286a685e0658dc7b231648e8d55bd5e885d9b6744eca9e24e8994d4cbacb07044df154a2626d4c7fffbf5921470f5010fd055f05cf9d7ce8b2b14ac8391bf3b2f41905db3a8ca76e7adf0aa888234af1a34f98b0b3d4e657cbb491ad8c213c6fa068e68bab52a564911cefdf67eb4a66afb77b0f5d2c4cdb7b518b6b4fd25ad29ca6ee2834a381e7ad4cc55d0fff04eda50478c380450682b4997237b7617b21e100c7595b18b08d3d3eed1d0c3a981eafb6380fc0109882f96faebfad81db453ce6682a3f25b01dedcd35fd7a4902e119d435ee0360e04d6af10589cd602f9ef2383abd24cf7f541c049be135e6bec813dbe258048231da0f48a7b82d299fde07d9c6a56fb49ed23c9720187b1208fdee0482cce78442b0693ef551fdd808b85f97752fbdd5250192c92807cb2c224aa2961b7b80eb990c3fb1cbb532822fe09dc8657f04c54d9defa8719ab1c61dc20d02e77f547b2c016e54e1ae1da0d386f905045c88236f0a88a0fcdd4c858059fc059ff0f69a0178085fe58deb96987b5542e75c2e0b8159c5ba167913c6f65719fa3396a156d6a4dbc504540a2e4279e76bcf568b1aaa428538fea74ecad5a25fbf8caa162c58d42fc7eea3941ff5f62e8519ee3b4cabbea3322db5f1c450e7a9e80d488314e60c6cb0b0ad39d4bb9749b6e3d8de1bba74510c8a5bede273839d6f5268d72dff6a11359eb3c21e71488d89fc28b126acd0bb75819e038be670ab4eaa04aa21ee16d0cf89db84cec7044ad46dfcc689ff17096ecdcde39c87d362f70b9fbe66b90c2acf185cd3a44cd7c5b54a5594f0ebd39948551f97b527514d4cac659146f62448d62a054c2aa3362c7550edc830f64f17b74dc6f9e3995960bf89431716585793d5fda7984399ce5b40b7f25e331a013751813c8d3ba79570b448a6e99af4340b00824f950779fa601fc57e2348c54173e66d8c77452fe5c9802c732b716275f716e67ad87b2a860b464b37fcbb80e9e11fa7469eee7695bda994770a881817002ead7d884c96fd9e880041ec150c9349221db0ac4ec2609bb27a641dd4ae7f0dc34441bd6914549464c8ad8197ab2c990e429afe6a3d110eb599cc4959b996406a353f2feec113570368d92a5a4fcbd416cd042497bfe0e870b2716da6c76a081ef89b2e032b7a1b9da4305f3dcad500b6a04e33826c60a3b80d4ee7c6dafb1c40f0823937832f3b03e20c2a201922cb68ee95274528814abf4248620ae16f8e0d094baf02abf8f0e5df47284c27eb10cbedc8d3ca9e3c6476bc38edf74f49c2f316b3bebd1c456de6235d7c2728d3dc8c9b4415a2c986fd479f29f94f4a23a665848b3d5adc18facddca4a69a7bfb16e3e4230058d5168bab3731d20e339949d6ad82dd3759dbe894f5b2728bd1ddd126a7b1348e93a0e7d22ea198c2b9d8585d7617defec8b9dc6b19057ec82723b7fc7a830c931b6414211eded9ea6bdae477b1e6aae4505ba62893c518e5185cd86e2026f370d66b0b544bfbfe0056ac8c84c3f6e8e02ef997cc59909d281b2876926ae67d9196c8e96e068b5e4e97ec0aaf7a726ca4daf9faafd0ce7584a79670adef041e1fa83e7de5088c2e1836f9f255447363ee596355a8bc08c26121face4bdaecd826e61ee00c859dadd14842aa3928b16d109253e1aecc5139d9cae8921802be78d61e59820a5bb494625b61aa0691e76eb8e8f5fc5e35575aef8e61dae42c8e7ec6b44cc88410f3cafee21fd1148b8c769a27306733ad9574ec0f6aeacb032abe84ccca80314bef5d66cfecee63663cb8be7903c0bd4041fa5e143dbec5e9fd6d0ee48239f8de3476e13e2e3a9e77530e371916aa5f590b9a6ad45cea9bce50c5218a0e053a9fae5d210c288b75ebb8739a6e64f30b963800fa93afce9a356035ab40cabc123067753b9728fbcad4185f81f62b3da21b9813097b30ea5d4a68dc99c5e9af847c1a282f2ae7f0a5dd0ee2df230f41d6ce32e66dd40b00bf59690b23cf31e4182a29bf99db2a09c6e6f8f003a0f1bc843cd4db78b659095a876c33d981461bfefda42804c4d72982aa3be60c05595d741675d4bd8526da98abb92c873a23b54ea6a7624c4f1c7ee42fcb811abfb522a7cb393fe2ea02ebbedd5f4704c68ba7236c8b8cc435d25e018eb1e7cada3ab0b38eb806764aac7989a77bef8245765b5fd749914481ba93434117483917ef5006ad84def2ec55122eb177bbe35d94c1e1812b19cdf42e23881eab881efd72a2fafd123a3f0eed4f33272037173b564721bd3efabad2fc0d44b2146efe552d25c517bf3f9c5f5f25765de0bb6af60a5c4c80f5728ed45fb89c33f55d3cf56c024359850f308bf35610dcd07fb94a3e539dd2bc334d1a609fc4b632492a1d670e4da8c751dab241cc64ad549a96dc9a5fb31f9b237354b10873cce4011ec37bf5eccd6338cfab45750896b84b9e3a733e6600348e1ba7877c1f0c1f9775fa9fdc7157691894371d6849c107f26729afb1a835791a8825943c04703a7fe968b83a7374a65547acc7ea60b0079806246c350c78231a61e7f4a30b611624d88841d480b732292fb65caecfc1cfedfc75e06360fa6883b112cd79adab2811e323b4d86f7706171928eef936b2dd3054e98da3eeda4a88fa1bfd40b57fefdeb01b0c039773b78d0ee891c1e7321f1343808f2604099ea06dca99edacd96c17c481a059a5581b5056dbcefb86ed0916e74afaa6a1f1a6b60b69176941c9406aee2e4d39f9c5d3b6d6fcd8fac534fbdd99e4d9794ea51df2f8f3ae0c908cfce680c20a4c7b5b3294aea43f0e52ec997dd6f872f06206e59253b79beb520789977e9d8c59fca8e6a26216b846c588073366b7eea8069b0702e3be30d44f42c10b9358e633fe8d10e1c0e13eeeb360a414012f74a72827acbb2a2ec65a949ca6039d5f81d04b825cd0af88c28d5eb49d9d6f0c4d807b38297e683c3530de9b52eaada1a8883eaa3a5b7db3fe8c470ce23cd87edad834fb03ca4ceb86f077e8aaa80a8faa4132a6e0c0c3a68576e8215f722426765bead104fc0ec98bd512fe7a583b22d095c388e8919cc2dcb8af14855f65694391ead061e95474ff570a2275181459edf5a3c42bd5b4e8a84a90620057a634756ef728c09e89d2fa1dace993fa32b70aae910dd4ba524829246a713867ec9b1e56cd60ddb178fe6cdb424839d673430ab649f706261e471dbcc8228732e1bcf11a2cb8ec23bcc2a67cfcf7c13150cdc62c50cdecd1b5258a9581a3ed57d83db8a94389b0843681f9a2ab9771b2d77d2561648b506c566fa3def15ce8344e109df7d08000687836f4d1996e5c1397fee8bed7d440bdb585948f01d69dba144d6340cdb7c4b27101e002fc818ccba590b95e5ceb505b7714d5e7b07f80a0cc66b4a6b955c152b8c84990e7fe5637fa65faf7132cfa24a26b685ba6d2ec76de1b9641803c0c99a45a3c7a53d72678731a31a318f0e78b12436e3619e752ca01a1fddcdffe4d25f1b2295dba7040b072a2380cd2aeb5cf871b94d15fcc0ce77ac1dd0ea83fae4274fc25c5fdc688fce98ce4b3aee8c1248d47f9e3c84b6f11116de9bca7f0ad018f35b05f86189d65612ee6ead0006fb31095cd7bb1e8d55b262a4704d16ec0e5d563321b128e9a6e19d27a33f4762e5f3865904c9f451558bb5a7d97684a2db413f25af5e67af466d1ca6a8a90b732627f207dba59a0a1b2cb8696ef59eee7247be659e3c1d2e23112fa7151cdee9995a3afe0a37390958dfb2a37d175f9967a8a4d7f7a8456832e005e470029062670db7b55a845759bb54437e6762f3c9b6250e7ac46e6f9bd9a2876a3d4fbba877a5da2d6737746040ef75df2769e1cbb34769933e61eb48f6d49abe33073c0bf10cc8729118f19e264e6e90e22ede7aab48902f0a7dfca14381a5b57909790c13b0551a4d4ea8315fe562d2edf9410d225998c9f04063d63737aff639d70d3d661fa377040b186703399d69dee13a09ee9960ab37a5555d3181220c8d802b629132dfe879c9c5ae676f9283947a4c237975d9540d284d91b889bb600c78e7e704bfb31af23286dadd613c2d497337ceaef3525ad7ab22ad1f28091b2e7ad46b09c59f68beb87bf3aba6edb93c4eb7e62c0179d529c3af5537d0b108bac6cd665ecea2e1c60d76c9ac13e9e461790396e9ea7c05cef16918933b42cf6ce5a7ffa40e7f566be2d74b3c1d78bb7618cb07cf88c3da5c304f411a9afa0ac5f51ee7822595c80e465af555bd3fe529c86351377d91628110fe541eccad1e0214fd80c5d2ff16e978abc40e253a0ace7cc942a659541cc08ac10fb990887c037c08babe468f7c2b8eb68f7751578cc338bbe09d81413952ac10246e2e5d1e3709cc96016052aec0336624d5dd9ef3f7107b0f89e1f53c485632547c003edebe83065f6c4ef4789092de3ea2cf68562b8b83b800f71bb81353bb5c31f050abdb497a3300b84f2a16f539785f82cc79684567e2c860f8c11ae6a122d449cd90f884b09cdab35a7d9f1e1504e0ec778a7f3f68a8a89df4523f2dbcbd36c9ba918d6dec2abedcf258ab68fb85454ba4b1c40ad3194663741d938810fa5d6cc58dd8550164620a87cd129639a820cd3d7721258e868f26fd8c7054ae8cd55aa1b0e8b92aca5eef32ece6d869baa9624b1481f5deb4a5d34cc48459138566968f78598a2541e78187bc5434eb02fe2e70b0e6e448bc0128dacede16d7ad64120f8a94ff44aced66f4d252444b3672ddbf404c158378df928f5d2bbdd5a9a57a9318fc701d8fc0defb428af087913aded22bd7ff9028b80518e4b8f469167652c5a12d39760605073b00810000"], 0x1224}, 0x1, 0x0, 0x0, 0x40005}, 0x80) (async) semget(0x3, 0x0, 0x0) 00:44:21 executing program 4: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000000)=""/19) semget(0x3, 0x0, 0x0) (async) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000000)=""/19) (async) 00:44:21 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x7) (async) 00:44:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x624, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000) semget(0x3, 0x0, 0x0) r4 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, &(0x7f0000000180)=""/103) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x624, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000) (async) semget(0x3, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r4, 0x0, 0x0) (async) semctl$GETPID(r4, 0x0, 0xb, &(0x7f0000000180)=""/103) (async) 00:44:21 executing program 3: socketpair(0xf, 0x800, 0xfcd7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_b, @device_b, @initial, {0xc, 0x4}}, @ver_80211n={0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x29, @void}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8906}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40890}, 0x40000) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:21 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf256700080000000300", @ANYRES32=0x0, @ANYBLOB="0800c400010000000800c40006000000c200c50019276e9865aee54bd2c0ab7b17a1b9a73339039e016107b6df4de6a9f610c67e8865a7799e478000151525c9495ba8a605299f4c0554d2a2c403594ee1dd5ca5d0b1aa3f337b8ab26a1b6aea9fb3e75b8a9ff3c8e640060f132430992a71cc068fda2d876c9e16a0918c565302774ccf4c69dd4e39bacc91380ffdd2728193994eccf3215d9d2259beb8786ae165c4815dcca78ccee70fa4cc69beab0e9903a5ce6ac88561360dbba766ca0db3dab1cc001bc4c17532ebd263914343ec5300000800c300e80400000800c300000000800800c400fdffffff"], 0x108}, 0x1, 0x0, 0x0, 0x4044090}, 0x20000080) 00:44:21 executing program 4: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000000)=""/19) 00:44:21 executing program 2: semget(0x3, 0x0, 0x0) r0 = semget(0x1, 0x2, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:21 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="6fb6260630b8740985dc1b040c56d54dfd273be2338320a40aa1ec5f8fb31a899beb2cb1000074f7f8f56d385632"], 0x7) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "febb763d4564ee6f93c10033f4d1"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000880}, 0x4004010) 00:44:21 executing program 3: socketpair(0xf, 0x800, 0xfcd7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_b, @device_b, @initial, {0xc, 0x4}}, @ver_80211n={0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x29, @void}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8906}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40890}, 0x40000) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:21 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:21 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x5}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x400) semget(0x3, 0x600, 0x0) 00:44:21 executing program 4: membarrier(0x1, 0x0) r0 = semget(0x1, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000000)=""/130) 00:44:22 