0007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:09 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:09 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:09 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:09 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:09 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:09 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:09 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
getsockopt$netlink(r7, 0x10e, 0x0, &(0x7f00000006c0)=""/129, &(0x7f0000000780)=0x81)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
getsockopt$netlink(r7, 0x10e, 0x0, &(0x7f00000006c0)=""/129, &(0x7f0000000780)=0x81)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
getsockopt$netlink(r7, 0x10e, 0x0, &(0x7f00000006c0)=""/129, &(0x7f0000000780)=0x81)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
getsockopt$netlink(r7, 0x10e, 0x0, &(0x7f00000006c0)=""/129, &(0x7f0000000780)=0x81)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
getsockopt$netlink(r7, 0x10e, 0x0, &(0x7f00000006c0)=""/129, &(0x7f0000000780)=0x81)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
getsockopt$netlink(r7, 0x10e, 0x0, &(0x7f00000006c0)=""/129, &(0x7f0000000780)=0x81)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
getsockopt$netlink(r6, 0x10e, 0x0, &(0x7f00000006c0)=""/129, &(0x7f0000000780)=0x81)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
getsockopt$netlink(r6, 0x10e, 0x0, &(0x7f00000006c0)=""/129, &(0x7f0000000780)=0x81)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
getsockopt$netlink(r6, 0x10e, 0x0, &(0x7f00000006c0)=""/129, &(0x7f0000000780)=0x81)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r5})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:10 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:11 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:11 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:11 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:11 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:11 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:11 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:11 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 2:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:11 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:11 executing program 2:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:11 executing program 2:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd, 0x0, r6})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:11 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:11 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x2, 0xbd})

15:46:11 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x0, 0xbd})

15:46:11 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x2, 0xbd})

15:46:11 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x0, 0xbd})

15:46:11 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:11 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:11 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:11 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x0, 0xbd})

15:46:12 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:12 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:12 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)

15:46:12 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:12 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)

15:46:12 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r4, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x840)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:12 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r4, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 2:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 2:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r4, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 2:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r4, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:12 executing program 1:
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 2:
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 1:
io_uring_setup(0x4d1a, 0x0)

15:46:12 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r4, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 2:
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
io_uring_setup(0x4d1a, 0x0)

15:46:12 executing program 2:
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:12 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x4004840)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
io_uring_setup(0x4d1a, 0x0)

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r4, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 2:
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:12 executing program 1:
io_uring_setup(0x4d1a, &(0x7f0000000f00))

15:46:12 executing program 2:
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:12 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:12 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
io_uring_setup(0x4d1a, &(0x7f0000000f00))

15:46:12 executing program 2:
io_uring_setup(0x4d1a, 0x0)

15:46:12 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:12 executing program 1:
io_uring_setup(0x4d1a, &(0x7f0000000f00))

15:46:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:13 executing program 2:
io_uring_setup(0x4d1a, 0x0)

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:13 executing program 2:
io_uring_setup(0x4d1a, 0x0)

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 2:
io_uring_setup(0x4d1a, &(0x7f0000000f00))

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x2, 0xbd})

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:13 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x2, 0xbd})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:13 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x0, 0xbd})

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x2, 0xbd})

15:46:13 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x0, 0x0, 0xbd})

15:46:13 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0xbd})

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00))

15:46:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e})

15:46:13 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00))

15:46:13 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 4:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:13 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:13 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4a}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:13 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:13 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)

15:46:13 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:13 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:13 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:13 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)

15:46:14 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:14 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:14 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:14 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:14 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, 0x0, 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, 0x0, 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, 0x0, 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r4 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, r4, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r6=>r2}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r8, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r11=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r6}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r11, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r4 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, r4, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r6=>r2}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r8, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r11=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r6}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r11, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r4 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, r4, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r6=>r2}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r8, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r11=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r6}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r11, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:15 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:15 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:15 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:16 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:16 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:16 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:16 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:16 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:16 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r7, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r7, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x9e7e, 0x80, 0x2, 0xbd})

15:46:16 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r7, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:16 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:16 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:16 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, 0x0)

15:46:16 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x80, 0x2, 0xbd})

15:46:16 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x2, 0xbd})

15:46:16 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:16 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0xbd})

15:46:16 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:16 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:17 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00))

15:46:17 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4d1a, &(0x7f0000000f00))