executing program 2: semget(0x3, 0x0, 0x0) (async) r0 = semget(0x1, 0x2, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:22 executing program 3: socketpair(0xf, 0x800, 0xfcd7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_b, @device_b, @initial, {0xc, 0x4}}, @ver_80211n={0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x29, @void}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8906}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40890}, 0x40000) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:22 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="6fb6260630b8740985dc1b040c56d54dfd273be2338320a40aa1ec5f8fb31a899beb2cb1000074f7f8f56d385632"], 0x7) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "febb763d4564ee6f93c10033f4d1"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000880}, 0x4004010) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="6fb6260630b8740985dc1b040c56d54dfd273be2338320a40aa1ec5f8fb31a899beb2cb1000074f7f8f56d385632"], 0x7) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "febb763d4564ee6f93c10033f4d1"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000880}, 0x4004010) (async) 00:44:22 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x5}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x400) semget(0x3, 0x600, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x5}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x400) (async) semget(0x3, 0x600, 0x0) (async) 00:44:22 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:22 executing program 4: membarrier(0x1, 0x0) r0 = semget(0x1, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000000)=""/130) 00:44:22 executing program 2: semget(0x3, 0x0, 0x0) (async) r0 = semget(0x1, 0x2, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:22 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x5f, 0x100081, 0x100000}, 0x20) 00:44:22 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x5, 0x84) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) 00:44:22 executing program 4: membarrier(0x1, 0x0) (async) r0 = semget(0x1, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000000)=""/130) 00:44:22 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="6fb6260630b8740985dc1b040c56d54dfd273be2338320a40aa1ec5f8fb31a899beb2cb1000074f7f8f56d385632"], 0x7) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "febb763d4564ee6f93c10033f4d1"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000880}, 0x4004010) 00:44:22 executing program 2: semget(0x3, 0x0, 0x0) semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/146) 00:44:22 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x5}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x400) (async) semget(0x3, 0x600, 0x0) 00:44:22 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x5f, 0x100081, 0x100000}, 0x20) 00:44:22 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 00:44:22 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04c4a9e44baa5ad599624a319fb8fe25e3646dbe78f9f3170c02efe21f9520e1579249135c4814df20378533012871a51dd5df3e46a832bc68fac0b3fea0db100552da74398f2d2effaa5f0291bf09b48b335b0a555ca74b0a5544627570c8dfdb5287de88eefeafbdacb91fe7871b80f7452ddb7689c658d95d01fc2330278c8754215fb37343073f662ce363aa745f56570c0e561b2187d4956a7f9ed1e3d8c39c0a4826d2a40bb6e154caa488a678a98f3effae1de6de9afabf4a2036afc042e900678950c072c0639d5300"/218], 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 00:44:22 executing program 2: semget(0x3, 0x0, 0x0) semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/146) semget(0x3, 0x0, 0x0) (async) semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/146) (async) 00:44:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200001a9720900000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0400bf00"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40051) semget(0x3, 0x0, 0x512) 00:44:23 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x1, 0x1}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="08002201770100000800a100f8ffffff0800220129030000d68400917e97bbb2d0678756d5f054712bd562d15c269d611f2c7bd75e5cdb2ed1c5affb3c8e0d552fdf4cca5f2d120a689439471f2ce09a8d959744933b01156a68242bb85f3b3b84ad910904d3df5cb8be867441bf0b848c81e656136b93e2daf72fa0b66795967e7894b0924a3125adae0823"], 0x34}}, 0x8000) semget(0x3, 0x600, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x1, 0x0, 0x0, {0x8, 0x1, 0x0, 0xd8, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x3}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xcf5ef7cc599ecb7a, {0x400, 0x0, 0xfff0, 0x7}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x10) 00:44:23 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x5f, 0x100081, 0x100000}, 0x20) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x5f, 0x100081, 0x100000}, 0x20) (async) 00:44:23 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 00:44:23 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04c4a9e44baa5ad599624a319fb8fe25e3646dbe78f9f3170c02efe21f9520e1579249135c4814df20378533012871a51dd5df3e46a832bc68fac0b3fea0db100552da74398f2d2effaa5f0291bf09b48b335b0a555ca74b0a5544627570c8dfdb5287de88eefeafbdacb91fe7871b80f7452ddb7689c658d95d01fc2330278c8754215fb37343073f662ce363aa745f56570c0e561b2187d4956a7f9ed1e3d8c39c0a4826d2a40bb6e154caa488a678a98f3effae1de6de9afabf4a2036afc042e900678950c072c0639d5300"/218], 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 00:44:23 executing program 2: semget(0x3, 0x0, 0x0) (async) semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/146) 00:44:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200001a9720900000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0400bf00"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40051) semget(0x3, 0x0, 0x512) 00:44:23 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x1, 0x1}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="08002201770100000800a100f8ffffff0800220129030000d68400917e97bbb2d0678756d5f054712bd562d15c269d611f2c7bd75e5cdb2ed1c5affb3c8e0d552fdf4cca5f2d120a689439471f2ce09a8d959744933b01156a68242bb85f3b3b84ad910904d3df5cb8be867441bf0b848c81e656136b93e2daf72fa0b66795967e7894b0924a3125adae0823"], 0x34}}, 0x8000) semget(0x3, 0x600, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x1, 0x0, 0x0, {0x8, 0x1, 0x0, 0xd8, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x3}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xcf5ef7cc599ecb7a, {0x400, 0x0, 0xfff0, 0x7}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x10) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x1, 0x1}, 0x8) (async) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="08002201770100000800a100f8ffffff0800220129030000d68400917e97bbb2d0678756d5f054712bd562d15c269d611f2c7bd75e5cdb2ed1c5affb3c8e0d552fdf4cca5f2d120a689439471f2ce09a8d959744933b01156a68242bb85f3b3b84ad910904d3df5cb8be867441bf0b848c81e656136b93e2daf72fa0b66795967e7894b0924a3125adae0823"], 0x34}}, 0x8000) (async) semget(0x3, 0x600, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x1, 0x0, 0x0, {0x8, 0x1, 0x0, 0xd8, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x3}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xcf5ef7cc599ecb7a, {0x400, 0x0, 0xfff0, 0x7}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) 00:44:23 executing program 2: r0 = semget(0x3, 0x6, 0x0) semctl$GETNCNT(0xffffffffffffffff, 0x0, 0xe, 0x0) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000040)=""/17) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/1) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:23 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x80000000, 0x240040) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x46, 0x0, {r1}}, 0x20) 00:44:23 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04c4a9e44baa5ad599624a319fb8fe25e3646dbe78f9f3170c02efe21f9520e1579249135c4814df20378533012871a51dd5df3e46a832bc68fac0b3fea0db100552da74398f2d2effaa5f0291bf09b48b335b0a555ca74b0a5544627570c8dfdb5287de88eefeafbdacb91fe7871b80f7452ddb7689c658d95d01fc2330278c8754215fb37343073f662ce363aa745f56570c0e561b2187d4956a7f9ed1e3d8c39c0a4826d2a40bb6e154caa488a678a98f3effae1de6de9afabf4a2036afc042e900678950c072c0639d5300"/218], 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04c4a9e44baa5ad599624a319fb8fe25e3646dbe78f9f3170c02efe21f9520e1579249135c4814df20378533012871a51dd5df3e46a832bc68fac0b3fea0db100552da74398f2d2effaa5f0291bf09b48b335b0a555ca74b0a5544627570c8dfdb5287de88eefeafbdacb91fe7871b80f7452ddb7689c658d95d01fc2330278c8754215fb37343073f662ce363aa745f56570c0e561b2187d4956a7f9ed1e3d8c39c0a4826d2a40bb6e154caa488a678a98f3effae1de6de9afabf4a2036afc042e900678950c072c0639d5300"/218], 0x7) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') (async) 00:44:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200001a9720900000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0400bf00"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40051) semget(0x3, 0x0, 0x512) 00:44:23 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x7) 00:44:23 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 00:44:23 executing program 2: r0 = semget(0x3, 0x6, 0x0) semctl$GETNCNT(0xffffffffffffffff, 0x0, 0xe, 0x0) (async) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000040)=""/17) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/1) (async) semctl$IPC_RMID(r0, 0x0, 0x0) 00:44:23 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x80000000, 0x240040) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x46, 0x0, {r1}}, 0x20) 00:44:23 executing program 4: r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') semget(0x3, 0x3, 0x220) 00:44:23 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9, 0x1, 0x1}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="08002201770100000800a100f8ffffff0800220129030000d68400917e97bbb2d0678756d5f054712bd562d15c269d611f2c7bd75e5cdb2ed1c5affb3c8e0d552fdf4cca5f2d120a689439471f2ce09a8d959744933b01156a68242bb85f3b3b84ad910904d3df5cb8be867441bf0b848c81e656136b93e2daf72fa0b66795967e7894b0924a3125adae0823"], 0x34}}, 0x8000) (async) semget(0x3, 0x600, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x1, 0x0, 0x0, {0x8, 0x1, 0x0, 0xd8, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x3}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xcf5ef7cc599ecb7a, {0x400, 0x0, 0xfff0, 0x7}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x10) 00:44:24 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x7) 00:44:24 executing program 2: r0 = semget(0x3, 0x6, 0x0) semctl$GETNCNT(0xffffffffffffffff, 0x0, 0xe, 0x0) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000040)=""/17) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/1) semctl$IPC_RMID(r0, 0x0, 0x0) semget(0x3, 0x6, 0x0) (async) semctl$GETNCNT(0xffffffffffffffff, 0x0, 0xe, 0x0) (async) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000040)=""/17) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/1) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) 00:44:24 executing program 4: r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') (async, rerun: 64) semget(0x3, 0x3, 0x220) (rerun: 64) 00:44:24 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x80000000, 0x240040) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x46, 0x0, {r1}}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x80000000, 0x240040) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x46, 0x0, {r1}}, 0x20) (async) 00:44:24 executing program 0: semget(0x3, 0x600, 0x784) 00:44:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4800, 0x22c100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x9}, 0x10) 00:44:24 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x7) (async) 00:44:24 executing program 2: r0 = semget(0x2, 0x0, 0x5) semget(0x2, 0xbfbdd31dbdd887b0, 0x8) r1 = semget$private(0x0, 0x0, 0x0) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000001c0)=""/110) r2 = semget(0x2, 0x1, 0x100) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/211) clock_gettime(0x0, &(0x7f0000000040)) semtimedop(r2, &(0x7f0000000000)=[{0x2, 0x2, 0x1000}, {0x0, 0x4, 0x1000}, {0x1, 0xf6d2, 0x1800}, {0x3, 0x0, 0x1000}, {0x4, 0xf8}, {0x2, 0x283, 0x800}, {0x5, 0x3f, 0x1000}], 0x7, &(0x7f0000000080)={0x0, 0x989680}) 00:44:24 executing program 0: semget(0x3, 0x600, 0x784) 00:44:24 executing program 3: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x400c041}, 0x40c1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x14, 0xbe, "69a76616b9a266f592f7f21eb6bae4b7"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x12, 0x1}, {0x16, 0x1}, {0xc}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1b}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd0, 0xac, "4fb3825a807c5570fb7fe0d87207dad88b682d8993b5125b4399cac96b0bb1c260ccfc0f60f6956d0cb288eb6e22334e8cde214340fa86f69ac47a3b8534641461a61513b2125d6ac00e1aea28e49459202ef61f73b5580ee68dca422c1f0aafda6cd9f558ebf67381b4967be883f5dc6ccd63cd15873bfc71242682d254187e075ce8a8b1f063d1fea2a0362f5c35fa79fa0008cf73b4f40c13d8f1849e9824541aa060028e8e7c45be39ca5314bb8e99f4853cb5605eee9c9ed39f995a3b6d3a1fb0d01907ed5c5de73a8f"}]}, 0x130}, 0x1, 0x0, 0x0, 0x2400c811}, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000140), 0x800) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) 00:44:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4800, 0x22c100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x9}, 0x10) 00:44:24 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) 00:44:24 executing program 2: r0 = semget(0x2, 0x0, 0x5) (async) semget(0x2, 0xbfbdd31dbdd887b0, 0x8) (async) r1 = semget$private(0x0, 0x0, 0x0) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000001c0)=""/110) (async) r2 = semget(0x2, 0x1, 0x100) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/211) clock_gettime(0x0, &(0x7f0000000040)) (async) semtimedop(r2, &(0x7f0000000000)=[{0x2, 0x2, 0x1000}, {0x0, 0x4, 0x1000}, {0x1, 0xf6d2, 0x1800}, {0x3, 0x0, 0x1000}, {0x4, 0xf8}, {0x2, 0x283, 0x800}, {0x5, 0x3f, 0x1000}], 0x7, &(0x7f0000000080)={0x0, 0x989680}) 00:44:24 executing program 0: semget(0x3, 0x600, 0x784) semget(0x3, 0x600, 0x784) (async) 00:44:24 executing program 4: r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') (async, rerun: 64) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') (async, rerun: 64) semget(0x3, 0x3, 0x220) [ 2602.008233][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4800, 0x22c100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x9}, 0x10) 00:44:25 executing program 3: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x400c041}, 0x40c1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x14, 0xbe, "69a76616b9a266f592f7f21eb6bae4b7"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x12, 0x1}, {0x16, 0x1}, {0xc}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1b}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd0, 0xac, "4fb3825a807c5570fb7fe0d87207dad88b682d8993b5125b4399cac96b0bb1c260ccfc0f60f6956d0cb288eb6e22334e8cde214340fa86f69ac47a3b8534641461a61513b2125d6ac00e1aea28e49459202ef61f73b5580ee68dca422c1f0aafda6cd9f558ebf67381b4967be883f5dc6ccd63cd15873bfc71242682d254187e075ce8a8b1f063d1fea2a0362f5c35fa79fa0008cf73b4f40c13d8f1849e9824541aa060028e8e7c45be39ca5314bb8e99f4853cb5605eee9c9ed39f995a3b6d3a1fb0d01907ed5c5de73a8f"}]}, 0x130}, 0x1, 0x0, 0x0, 0x2400c811}, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000140), 0x800) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x400c041}, 0x40c1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x14, 0xbe, "69a76616b9a266f592f7f21eb6bae4b7"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x12, 0x1}, {0x16, 0x1}, {0xc}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1b}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd0, 0xac, "4fb3825a807c5570fb7fe0d87207dad88b682d8993b5125b4399cac96b0bb1c260ccfc0f60f6956d0cb288eb6e22334e8cde214340fa86f69ac47a3b8534641461a61513b2125d6ac00e1aea28e49459202ef61f73b5580ee68dca422c1f0aafda6cd9f558ebf67381b4967be883f5dc6ccd63cd15873bfc71242682d254187e075ce8a8b1f063d1fea2a0362f5c35fa79fa0008cf73b4f40c13d8f1849e9824541aa060028e8e7c45be39ca5314bb8e99f4853cb5605eee9c9ed39f995a3b6d3a1fb0d01907ed5c5de73a8f"}]}, 0x130}, 0x1, 0x0, 0x0, 0x2400c811}, 0x800) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000140), 0x800) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) 00:44:25 executing program 2: r0 = semget(0x2, 0x0, 0x5) (async) semget(0x2, 0xbfbdd31dbdd887b0, 0x8) r1 = semget$private(0x0, 0x0, 0x0) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000001c0)=""/110) (async) r2 = semget(0x2, 0x1, 0x100) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/211) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) semtimedop(r2, &(0x7f0000000000)=[{0x2, 0x2, 0x1000}, {0x0, 0x4, 0x1000}, {0x1, 0xf6d2, 0x1800}, {0x3, 0x0, 0x1000}, {0x4, 0xf8}, {0x2, 0x283, 0x800}, {0x5, 0x3f, 0x1000}], 0x7, &(0x7f0000000080)={0x0, 0x989680}) 00:44:25 executing program 0: semget(0x0, 0x0, 0x215) r0 = semget(0x2, 0x2, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x3c0) 00:44:25 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) 00:44:25 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time_for_children\x00') mount_setattr(r0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000400)={0x100002, 0x1, 0x120000, {r1}}, 0x20) socketpair(0x1a, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1fc, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1d3, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x34, 0x7}}, @perr={0x84, 0x13b, {0x9, 0x13, [@not_ext={{}, @device_a, 0xae5, "", 0x8}, @not_ext={{}, @device_a, 0x1, "", 0x5}, @ext={{}, @device_a, 0x4, @device_a, 0x26}, @ext={{}, @broadcast, 0x3f, @broadcast, 0x3f}, @not_ext={{}, @broadcast, 0x0, "", 0x4}, @not_ext={{}, @device_a, 0x6, "", 0x33}, @not_ext={{}, @device_b, 0x7417b1bb, "", 0x4}, @ext={{}, @device_a, 0x4, @device_b, 0xe}, @ext={{}, @device_b, 0x5, @broadcast, 0x1d}, @ext={{}, @broadcast, 0x35b8, @device_b, 0x8}, @ext={{}, @device_b, 0xffff8f2f, @device_a, 0xd}, @ext={{}, @device_a, 0xfffffffd, @device_a, 0x1e}, @not_ext={{}, @broadcast, 0x40, "", 0x3b}, @not_ext={{}, @device_a, 0x3, "", 0x2c}, @ext={{}, @device_a, 0x6, @device_b, 0x1f}, @ext={{}, @device_a, 0x9, @broadcast, 0x22}, @not_ext={{}, @device_b, 0x0, "", 0x17}, @ext={{}, @device_a, 0x1, @broadcast, 0x6}, @ext={{}, @device_b, 0x3, @device_b, 0x3d}]}}, @tim={0x5, 0x66, {0x3, 0x5, 0x6, "5961c16db1507082afd238dc1d7a55efd7970be22f8cdfbefc2b75134ab1282ff5490b97c4b7f5cf2cd5956e4ca3b89588ef68fe752a2cf5a3d44541aa81ccf7bf7dc48e93ec61bf63591b607e2e8008df7548ec2de10bb5397fe8791a3b3b6391fde0"}}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x7, 0x5, 0x0, 0x65, 0x0, 0x0, 0x0, 0x3}, 0x300, 0x8, 0x3b}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x10}, 0x40001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa}) [ 2602.422924][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2602.448820][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:25 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x1e, 0x1, @tid=r1}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0xc7, 0x1, 0x0, 0x0, 0xf6a3, 0x81, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f00000000c0), 0x515692141d7c1ec8}, 0xa0e00195bb066858, 0x4, 0x0, 0x8, 0xffffffff, 0x1f, 0x9, 0x0, 0x401, 0x0, 0xfffffffffffffff8}, r1, 0x5, r0, 0x8) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'team_slave_0\x00'}) semget(0x3, 0x0, 0x0) 00:44:25 executing program 3: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x400c041}, 0x40c1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x14, 0xbe, "69a76616b9a266f592f7f21eb6bae4b7"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x12, 0x1}, {0x16, 0x1}, {0xc}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1b}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd0, 0xac, "4fb3825a807c5570fb7fe0d87207dad88b682d8993b5125b4399cac96b0bb1c260ccfc0f60f6956d0cb288eb6e22334e8cde214340fa86f69ac47a3b8534641461a61513b2125d6ac00e1aea28e49459202ef61f73b5580ee68dca422c1f0aafda6cd9f558ebf67381b4967be883f5dc6ccd63cd15873bfc71242682d254187e075ce8a8b1f063d1fea2a0362f5c35fa79fa0008cf73b4f40c13d8f1849e9824541aa060028e8e7c45be39ca5314bb8e99f4853cb5605eee9c9ed39f995a3b6d3a1fb0d01907ed5c5de73a8f"}]}, 