15:46:17 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:17 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:17 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:17 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r7, 0xe}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:17 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:17 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:17 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:17 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:17 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:17 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:17 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:17 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:17 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:17 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:17 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:17 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

[  102.960447][T16862] ==================================================================
[  102.968684][T16862] BUG: KCSAN: data-race in nfc_llcp_register_device / nfc_llcp_unregister_device
[  102.977851][T16862] 
[  102.980194][T16862] write to 0xffff888103991408 of 8 bytes by task 16870 on cpu 1:
[  102.987954][T16862]  nfc_llcp_register_device+0x3e4/0x440
[  102.993599][T16862]  nfc_register_device+0x67/0x190
[  102.998640][T16862]  nci_register_device+0x4e6/0x570
[  103.003761][T16862]  virtual_ncidev_open+0xdc/0x140
[  103.008795][T16862]  misc_open+0x1fd/0x230
[  103.013051][T16862]  chrdev_open+0x349/0x3c0
[  103.017470][T16862]  do_dentry_open+0x5b3/0x930
[  103.022164][T16862]  vfs_open+0x47/0x50
[  103.026181][T16862]  path_openat+0x17e6/0x1d00
[  103.030806][T16862]  do_filp_open+0xf6/0x200
[  103.035225][T16862]  do_sys_openat2+0xb5/0x2a0
[  103.039850][T16862]  __x64_sys_openat+0xf3/0x120
[  103.044648][T16862]  do_syscall_64+0x41/0xc0
[  103.049100][T16862]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  103.055024][T16862] 
[  103.057360][T16862] read to 0xffff888103991408 of 8 bytes by task 16862 on cpu 0:
[  103.064995][T16862]  nfc_llcp_unregister_device+0x90/0x130
[  103.070638][T16862]  nfc_unregister_device+0xe6/0x130
[  103.075853][T16862]  nci_unregister_device+0x14c/0x160
[  103.081234][T16862]  virtual_ncidev_close+0x30/0x50
[  103.086275][T16862]  __fput+0x245/0x570
[  103.090256][T16862]  ____fput+0x15/0x20
[  103.094252][T16862]  task_work_run+0x123/0x160
[  103.098853][T16862]  exit_to_user_mode_loop+0xcf/0xe0
[  103.104072][T16862]  exit_to_user_mode_prepare+0x6a/0xa0
[  103.109641][T16862]  syscall_exit_to_user_mode+0x26/0x140
[  103.115220][T16862]  do_syscall_64+0x4d/0xc0
[  103.119671][T16862]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  103.125593][T16862] 
[  103.127911][T16862] value changed: 0xffffffff85eabf80 -> 0xffff88811ebbf400
[  103.135026][T16862] 
[  103.137356][T16862] Reported by Kernel Concurrency Sanitizer on:
[  103.143504][T16862] CPU: 0 PID: 16862 Comm: syz-executor.0 Not tainted 6.3.0-rc2-syzkaller-00047-g6015b1aca1a2 #0
15:46:17 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:17 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

[  103.153924][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[  103.164021][T16862] ==================================================================
15:46:18 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:18 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:18 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r5, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:18 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:18 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r5, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r12=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r12, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:18 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)

15:46:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:18 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:18 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r8, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)

15:46:18 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:18 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:18 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})

15:46:18 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r8, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:18 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:18 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r8, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:18 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r8, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)

15:46:18 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58)

15:46:18 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:18 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})

15:46:18 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r7, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r6}}, 0x58)

15:46:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)

15:46:18 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(r6, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r11, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r14=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r14, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
r7 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'})

15:46:18 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x4}}, './file0\x00'})
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r5 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r7, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r6}}, 0x58)

15:46:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x0, 0x6, 0x3, 0x7, 0x20, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x353, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r3]}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r6, 0xe}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000940)='devices.deny\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, r10, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x801)
syz_clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000bc0)=<r13=>0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x2d}, &(0x7f0000000c80)=""/232, 0xe8, &(0x7f0000000d80)=""/96, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r13, {0xee00, 0xffffffffffffffff}}, './file0\x00'})

15:46:18 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x400}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4a}}, './file0\x00'})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x4}}, './file0\x00'})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r6, 0xe}, 0x10)
openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00'})
bind$can_j1939(r0, &(0x7f00000009c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)