0x130}, 0x1, 0x0, 0x0, 0x2400c811}, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000140), 0x800) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x400c041}, 0x40c1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x14, 0xbe, "69a76616b9a266f592f7f21eb6bae4b7"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x12, 0x1}, {0x16, 0x1}, {0xc}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1b}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd0, 0xac, "4fb3825a807c5570fb7fe0d87207dad88b682d8993b5125b4399cac96b0bb1c260ccfc0f60f6956d0cb288eb6e22334e8cde214340fa86f69ac47a3b8534641461a61513b2125d6ac00e1aea28e49459202ef61f73b5580ee68dca422c1f0aafda6cd9f558ebf67381b4967be883f5dc6ccd63cd15873bfc71242682d254187e075ce8a8b1f063d1fea2a0362f5c35fa79fa0008cf73b4f40c13d8f1849e9824541aa060028e8e7c45be39ca5314bb8e99f4853cb5605eee9c9ed39f995a3b6d3a1fb0d01907ed5c5de73a8f"}]}, 0x130}, 0x1, 0x0, 0x0, 0x2400c811}, 0x800) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000140), 0x800) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) 00:44:25 executing program 0: semget(0x0, 0x0, 0x215) (async) r0 = semget(0x2, 0x2, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x3c0) 00:44:25 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) 00:44:25 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time_for_children\x00') mount_setattr(r0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000400)={0x100002, 0x1, 0x120000, {r1}}, 0x20) (async, rerun: 64) socketpair(0x1a, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1fc, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1d3, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x34, 0x7}}, @perr={0x84, 0x13b, {0x9, 0x13, [@not_ext={{}, @device_a, 0xae5, "", 0x8}, @not_ext={{}, @device_a, 0x1, "", 0x5}, @ext={{}, @device_a, 0x4, @device_a, 0x26}, @ext={{}, @broadcast, 0x3f, @broadcast, 0x3f}, @not_ext={{}, @broadcast, 0x0, "", 0x4}, @not_ext={{}, @device_a, 0x6, "", 0x33}, @not_ext={{}, @device_b, 0x7417b1bb, "", 0x4}, @ext={{}, @device_a, 0x4, @device_b, 0xe}, @ext={{}, @device_b, 0x5, @broadcast, 0x1d}, @ext={{}, @broadcast, 0x35b8, @device_b, 0x8}, @ext={{}, @device_b, 0xffff8f2f, @device_a, 0xd}, @ext={{}, @device_a, 0xfffffffd, @device_a, 0x1e}, @not_ext={{}, @broadcast, 0x40, "", 0x3b}, @not_ext={{}, @device_a, 0x3, "", 0x2c}, @ext={{}, @device_a, 0x6, @device_b, 0x1f}, @ext={{}, @device_a, 0x9, @broadcast, 0x22}, @not_ext={{}, @device_b, 0x0, "", 0x17}, @ext={{}, @device_a, 0x1, @broadcast, 0x6}, @ext={{}, @device_b, 0x3, @device_b, 0x3d}]}}, @tim={0x5, 0x66, {0x3, 0x5, 0x6, "5961c16db1507082afd238dc1d7a55efd7970be22f8cdfbefc2b75134ab1282ff5490b97c4b7f5cf2cd5956e4ca3b89588ef68fe752a2cf5a3d44541aa81ccf7bf7dc48e93ec61bf63591b607e2e8008df7548ec2de10bb5397fe8791a3b3b6391fde0"}}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x7, 0x5, 0x0, 0x65, 0x0, 0x0, 0x0, 0x3}, 0x300, 0x8, 0x3b}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x10}, 0x40001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa}) [ 2602.854886][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:26 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = semget(0x0, 0x2, 0x200) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000180)=0x4) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x2}, {0x3, 0x5, 0x1000}, {0x4, 0x100}], 0x3, &(0x7f0000000040)={0x77359400}) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000080)=""/249) r2 = semget$private(0x0, 0x4, 0x1c0) semctl$IPC_INFO(r2, 0x4, 0x3, &(0x7f0000000200)=""/247) r3 = semget(0x2, 0x3, 0x180) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000001c0)=""/53) 00:44:26 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x1e, 0x1, @tid=r1}) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0xc7, 0x1, 0x0, 0x0, 0xf6a3, 0x81, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f00000000c0), 0x515692141d7c1ec8}, 0xa0e00195bb066858, 0x4, 0x0, 0x8, 0xffffffff, 0x1f, 0x9, 0x0, 0x401, 0x0, 0xfffffffffffffff8}, r1, 0x5, r0, 0x8) (async) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'team_slave_0\x00'}) (async) semget(0x3, 0x0, 0x0) 00:44:26 executing program 0: semget(0x0, 0x0, 0x215) (async) r0 = semget(0x2, 0x2, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x3c0) 00:44:26 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time_for_children\x00') mount_setattr(r0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000400)={0x100002, 0x1, 0x120000, {r1}}, 0x20) (async) socketpair(0x1a, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1fc, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1d3, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x34, 0x7}}, @perr={0x84, 0x13b, {0x9, 0x13, [@not_ext={{}, @device_a, 0xae5, "", 0x8}, @not_ext={{}, @device_a, 0x1, "", 0x5}, @ext={{}, @device_a, 0x4, @device_a, 0x26}, @ext={{}, @broadcast, 0x3f, @broadcast, 0x3f}, @not_ext={{}, @broadcast, 0x0, "", 0x4}, @not_ext={{}, @device_a, 0x6, "", 0x33}, @not_ext={{}, @device_b, 0x7417b1bb, "", 0x4}, @ext={{}, @device_a, 0x4, @device_b, 0xe}, @ext={{}, @device_b, 0x5, @broadcast, 0x1d}, @ext={{}, @broadcast, 0x35b8, @device_b, 0x8}, @ext={{}, @device_b, 0xffff8f2f, @device_a, 0xd}, @ext={{}, @device_a, 0xfffffffd, @device_a, 0x1e}, @not_ext={{}, @broadcast, 0x40, "", 0x3b}, @not_ext={{}, @device_a, 0x3, "", 0x2c}, @ext={{}, @device_a, 0x6, @device_b, 0x1f}, @ext={{}, @device_a, 0x9, @broadcast, 0x22}, @not_ext={{}, @device_b, 0x0, "", 0x17}, @ext={{}, @device_a, 0x1, @broadcast, 0x6}, @ext={{}, @device_b, 0x3, @device_b, 0x3d}]}}, @tim={0x5, 0x66, {0x3, 0x5, 0x6, "5961c16db1507082afd238dc1d7a55efd7970be22f8cdfbefc2b75134ab1282ff5490b97c4b7f5cf2cd5956e4ca3b89588ef68fe752a2cf5a3d44541aa81ccf7bf7dc48e93ec61bf63591b607e2e8008df7548ec2de10bb5397fe8791a3b3b6391fde0"}}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x7, 0x5, 0x0, 0x65, 0x0, 0x0, 0x0, 0x3}, 0x300, 0x8, 0x3b}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x10}, 0x40001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa}) 00:44:26 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x4, 0xc9, {0x6, 0x0, 0x0, 0x6f, 0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "3b5af9bbf7f925da8e0bf2134965a8ffab6613124a19762ac425cd5086f9440bd1b07a437a294b296d82ed2c244335a7f09a5a31c40392735652ae0079ea7c1f28c44c6cc1babd3a461b2148fc9a7ec285fb9dfce324f2a736270ffffcb681c1fb314a5478c96ca9ffb6e7922d373f45977f61c9396b401e1c890ba8c9a3355a9598e0c5a12930e54c97afa1cc517f59389ba630fce70d959130862f849e6bc5dec700ad7278555602b26072e38c315689a064be81077b48d8bb2bbd2cbd97f8f910933c07601d5efe0a00cfbc069d9b25188c7ccbce7f8d7fa2da8b04915f785ed2271b3194e8f0a84bfd0103181873e6f3c2e6337996de82e7c07fa954b15f68865187b8343139c773de1b15c64b7f02c477110fb409e8d00c8379f8572efbeecfe357cf77c380742eeca581ec32212a29fd1bb1dd12f0fe67ffcd0be52682415c2b69202a4ac22924cead93e2dec88d5923625ec8a188e5d9e10adf750e7a461f2a3f805dc7783c03a3011991709c5860ea28947b89713f7f30590050286803b8d32c13431f836086204a8efc3f034df02d350aff63dd32fa6eb04f8024fe13301861c21b1cc7dacf15192564024a44a32e6600a05f67c0987f0b331c022d4de6c4a410d1f530b2e2a1de16a46145a2e9420381659dc451e038b56997c37f2d1a7624fe46a720ca5a0dd0e9b2b1f9d5601e708b41885428b770ed23f4a033b3a0e2d945855ec79ebf4073be1cc89e7235af0f618d1cc0ab971c1b1f0aab4c0b154ce86894885a1784aa191c8d3bf42c023903e67fabcd4c70bd733c76d15e7baf99f8c6e527c9f47ebe62801043ed05d53db7f0140d3f88029e22eff3b51a2286141a5c84a23094d7ec2a6f8774b9e15a317458f6888c9e09542afb5d9d424cd3a46551e0a5f6f32dac549d35f719035eea9730a6b675d60f8799340b1c67c79a5deff0c739a9f953426b4acd42aaf9b02cfb86b4c352efeace11cfa725fe7c8ef7a6306c4a5f1ea82aad43736199acafaffe1051ef11b9bd8a6a824cfef6dd82afe42cb24be95b00810407e9f1fc1bd44a730c0bdc39515189926e557890c1d60e91e8e0988a0688295479544b29d4185e63e1c1ce3783ca7c6d305614c2af0671b7707eec1acbac66d822bda6d165989217b7e72107fcf210aeaa7c059ac6531e6a97ce6f54184972c18b54eab8523d96cc725dc4a9b1b5fd67b7326fac73565df5eb214ed5b2661eb3e93a72b7de999723cf666c733c1751e5819e836389c5b201ec1b77fcbb8bafd5162d7fc76b49ef554264d1a35ef3fab83ac3b738752fc70bc27b69e09aa5bd1a7c13d3a9c0eafdbcb791501e83da5e22e0584889c924efad594e2dff5692ece8a340437e5e66b68c22b9de89df4f012afd6cdb65527fdcc34130d45098d9071967c1504ce70bb8b9e38f8f7ee4cab0d1842ce7042c33360d8e28d3b708666aaff6719fbc34ef3c0e314748592385945d707b81980f99bd6e34d6f1801924a89311919bb6acf209f21c0d433dfa0361d070e53cd3ebdcbc905e5f08ec610ac2f9605c75dbfbe5c3a9ac2022970b893695b52c889e583416dc51d0246269f228bc8380d1e2e12266be8307e1fa6cce823dbe95877ecd2b8200b857c083f8e6316e73bd92af66c3c8988097e8c36d79feeb4ce88cfa770441b63b692dc6211c567ac87db1bc0eb2e6b720d0baf1e338c7ac0d312ef630d5055a405ac1e4f67004cdaa54122ae3fb9947a3e1dbcc08abbde7454183905203cb086dc7afd2b68ba49f60f485dfc33c170d69f8a6ab601f733c24842917e745fba9811c3988d22735fb9fc7d6e0b5592fbcc2527bc2a1d7783a571c6f1b4b2c966c7b7ba766014d33d7d0d2152e48bf97cdbf24e7ab3da48e2ae0108879395bd736a468f79f3d7c0769b962e157a8364fc89c3a985a3deb9c314fd9ed36b10976ab8a44ab282035ddb0ea01555cb6b698f89e1f08a82de55f5912984281e853d9d63d6f22aca6d3a7a4fb6466ec165f423ae8d95fbd760995dcea79575902842d6066f0ec000de03a8a4036a0df370dd0b313ff13de7b1f830dac382924136ba8d2d86ea56d5801ecb0e780e90c90c7f8d4c0adcefefc4755856c2db89cef96fc85621add9657b881d315c408eed941580d6d3f6b0ec5b143de63172dfb0e8b47da88d2d940501d39ef4ff82dea02e401b23bd13bbd6230491553e8509f05a406880aef51d2558dbf1c7b9a9ace8202b9b825590586b603783043ac3867ad2582d9fe94757f8544bdf6ec305c7085f215bac634e6db69ee4d8c96a0670e8bde43def16ff2a0c0a89b93a2ee952126ed17a8f3d39eceaeb4934e2b6c9a64f57324cdce8f9f21ccd57971ebae4fee73f245f6e481ac1caf08a3188a373851c8d2f0a199f0c6c0c83803f6395f54523fc62eda818888f78a4376f0b6c8d4f8144ee9228438627dd0a4db078d7e1a0b47792a2bdaba68113cdb3faa456efeb63813c8b12c8131c7e52eb5c943ffdc1e5fb82e7d1c4bde4b1055a3cdbca2be7ff31bf893779a058d2a1b2b0c5b14d43baef54367aa43c4bd7918c947207dee5ebf073e420dfcb5312d66fef46a6612349b9eeca969e5bc5a7d1275045dfe2aedd14d0a267fd52bbc115aa2d825c98cfca4c532ebd1a440d59ef880e27a164743b5809b96d7ffbcb8029fe9ec536c811c67ba9a05306d32947839e3f2af120ae04dbc5a92249a399f1be18c6321409ae2248d41e4f2b63bddc55b005981742788494a28ea5fdb20ea98b7715d7b6c8fe087179b8cdc314b04ac656952cf2796055bb572b91f2cb1a82d68f360f20b258aafad4688418ce08f6330feeea0cfff035e2150679afc670ee4e3803a0fac5a15167a4db08a8b3fa7d07a0a9f429a59dfa38d19956d094ceb2b4be0e3035c82f68dc3cf0b938b7981acae28d8448538e8a756c71cd64fb11dbe65c9b1c7098a7e25b8dcffefdbfbb27883ec6a21220202ca97234ec4477c1312fee68bc966ed042f2a5b7765eae3f16d553805f053c59a87eb9fbbbeabe491f2d8e7d0daa8014a28b733d66813bc1fe94cb43dd5a40c87c16d43a5f5813f882237565e8d4ae18de2067480eb2921f0a39312cf1059a84708a6663f796736c0228351ed89dee4ad7a5f05ee1e46b68ad9e64408fee27b1abecbf58cfcced20cac48f80c416448bcf3735d668cbdfa5f5cc0b71fcc8c701bfed37a1517e1aead64dca1ea9cefbd72f5a41834e94719171788fc0b7148fe23e8061ce6a1514c07dfd37044ff96ed98a6d1679a1ef500d62fa13c96abd755964577e55444f5084a2588b6b6565e908062d181a2d63e61edf9fd100f1fc6c0c292ee6a088120a2e1e02e4c2f6afe4061baf9154099a3938d69b6cba32d88e6e01f27bed3126b780e0d99619419c48e7390ca5349ff83685ea9bc20084dc906c15167f940d31e44ea85e7401ea4e7d8a725ad17ad8bb1dcbc9b973cb35db837b3dbed2df45517e6324a456c38999c554c0c3a9237e4b93cd4b8a366cc04d1229a2d16f6ddeedbffb929c2d398747fffe2d559d125f92f624a458f3ba71e4c4596784d058101c65d1540e923d860666f94a840b86ccc52be74096535235ec47707bd1e8f77100931b1ce89e577770129853a8393f818ec55f86c48263f6b959b494d198a87c7cf9e2d3e23022ea1d16204438cff27e124846c7b247756855562efa1b2391c9e3e4d45d1793820bb7adbd63ddf9ef593c0c7725cebcd8ecac3dee4eed38e8349e68fbed84999cfffaf7f73a3ee33515f8cec24bc3572a51952ad35ca58e72999b0a027c3726de712d8482c792e66e81bced0bd6d72526241a6e9a33f48fcdbf408c5eebb8222051a4abc67dd366593df39095487824b5c8b5e37dd38acf650e3c94a2fada0734174051b4a5160ec5ef0abfae805de00a83c8106c05018fec6a739b784819beec8f100d9279dedcdf1ab22b600a953b9343209ae773b0e8031d30212e0f85b53bf024371f266c30dadbec6940a971391e45af21be85130108fc7eaf80141645567a4b4528ebcab7f1744c12efbedf543ceba11ec61d7bea216088fd2e9481d0e134543c85893bae72263b75564cecd84aa68b99dc3dd59c63f46dfc7a746cc2fcc25b75b85b5566eac794abcbe6014df45a75446c4ea8943774768d711ad73ecc904aad30f074cfabe68fa9e9924d3828daed39ada1ae436e709beb0b1ebbaa2bc618208a49c5589967f87952fa48725508e002adc8e9c0a78fe574716ede816652119d1c7a88bf5f5d44c27f4ebcda9c10b7ac66db14aa1bf7c359580cf45fda49015292c6d67c58a7883f6531cbe4f4b8129b3b414cbe1230991550046158b52d18855bbb2cd4664eb10d6cb835e27579024dd9f085ca1fb89bd7fbdcd6bab066459d5f04122560abf2a353d917c0c73b3e94acadcc22d80dda2d76fe411cea3352aa694a1902a6e69c604dc4f7d406cd8bd4a86762232f72c956923eeb345fcab913fd7477052de2b9bd834f06c0c9b62c100a99e40dd357b1778fbe26243811609588950e9b1249ccbd4523624c9711f669974c2406898fcb63f6f135cf33d0789aad8bab8d9caa7d1310c9db9496c7f3f66f7772ad8d37c0e466d793e5624ff0d73cecbc1ee6904ea7c044c608e30b8ce4f9c1f8fb58ea67473ea6759b5bb9953a6409b1833bd8e4df203f222a73e4b7ab869756943ba923e72b1d53fc369963e9091eb7a5ec15c12e5dc82927216b009658e67a91e2a2d363f846bf6a09b5cac6f2f00f5bb92a683a5849cce13e8876b1a250940e9fd4377afb7d98045fe748d11e8b8a9b4d9a393a281c29d4600ace3a1e1a321c2fe707ca7fc37a23d42b049b0b14a83d0f0bec09f01377f989fefc67a900757001ac8239d199945d3b14fb450bd541d5722f6aa1266f12531fd93036b3047f200bab46eb51c6f44380fb5e8be2d2faa63cc50511a0d3d97075cf7a44d873180f71fa96f7877d8cc866e23dac51b4ee6d6511d38cda7825983fe7945d15e580e3935d1dcfc2977382a92da8bde57e81a4d1e88440e97bee9e6638f342ec024d1ff3d7b3effdebd94de09c0541e55bffeffc242276d1739fb8f516ac01a1f2ef5f25d18a428d3c599f7933082d00d1a5c9ef276542a2b5214b8ab1522192179a1b538c73c0475ca9972a3fdb197878dceca618139cacb7528ccc628274126b39accbe6af893e8974eef1788029f54afea85ad0e47472a5b5ef9cd678ee9b90eeb7f59ad3d7e6d6ce285fcf9c5b7bbb35e61c044fe612e95a5b9879a9a7f2c80829e34c4ce19f677bfc9662739980cc172606a80b84a049ab0b110cc006e354f61a18f61ba7508c18294b2ee367c94f8845e22ba82a369e4e568e82f2483635c2c1b52699534af09c5da9a07d2cf22470932d501a62e324e41aa49f97400a09750b349d4c8b321f4b227eeed390ce879fd9ba70eac4a9c9706015d49264b967f97d27bd18894e6568f1f8f5edd8fe5e11c5ff74894a8743453c9b0627f1ef09dcfeb4567e93f928507d052ffbc62b53aad5e4386ba3ff69772d8be1db61b0cf1d0895d9ff4eba00a38926204b8b92da0125b29d050d5167a0964a020ed9006fdcd14b3e34ecbb321fbfa557ad7bdeaaec97e26dd53c21a3b80cb0d6713eac1fc9c5ba437f3b53aafdba32d14ab8238d5345b42c8674fdc94bebf764ac91b3b2e8370d1e628b582a6d7f3615a7db1b8b91f51605001bbac885922837968c784ecf99e2746579b3caeb897b79d7fe1d881b34e12fc7bfb25d43bc26e9d720317"}, 0x1004) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000080)={&(0x7f0000000100)="977873fc84992ea1847aa38694cd7cf21995ba1a9665b8dd4003bf04968079716e22f129be2154ca4a09b442426a963fe5339ccdf25a9555445d3aac4cadd600aeb3d27eb9f87cba921f34ba453de492f6df64de7ec46665522ee7126a96cdabc13876fbf75d2440524fedb46909e5b25977a3adaaf0316f445d3ca7f2e22db599dbbde191f55e97817bd9a13ddb6af55dae20995d014c487010f46b370e25f021f0871b40b9ee175f51e430bf3d59b23f7274ed13cc28bddad5e78f72cfa83d04f5e5008b1388715685d3502fb49d96a294e4c5311369208eaf340acbfc8e8696f5e52c59856ffbaa", 0xe9}) ioprio_set$pid(0x3, r0, 0x6000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 00:44:26 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4afb037", @ANYRES16=r0, @ANYBLOB="200026bd7000fedbdf252100000008007700850a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r7, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x59}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "13356f32ae"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4048080}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000280)={0xffffffffffffff4f, r0, 0x1, 0x70bd25, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x68}}}}}, 0x28}}, 0x90) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250a00000008a000c495dd084e06797e10c79bc75e4db1b2ac54d764450b6da1055bce0f37c354b69455a81bf917d12300", @ANYRES32=r5, @ANYBLOB="10006e800400010004000200040002000a000600080211000000000011000700be26119c0f8e95677e85ce6d1f000000"], 0x4c}}, 0x804) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x100080}, 0x20) 00:44:26 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = semget(0x0, 0x2, 0x200) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000180)=0x4) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x2}, {0x3, 0x5, 0x1000}, {0x4, 0x100}], 0x3, &(0x7f0000000040)={0x77359400}) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000080)=""/249) r2 = semget$private(0x0, 0x4, 0x1c0) semctl$IPC_INFO(r2, 0x4, 0x3, &(0x7f0000000200)=""/247) r3 = semget(0x2, 0x3, 0x180) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000001c0)=""/53) semget(0x3, 0x0, 0x0) (async) semget(0x0, 0x2, 0x200) (async) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000180)=0x4) (async) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x2}, {0x3, 0x5, 0x1000}, {0x4, 0x100}], 0x3, &(0x7f0000000040)={0x77359400}) (async) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000080)=""/249) (async) semget$private(0x0, 0x4, 0x1c0) (async) semctl$IPC_INFO(r2, 0x4, 0x3, &(0x7f0000000200)=""/247) (async) semget(0x2, 0x3, 0x180) (async) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000001c0)=""/53) (async) [ 2603.216850][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:26 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x1e, 0x1, @tid=r1}) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0xc7, 0x1, 0x0, 0x0, 0xf6a3, 0x81, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f00000000c0), 0x515692141d7c1ec8}, 0xa0e00195bb066858, 0x4, 0x0, 0x8, 0xffffffff, 0x1f, 0x9, 0x0, 0x401, 0x0, 0xfffffffffffffff8}, r1, 0x5, r0, 0x8) (async) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'team_slave_0\x00'}) semget(0x3, 0x0, 0x0) 00:44:26 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/4096) r1 = semget(0x2, 0x0, 0x244) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000001080)=0x5) r2 = semget$private(0x0, 0x3, 0x20) semtimedop(r2, &(0x7f0000001000)=[{0x0, 0x6, 0x1000}, {0x2, 0x81, 0x400}], 0x2, &(0x7f0000001040)={0x77359400}) 00:44:26 executing program 4: r0 = semget(0x3, 0x0, 0x0) r1 = semget(0x0, 0x2, 0x200) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000180)=0x4) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x2}, {0x3, 0x5, 0x1000}, {0x4, 0x100}], 0x3, &(0x7f0000000040)={0x77359400}) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000080)=""/249) r2 = semget$private(0x0, 0x4, 0x1c0) semctl$IPC_INFO(r2, 0x4, 0x3, &(0x7f0000000200)=""/247) r3 = semget(0x2, 0x3, 0x180) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000001c0)=""/53) semget(0x3, 0x0, 0x0) (async) semget(0x0, 0x2, 0x200) (async) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000180)=0x4) (async) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x2}, {0x3, 0x5, 0x1000}, {0x4, 0x100}], 0x3, &(0x7f0000000040)={0x77359400}) (async) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000080)=""/249) (async) semget$private(0x0, 0x4, 0x1c0) (async) semctl$IPC_INFO(r2, 0x4, 0x3, &(0x7f0000000200)=""/247) (async) semget(0x2, 0x3, 0x180) (async) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000001c0)=""/53) (async) 00:44:26 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0xa050) 00:44:26 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x4, 0xc9, {0x6, 0x0, 0x0, 0x6f, 0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000080)={&(0x7f0000000100)="977873fc84992ea1847aa38694cd7cf21995ba1a9665b8dd4003bf04968079716e22f129be2154ca4a09b442426a963fe5339ccdf25a9555445d3aac4cadd600aeb3d27eb9f87cba921f34ba453de492f6df64de7ec46665522ee7126a96cdabc13876fbf75d2440524fedb46909e5b25977a3adaaf0316f445d3ca7f2e22db599dbbde191f55e97817bd9a13ddb6af55dae20995d014c487010f46b370e25f021f0871b40b9ee175f51e430bf3d59b23f7274ed13cc28bddad5e78f72cfa83d04f5e5008b1388715685d3502fb49d96a294e4c5311369208eaf340acbfc8e8696f5e52c59856ffbaa", 0xe9}) ioprio_set$pid(0x3, r0, 0x6000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) gettid() (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x4, 0xc9, {0x6, 0x0, 0x0, 0x6f, 0x1}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) (async) gettid() (async) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') (async) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000080)={&(0x7f0000000100)="977873fc84992ea1847aa38694cd7cf21995ba1a9665b8dd4003bf04968079716e22f129be2154ca4a09b442426a963fe5339ccdf25a9555445d3aac4cadd600aeb3d27eb9f87cba921f34ba453de492f6df64de7ec46665522ee7126a96cdabc13876fbf75d2440524fedb46909e5b25977a3adaaf0316f445d3ca7f2e22db599dbbde191f55e97817bd9a13ddb6af55dae20995d014c487010f46b370e25f021f0871b40b9ee175f51e430bf3d59b23f7274ed13cc28bddad5e78f72cfa83d04f5e5008b1388715685d3502fb49d96a294e4c5311369208eaf340acbfc8e8696f5e52c59856ffbaa", 0xe9}) (async) ioprio_set$pid(0x3, r0, 0x6000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) (async) 00:44:26 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0xa050) [ 2603.648838][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:26 executing program 2: semget(0x3, 0x4, 0x64) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x4, 0x7, 0x1000}, {0x2, 0xffff, 0x800}, {0x2, 0x32c, 0x1000}, {0x14d28e04e29badc1, 0x8000, 0x1000}, {0x4, 0x2e6d, 0x800}, {0x3, 0x218, 0x1800}], 0x6) 00:44:26 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4afb037", @ANYRES16=r0, @ANYBLOB="200026bd7000fedbdf252100000008007700850a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r7, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x59}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "13356f32ae"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4048080}, 0xc0) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000280)={0xffffffffffffff4f, r0, 0x1, 0x70bd25, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x68}}}}}, 0x28}}, 0x90) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250a00000008a000c495dd084e06797e10c79bc75e4db1b2ac54d764450b6da1055bce0f37c354b69455a81bf917d12300", @ANYRES32=r5, @ANYBLOB="10006e800400010004000200040002000a000600080211000000000011000700be26119c0f8e95677e85ce6d1f000000"], 0x4c}}, 0x804) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x100080}, 0x20) 00:44:26 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/4096) (async) r1 = semget(0x2, 0x0, 0x244) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000001080)=0x5) r2 = semget$private(0x0, 0x3, 0x20) semtimedop(r2, &(0x7f0000001000)=[{0x0, 0x6, 0x1000}, {0x2, 0x81, 0x400}], 0x2, &(0x7f0000001040)={0x77359400}) 00:44:26 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7ff, 0xe5, 0x80, 0xc3}, {0x1ff, 0x6, 0x3, 0x9}, {0x200, 0x8, 0x20, 0x80000001}, {0x400, 0x4, 0x9f, 0x4}]}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x1038, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xc175}]}, 0x1038}}, 0x800) 00:44:26 executing program 2: semget(0x3, 0x4, 0x64) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) (async, rerun: 32) semop(r0, &(0x7f0000000000)=[{0x4, 0x7, 0x1000}, {0x2, 0xffff, 0x800}, {0x2, 0x32c, 0x1000}, {0x14d28e04e29badc1, 0x8000, 0x1000}, {0x4, 0x2e6d, 0x800}, {0x3, 0x218, 0x1800}], 0x6) (rerun: 32) [ 2603.782386][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 2603.939160][ T1202] ieee802154 phy0 wpan0: encryption failed: -22 [ 2603.945862][ T1202] ieee802154 phy1 wpan1: encryption failed: -22 00:44:27 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0xa050) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0xa050) (async) 00:44:27 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x4, 0xc9, {0x6, 0x0, 0x0, 0x6f, 0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000080)={&(0x7f0000000100)="977873fc84992ea1847aa38694cd7cf21995ba1a9665b8dd4003bf04968079716e22f129be2154ca4a09b442426a963fe5339ccdf25a9555445d3aac4cadd600aeb3d27eb9f87cba921f34ba453de492f6df64de7ec46665522ee7126a96cdabc13876fbf75d2440524fedb46909e5b25977a3adaaf0316f445d3ca7f2e22db599dbbde191f55e97817bd9a13ddb6af55dae20995d014c487010f46b370e25f021f0871b40b9ee175f51e430bf3d59b23f7274ed13cc28bddad5e78f72cfa83d04f5e5008b1388715685d3502fb49d96a294e4c5311369208eaf340acbfc8e8696f5e52c59856ffbaa", 0xe9}) ioprio_set$pid(0x3, r0, 0x6000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x7) (async) gettid() (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x4, 0xc9, {0x6, 0x0, 0x0, 0x6f, 0x1}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) (async) gettid() (async) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') (async) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000080)={&(0x7f0000000100)="977873fc84992ea1847aa38694cd7cf21995ba1a9665b8dd4003bf04968079716e22f129be2154ca4a09b442426a963fe5339ccdf25a9555445d3aac4cadd600aeb3d27eb9f87cba921f34ba453de492f6df64de7ec46665522ee7126a96cdabc13876fbf75d2440524fedb46909e5b25977a3adaaf0316f445d3ca7f2e22db599dbbde191f55e97817bd9a13ddb6af55dae20995d014c487010f46b370e25f021f0871b40b9ee175f51e430bf3d59b23f7274ed13cc28bddad5e78f72cfa83d04f5e5008b1388715685d3502fb49d96a294e4c5311369208eaf340acbfc8e8696f5e52c59856ffbaa", 0xe9}) (async) ioprio_set$pid(0x3, r0, 0x6000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) (async) 00:44:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7ff, 0xe5, 0x80, 0xc3}, {0x1ff, 0x6, 0x3, 0x9}, {0x200, 0x8, 0x20, 0x80000001}, {0x400, 0x4, 0x9f, 0x4}]}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x1038, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xc175}]}, 0x1038}}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7ff, 0xe5, 0x80, 0xc3}, {0x1ff, 0x6, 0x3, 0x9}, {0x200, 0x8, 0x20, 0x80000001}, {0x400, 0x4, 0x9f, 0x4}]}) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x1038, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "ea0465eeb09e0b545af797f9da24f51fdceed40757d4c93049e62c2b494256d8e7601e5f8b17c6e12006cdb8c1cd5d05313e55f39f7e3c5445b4e361eef278557d3aaae2769d5c8d602713090c48636b13a3c3943349841723cbf656f5d58644557613aa8fc813c4b800ae99f72f42280d6dec0f68f3a2070fad1a3122286196997d873a987a82a592a423856a978fd4762b0c36e19d3fa5d715a519768cb2975f4b053b9087a99937a9acc46c710bf3a7f386c7750404751c51cb1c1b7913c177a6042395f8f5577260be290eb508b796bcb33d888fbeeb1524665db19d72f3c20e6a857b7306dbd5ced27eb7d2ee0d72f06b79a7aae80d1be276706b6bd14d5ddd81b414b95e8a5127f2b61126532ebb734a9e10c8c52bd7050e7bcd08142d8251e9fc51f6bc8958c92c42dc5e6427a8978615b22d7db7ff9cdae44711b49f579ef196739ee5a2e14a29248d491b06069c499b4dc92918803f974fa0c89278e74b5eb814759dad120d78d5376ee11426bdda8dcc2efe09d0a8006b49c91f8f0c8c8f2ffbc524096dbc64268b7103446204745825d056efd9d2f50d453ae309e7100442d54b392e47ba044fa8c229a18f52c39a3a9e290aeb1429f01b6b1d4147e6e50218d5091545182e04947ae17ee58dfeeac23d4af9149afbf314de04daead3cf58e307cf1f0f52dbd47d94dfcda22d1ceb80b4c632e22f76c1035d762db526022d6c60e6139cd353257487d4da47ffa109cf40b49f8130498ebd437215b45b56fe8258885c65bf0251cd51f8addde065fc2d61cb246fc15954e8faaa698f4e072dda3c26c0db85827e86bc24e7eb70390feeb420b68e0d11779292d3050b6b8af93a581d84101838717496e76f67bb53b68ddea5e7933f38c1178d47c874441d65a5930f1e0f9d60c238a6cf51cd627f2fad371a6abe501d531803c7817e0de6eaf5815eb616ecdc0155a8a5f7adaaa5378b59625dfa3d11fa242f077f17a2fc53624e62e10b9aad211f5d932aaf34f54df6bbdd19c35f4a502df6117bfc6dc7976444e2dd9e3720658aa4b27a05f70ab1f622aca634b56b51602f2c3f18a869ac722a4dfddc8ef4e3330e501d213bed783271d6036468f06e9f88484b814c233701c598270040595743c5fa09d26898de8d40449d80cb1db4ef4045bbbc4865e170343ca1f242401027d6081c5afbc8aed7c34a41a251f6eee9580a81c46d244dc84c3f72dd80c4239ee6c08f79550a9bc20084f5891e93057a88c46ac051b7a4ac4a67fdb1c082141f7bb5f060fb5ad092234a0fbbe982a8d4ec4526efbef8f3ce92dafbb5e774ab9c330acd1dc7a834b31e99dff6ae3b7cc9e8218c430b63baad2906756b7213486806432e3cf230c9826057328a0b05f7ea3feca0b63e63f0131bc54ad52886d5c1313a748071c5ec67bb34bcaf9445659f6eae9a8b0939dffc2f50f461380414148ad1bb91dc42a44a9b353912057e0f4e50509803073e064e3b871b1c926d84e881072dd98036e5744cbeadc2fb336d35489fe5dca2c17ce65d6053f05ba09b49ce0de8e8d833e69536661ed06904436e9d04bd435d29350fbed6e615f5776b75be3351816677f48e7debc1a2260e816610fc75ead0548cf34a5ceab58c6f60577336a14a264de506786fd6bf0b156a0fcae5453f6728350cb8e325953e680864f8d3319628cee6a8ef496809c75f073d70391638a7c1e38dd0a2a9f72e20af12b157894896c1f19852119ab4a3342ad6b0cfb8735957d65c927f66d0ebce3e9eb990ba02366e10282d85839bf37b9fd988b2b881665bbb6ec6724aa98c969b0e45655b453041c4395e8d4a32723329431c09e85e8e30a5f2ad7d40d3bf269e6ce17bffccf85434c22b554a7b66e39a7bfafc049aa0179b2a572a5de5e260bd12e8c3a5dce653b79e930494085bad01ca750d26915185a510e33443adc44c3752bfba25f831d55ba6e5c13a4e056317f3bd0ab49ea49d78b926a4eb01fb7e52476019cede83afe2cd38e8ddb5d2405ea09c2ef3eab008bd1943196218ff1c3c4117e73f41071600f857fa85778b2c52616f7a989fbb769632e76127e8cdeafeedfeffb26c424284e312c62cc88b349b38d71c17da003b6e3b0050c25a36b854a58ba02fb3cd29eaf9a7a13b505293a22be4e08079fa2a3ca302293b6b109e18d3e455cf80299b0fd908a568f9e408608330d2a967a8eaeeee3fd3f8bd45ba9b2f874a45db8f57b20649e0074cd9b611dd5981313d2fe9684f87762b73023ca5ccb56e7c75608d7f565e13daf22a47002bc0834eaf15c550e7ef8765cd0d6fc28b9b319e03d3f6d041451c46482cd49a88a257be2c373723972d00ddcdbb8a4c98fbebe434d48912c578d467e73469b49ae746f6709fff953f2d8cd939566d892cae8517cc1e969ef37f61eacb1d438ada45d52a9c6a3c25bfce3d0f7beff7a21195c1fbff16b004141ea8044ef74f500ee973ea82c0cf36cf3ffc7bb838ec8b0e6f78673d28e541e7aad70fcd70a1c81e8bd1e096dc0336a3ddcd3679b95bf89bff1576a847e1d22bec6a3302cb18db880cfa8e77420d28e07cb29d961a941b12dab91a3f29998341ffda889cf16f914cfe3fbd9e3265b44585b0b1f31a1755cb6d148368ac3f1196d50b111eeea1162d7e6eefe3d01bfb45c8a9bc6688c55546911bc87ff0daffae743ab9d70037b3de94848f2c3379e87ebe86f0056fca417c03a223b6816cfa4eed787c44b056054695ff86844c6fb469efd6b94947f27c9d5d8c22dcc3569d2843c29535e65738ff3ad4166951c4a78127c20faf18549549946bce5b71c5e30a80098c15df06eb601b495fa09d8f6a2bb90aa900cc4996b128b7516d31a29c6eb81db24df9968d283d62631846e5fe84000cf00ee9ade2e006ca12e7acddfb8d9d6344c2a60bbd681597b5311ede13ba8d135300ecc905da88bf66d1b9c6f03ba6a97a28cbb5cdf22ff1941a7b97d58391c135bf5445151ced2df38bc81d5f5be6c0010386bc4239abee8d7e92e8e314c0117722bc0774fb834eee197fdff503ea30a2a16fe94885183b827169dfc83e826cf7fe929c663a28d95f1e84e67f325ec6d2c9bc80a79afe35e053a0eabb82c418eb7e815622bab41274e612cbc6127dc9c8e390481e3c20ac3b37a2133d8db0a990a2a5a8e2d430d8d7ea5f2205ec9e6d0b3b83b3dc38a152970593945d100b5ed748a02b9ee64c007e3429af54e3ff20f1de6981e37ef71f28f16cc7e1c9fa915608bb83c33bad542e81afe4d87ee6ead80d51748728b531667c24d19ccacbadde34ba481c52291197cbe223f3326391614a4f3dd8ef4d724127a0ef962f372162b21457c33d6b962fbc00bc7f7f5aa08fa5601d63a0eecdc4d08efec03c281d3aba5f7e57424f2196d55f6514d07ff314433a988f80f612c53126a8bf72b687c7bc368bfb223f337aab0bed20c7190b08e86e23e9657ae5789284382b04e30fb9ece1114c15ae819d8c93b280918dd636da1f9783a129a4f545020e108ebb3a3051a8e68eb058e92b2c12a1c2b1c7698091d958867658bf050b6348a0c4728f737b05c42fe0dac40919718de34a8887a2889fa57233e5d284caa4dd1944b9b86939d1e61e410a19fceb470af0258c8fc63c5ff382fe10c4be804656660041f59af061e7bd1c93838cd84208db1dd457c3bd3aa5a9389c89b1345a4c4eac3c0c912e94e6ee01a79fdf73c93c5e4e4de96e5b49a18001a0cfae75a2ff417f8c4aae795343fd6a6a00b571ad8a8b5ea06de0e0c61ce66dda0453b5b37320a1e4d3f3010c4072173f5de37ff816e3651b30af9272047d2a14d44ef643e070b2894eca5d2e8340d6936d7040afe39412c5e41340a9244bf7033c00307576c640a305f8f3e1949307ef18bd7524f711fabf5edc9f3af16ca6ebdb5b950cdae0451ebf68132e4093af50b8de8af2e27aff8b45592ffcad5f2d15ba18aa032d10a762740623dec160274559b997956af0960e829bfa82f0223fed46519fff8597a0ce1c326be541c7b2d7e8ae1da24b43046e4c301da33e1f5e6f2b89206ca018e67baba063e9d98bf5381bbddbe4af2f4dcd2eebfbaf7864e520cf904c3bab0659dfa3f22ade0ddd2d55cf515d5a7b7d286a645700edda6bb39bd17dda434a54560b7fa19a29e26e107e71cf35d8a6a58333461e433ee530c08a8184846f8e461b877de3c4ea3642e9c144914eb2c360cb5218f42a7b92242ea3583efe3e6f20bc30009f72bf01669a199a11609689464534b748328b70158919b549e31de46ac781861b122a3614acd9668766822da2fa5027a8d63717a50d94c84b63c31ee75d0f44323a4148c30eafb347ab5c83bf9e7e994e25bb626389cb3b9ebba5a6f9acd13ed344e110a07b2918736341c1375f0a4fad0cc36cb82072dcf311654310b694e1c736e2d21efa237944fbae50eaa16e1d333f095c0d70c7bde662b9fef4e8063768bde1ceb96ffe1dbbd8562bd192e9a5df511e610cedf1144f97b4c07bbe1d0554b9e7abf7ff3728aabfe21f6729aecf3cdb3fd21b0b9930a62a822753e290c574b2292ce6d75f69f54ec1cddc9304f6d92d666a37e2b870ba334df442ec160192476e79fc8f2f58c9eb88cacdc12911e0658ea66f409e6c50c4d3b72b2b1827b85573fe8855e6fd3441f9004a85f831198d17a8612980275cca47f2df2b481a85d65a77ed397b0508fa475730ad422285dc5f8c3fc64aafe4bc2123c462a3768c2fba4e6952a288b1c3b3b7a0b80aadde0e354eb78c5684ad803e2207551f7362db4c561b08d95167e6f4e0429bfbed11c3e3410034b53b234729bef74d1574411201698452c981547bcda994036aa132ebad040da6b64fbcbb5deecc9faf1b10c593e513e3d6a031f2e3f7c4e90b4e22f8f8070a662ac148165ffb05e2d44f3226b5cac85426570b8bdab17520117cc0242a8d1107a7f0b630f9c727bb36f720b83b44988db10ace14aecb1cad516e017f22d92c9760ac320c36dd21d940cbab0a48fdb6eeb26ea2296b793a5e71366bf63aa3be12d66b81a3cf401bd103dcf604c45992236d11760f8ea7be32443d4500687ea69191b904476a681361ade19544ddc52758615b0f7a456868f819eba918a0cfd78308eb6ccea71e7f223f26c0084549fa91f2ddeb2faee01c577dc74999f2f264afd024b42a04db3d51e02d28520ca64fafe7fce780cbe85c75e7639afc7464f34f8e683dfa22c65565413ee513fb4d7f36bf2ab3fd7d944ed7ef5c28d4314b0686bfcab19736f3ad59cbd38404cb16022edf6fbcf6664a9c7400088f3b83c23a8f110cbac489cf9a7b577a39a2f3e3fd102563c80c5ccb5a106016483e1947318aa101a182d5298a3ab2a627e92b19d964bf0a6c152b9d06cfa87da6ebdd6409501e58992550be5cca23e6e99423217b1e7cccb94371acd320c7dd095c6efb3b4b932844c404d194d433d784b379640dd6ea5aa58d1138293d728e4724ea4d06c5c5b120e33170938120d2411c162925be813c2d66cff2a3775459b4d7b1a6737ab94fa832228e0c6572029da311e02be0b5d81ffb8135888074650a87df4b6d9a5fcbb809a38f4b00ec7393544adeb795d83f2bf0b1c27e6013204c1b61b3dad6bb6caaf12084ea6d4a5238742b4c53e0d726b0a577788fa946dc976746cb4bb76a03b6e5b55e98b2e8411a90a5071404116688876d1ed2051d8a65e6a7008ab360e11e26fb296b092c71dbdb242c2a072ad3f4847a9a139688d59e1ff0357f04250821"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xc175}]}, 0x1038}}, 0x800) (async) [ 2604.153836][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:27 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4afb037", @ANYRES16=r0, @ANYBLOB="200026bd7000fedbdf252100000008007700850a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r7, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x59}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "13356f32ae"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4048080}, 0xc0) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000280)={0xffffffffffffff4f, r0, 0x1, 0x70bd25, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x68}}}}}, 0x28}}, 0x90) (async, rerun: 64) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250a00000008a000c495dd084e06797e10c79bc75e4db1b2ac54d764450b6da1055bce0f37c354b69455a81bf917d12300", @ANYRES32=r5, @ANYBLOB="10006e800400010004000200040002000a000600080211000000000011000700be26119c0f8e95677e85ce6d1f000000"], 0x4c}}, 0x804) (async, rerun: 64) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f, 0x100080}, 0x20) 00:44:27 executing program 2: semget(0x3, 0x4, 0x64) r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x4, 0x7, 0x1000}, {0x2, 0xffff, 0x800}, {0x2, 0x32c, 0x1000}, {0x14d28e04e29badc1, 0x8000, 0x1000}, {0x4, 0x2e6d, 0x800}, {0x3, 0x218, 0x1800}], 0x6) 00:44:27 executing program 0: r0 = semget(0x3, 0x600, 0x0) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/4096) r1 = semget(0x2, 0x0, 0x244) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000001080)=0x5) (async) r2 = semget$private(0x0, 0x3, 0x20) semtimedop(r2, &(0x7f0000001000)=[{0x0, 0x6, 0x1000}, {0x2, 0x81, 0x400}], 0x2, &(0x7f0000001040)={0x77359400}) [ 2604.228204][ T3498] Bluetooth: hci3: Received unexpected HCI Event 00000000 00:44:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7ff, 0xe5, 0x80, 0xc3}, {0x1ff, 0x6, 0x3, 0x9}, {0x200, 0x8, 0x20, 0x80000001}, {0x400, 0x4, 0x9f, 0x4}]}) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x1038, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xc175}]}, 0x1038}}, 0x800) 00:44:27 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='b'], 0x7) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, 0x0, 0x10, 0x70bd2e, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x0, 0x118, 0x19}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x0, 0x26, @random=0x999}, @NL80211_ATTR_CHANNEL_WIDTH={0x0, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x0, 0x118, 0xfd}, @NL80211_ATTR_WIPHY_FREQ, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4000008}, 0x8010) 00:44:27 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5d967b789b575927}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x4040001) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:27 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/120) 00:44:27 executing program 0: r0 = semget(0x0, 0x600, 0x1) r1 = semget(0x2, 0x1, 0x42) semctl$GETPID(r0, 0x2, 0xb, &(0x7f00000002c0)=""/145) semget$private(0x0, 0x1, 0x0) semget$private(0x0, 0x0, 0x11) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f00000001c0)=""/65) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/141) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) semctl$GETPID(r0, 0x5, 0xb, &(0x7f0000000000)=""/36) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = semget$private(0x0, 0x2, 0x10) r6 = semget$private(0x0, 0x2, 0x215) semctl$IPC_INFO(r6, 0x4, 0x3, &(0x7f0000000240)=""/72) semop(r5, &(0x7f0000000100)=[{0x0, 0x3, 0x2000}], 0x1) prctl$PR_GET_SECCOMP(0x15) 00:44:27 executing program 4: semget(0x1, 0x0, 0x0) 00:44:27 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='b'], 0x7) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, 0x0, 0x10, 0x70bd2e, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x0, 0x118, 0x19}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x0, 0x26, @random=0x999}, @NL80211_ATTR_CHANNEL_WIDTH={0x0, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x0, 0x118, 0xfd}, @NL80211_ATTR_WIPHY_FREQ, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4000008}, 0x8010) 00:44:27 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/120) semget(0x3, 0x0, 0x0) (async) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/120) (async) 00:44:27 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5d967b789b575927}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x4040001) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) 00:44:28 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={0x10007c, 0x100, 0x80000}, 0x20) 00:44:28 executing program 0: r0 = semget(0x0, 0x600, 0x1) r1 = semget(0x2, 0x1, 0x42) (async) semctl$GETPID(r0, 0x2, 0xb, &(0x7f00000002c0)=""/145) (async) semget$private(0x0, 0x1, 0x0) semget$private(0x0, 0x0, 0x11) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async, rerun: 64) r2 = semget$private(0x0, 0x1, 0x0) (rerun: 64) semctl$IPC_RMID(r2, 0x0, 0x0) (async, rerun: 32) semctl$GETPID(r2, 0x2, 0xb, &(0x7f00000001c0)=""/65) (async, rerun: 32) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/141) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) semctl$GETPID(r0, 0x5, 0xb, &(0x7f0000000000)=""/36) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) (async, rerun: 32) r5 = semget$private(0x0, 0x2, 0x10) (rerun: 32) r6 = semget$private(0x0, 0x2, 0x215) semctl$IPC_INFO(r6, 0x4, 0x3, &(0x7f0000000240)=""/72) semop(r5, &(0x7f0000000100)=[{0x0, 0x3, 0x2000}], 0x1) (async) prctl$PR_GET_SECCOMP(0x15) 00:44:28 executing program 4: semget(0x1, 0x0, 0x0) 00:44:28 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/120) 00:44:28 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='b'], 0x7) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, 0x0, 0x10, 0x70bd2e, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x0, 0x118, 0x19}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x0, 0x26, @random=0x999}, @NL80211_ATTR_CHANNEL_WIDTH={0x0, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x0, 0x118, 0xfd}, @NL80211_ATTR_WIPHY_FREQ, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4000008}, 0x8010) 00:44:28 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5d967b789b575927}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x4040001) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5d967b789b575927}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x4040001) (async) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)) (async) 00:44:28 executing program 4: semget(0x1, 0x0, 0x0) 00:44:28 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpid() ioprio_set$pid(0x1, r1, 0x0) process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001940)=""/242, 0xf2}, {&(0x7f0000001b40)=""/132, 0x84}, {&(0x7f0000000180)=""/3, 0x3}], 0x3, &(0x7f0000001780)=[{&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000240)=""/85, 0x55}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000000)=""/172, 0xac}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/100, 0x64}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/113, 0x71}], 0xa, 0x0) semget(0x3, 0x0, 0x0) r2 = getpgid(r0) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000440)={&(0x7f0000001840)="85fde8d8ca54576548e09ba57b0b92a058a6f2400a29da9a1bf9c4922d69d2b8f2a6b86fea9d5bc98e5ddb561f35a52de9897b890943c4d790887475bc82c09d7d5d4515afd8aa29faf8a517ce325a448c9593bb11e5598050ccd8e22167bfa14482934aa28bf6a09c9b817487503781615b030d90bc9f590ae63eb04dc19a2d91de9b744ca616851bc75bdfada25be1e1682fe38412dc4881c21cf821c61dc4649f7f607b2c9cc1", 0xa8}) r3 = getpid() ptrace$setregset(0x4205, r3, 0x200, &(0x7f00000000c0)={&(0x7f0000001a40)="69daff4fdcd997f258bc145f0064cbb6e139df038a19a607512d100a806469d99ab4b199baad3839273ea23aa7f86ed753d3bd37124f2f341fc4c0c67a0f5eed775637c170a13279dcd04a16beecc3e37f290beadf3c64fcb0e06e8745acf6e66655a517b03b8012126bc263b05abd2c44401b1d3d17b39f8812535a0f4451646583750abb98fb668d43e27e8af4fa6aeb2da17767533e5bc934516a5dcc0aec4d92df56eba697e86e7009e5c91463464d623028039810de47131d0e53a5046a97bcd80b7300d8c7592e924a1385e3fb083bc3a6a007a35d0a5e1817bc8d65b0d12fcf7057bd3cad192f89a7dbc79f25ff0fc7", 0xf3}) 00:44:28 executing program 0: r0 = semget(0x0, 0x600, 0x1) r1 = semget(0x2, 0x1, 0x42) semctl$GETPID(r0, 0x2, 0xb, &(0x7f00000002c0)=""/145) semget$private(0x0, 0x1, 0x0) semget$private(0x0, 0x0, 0x11) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f00000001c0)=""/65) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/141) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) semctl$GETPID(r0, 0x5, 0xb, &(0x7f0000000000)=""/36) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = semget$private(0x0, 0x2, 0x10) r6 = semget$private(0x0, 0x2, 0x215) semctl$IPC_INFO(r6, 0x4, 0x3, &(0x7f0000000240)=""/72) semop(r5, &(0x7f0000000100)=[{0x0, 0x3, 0x2000}], 0x1) prctl$PR_GET_SECCOMP(0x15) semget(0x0, 0x600, 0x1) (async) semget(0x2, 0x1, 0x42) (async) semctl$GETPID(r0, 0x2, 0xb, &(0x7f00000002c0)=""/145) (async) semget$private(0x0, 0x1, 0x0) (async) semget$private(0x0, 0x0, 0x11) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) semctl$GETPID(r2, 0x2, 0xb, &(0x7f00000001c0)=""/65) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/141) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) (async) semctl$GETPID(r0, 0x5, 0xb, &(0x7f0000000000)=""/36) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$IPC_RMID(r4, 0x0, 0x0) (async) semget$private(0x0, 0x2, 0x10) (async) semget$private(0x0, 0x2, 0x215) (async) semctl$IPC_INFO(r6, 0x4, 0x3, &(0x7f0000000240)=""/72) (async) semop(r5, &(0x7f0000000100)=[{0x0, 0x3, 0x2000}], 0x1) (async) prctl$PR_GET_SECCOMP(0x15) (async) 00:44:28 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={0x10007c, 0x100, 0x80000}, 0x20) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2f}, 0x20) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/orangefs', 0x610000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={0x10007c, 0x100, 0x80000}, 0x20) (async) 00:44:28 executing program 1: socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x92, 0x20}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x180, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xd}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000094}, 0x4800) 00:44:28 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/orangefs', 0x610000, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04", @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="e902327702aa0a57095b972c833bf3075c0dc75100c81dbc7dde227f89c3c042cfce162e0b5df91b96e5"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 00:44:28 executing program 4: r0 = semget(0x3, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/54) semget$private(0x0, 0x4, 0x3a) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000040)=""/146) 00:44:28 executing program 2: r0 = getpgrp(0xffffffffffffffff) (async) r1 = getpid() ioprio_set$pid(0x1, r1, 0x0) process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001940)=""/242, 0xf2}, {&(0x7f0000001b40)=""/132, 0x84}, {&(0x7f0000000180)=""/3, 0x3}], 0x3, &(0x7f0000001780)=[{&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000240)=""/85, 0x55}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000000)=""/172, 0xac}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/100, 0x64}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/113, 0x71}], 0xa, 0x0) (async) semget(0x3, 0x0, 0x0) r2 = getpgid(r0) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000440)={&(0x7f0000001840)="85fde8d8ca54576548e09ba57b0b92a058a6f2400a29da9a1bf9c4922d69d2b8f2a6b86fea9d5bc98e5ddb561f35a52de9897b890943c4d790887475bc82c09d7d5d4515afd8aa29faf8a517ce325a448c9593bb11e5598050ccd8e22167bfa14482934aa28bf6a09c9b817487503781615b030d90bc9f590ae63eb04dc19a2d91de9b744ca616851bc75bdfada25be1e1682fe38412dc4881c21cf821c61dc4649f7f607b2c9cc1", 0xa8}) (async) r3 = getpid() ptrace$setregset(0x4205, r3, 0x200, &(0x7f00000000c0)={&(0x7f0000001a40)="69daff4fdcd997f258bc145f0064cbb6e139df038a19a607512d100a806469d99ab4b199baad3839273ea23aa7f86ed753d3bd37124f2f341fc4c0c67a0f5eed775637c170a13279dcd04a16beecc3e37f290beadf3c64fcb0e06e8745acf6e66655a517b03b8012126bc263b05abd2c44401b1d3d17b39f8812535a0f4451646583750abb98fb668d43e27e8af4fa6aeb2da17767533e5bc934516a5dcc0aec4d92df56eba697e86e7009e5c91463464d623028039810de47131d0e53a5046a97bcd80b7300d8c7592e924a1385e3fb083bc3a6a007a35d0a5e1817bc8d65b0d12fcf7057bd3cad192f89a7dbc79f25ff0fc7", 0xf3}) [ 2605.895049][ T3498] ===================================================== [ 2605.902155][ T3498] BUG: KMSAN: uninit-value in hci_conn_complete_evt+0x2fd/0x1e00 [ 2605.909927][ T3498] hci_conn_complete_evt+0x2fd/0x1e00 [ 2605.915349][ T3498] hci_event_packet+0x183a/0x23e0 [ 2605.920407][ T3498] hci_rx_work+0x6a0/0xd00 [ 2605.924860][ T3498] process_one_work+0xdb9/0x1820 [ 2605.929920][ T3498] worker_thread+0x10bc/0x21f0 [ 2605.934728][ T3498] kthread+0x721/0x850 [ 2605.938827][ T3498] ret_from_fork+0x1f/0x30 [ 2605.943320][ T3498] [ 2605.945650][ T3498] Uninit was created at: [ 2605.949950][ T3498] __kmalloc_node_track_caller+0xe0c/0x1510 [ 2605.955891][ T3498] __alloc_skb+0x545/0xf90 [ 2605.960340][ T3498] vhci_write+0x187/0x8f0 [ 2605.964706][ T3498] vfs_write+0x1318/0x2030 [ 2605.969153][ T3498] ksys_write+0x28b/0x510 [ 2605.973512][ T3498] __x64_sys_write+0xdb/0x120 [ 2605.978218][ T3498] do_syscall_64+0x54/0xd0 [ 2605.982672][ T3498] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2605.988607][ T3498] [ 2605.990930][ T3498] CPU: 1 PID: 3498 Comm: kworker/u5:1 Not tainted 5.16.0-rc5-syzkaller #0 [ 2605.999463][ T3498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2606.009541][ T3498] Workqueue: hci3 hci_rx_work [ 2606.014269][ T3498] ===================================================== [ 2606.021204][ T3498] Disabling lock debugging due to kernel taint [ 2606.031022][ T3498] Kernel panic - not syncing: kmsan.panic set ... [ 2606.037459][ T3498] CPU: 1 PID: 3498 Comm: kworker/u5:1 Tainted: G B 5.16.0-rc5-syzkaller #0 [ 2606.047387][ T3498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2606.057466][ T3498] Workqueue: hci3 hci_rx_work [ 2606.062193][ T3498] Call Trace: [ 2606.065484][ T3498] [ 2606.068421][ T3498] dump_stack_lvl+0x1ff/0x28e [ 2606.073144][ T3498] dump_stack+0x25/0x28 [ 2606.077336][ T3498] panic+0x487/0xe1f [ 2606.081272][ T3498] ? add_taint+0x181/0x210 [ 2606.085714][ T3498] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 2606.091560][ T3498] kmsan_report+0x2e6/0x2f0 [ 2606.096113][ T3498] ? __msan_warning+0xb8/0x130 [ 2606.100911][ T3498] ? hci_conn_complete_evt+0x2fd/0x1e00 [ 2606.106489][ T3498] ? hci_event_packet+0x183a/0x23e0 [ 2606.111719][ T3498] ? hci_rx_work+0x6a0/0xd00 [ 2606.116350][ T3498] ? process_one_work+0xdb9/0x1820 [ 2606.121511][ T3498] ? worker_thread+0x10bc/0x21f0 [ 2606.126496][ T3498] ? kthread+0x721/0x850 [ 2606.130771][ T3498] ? ret_from_fork+0x1f/0x30 [ 2606.135404][ T3498] ? __kfree_skb+0x298/0x330 [ 2606.140033][ T3498] ? kmsan_get_metadata+0x33/0x220 [ 2606.145188][ T3498] ? kmsan_get_metadata+0x33/0x220 [ 2606.150337][ T3498] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2606.156195][ T3498] ? kmsan_get_metadata+0x33/0x220 [ 2606.161349][ T3498] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2606.167205][ T3498] ? kmsan_get_metadata+0x33/0x220 [ 2606.172358][ T3498] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2606.178642][ T3498] ? kmsan_get_metadata+0x33/0x220 [ 2606.183797][ T3498] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2606.189665][ T3498] ? kmsan_get_metadata+0x33/0x220 [ 2606.194840][ T3498] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2606.200962][ T3498] __msan_warning+0xb8/0x130 [ 2606.205598][ T3498] hci_conn_complete_evt+0x2fd/0x1e00 [ 2606.211012][ T3498] ? kmsan_internal_task_create+0x1c/0x40 [ 2606.216786][ T3498] hci_event_packet+0x183a/0x23e0 [ 2606.221846][ T3498] ? kmsan_get_metadata+0x33/0x220 [ 2606.227015][ T3498] hci_rx_work+0x6a0/0xd00 [ 2606.231483][ T3498] ? hci_alloc_dev_priv+0x2b50/0x2b50 [ 2606.236902][ T3498] ? hci_alloc_dev_priv+0x2b50/0x2b50 [ 2606.242329][ T3498] process_one_work+0xdb9/0x1820 [ 2606.247354][ T3498] worker_thread+0x10bc/0x21f0 [ 2606.252219][ T3498] kthread+0x721/0x850 [ 2606.256327][ T3498] ? worker_clr_flags+0x370/0x370 [ 2606.261405][ T3498] ? kthread_blkcg+0x120/0x120 [ 2606.266227][ T3498] ret_from_fork+0x1f/0x30 [ 2606.270692][ T3498] [ 2606.273892][ T3498] Kernel Offset: disabled [ 2606.278221][ T3498] Rebooting in 86400 seconds..