HCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:19 executing program 3: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, 0xfffffffffffffffc, 0x0) 05:31:19 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000b40)={@host}) r5 = syz_open_dev$audion(&(0x7f0000000380), 0xb3, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000003c0)={0x3, r5}) getresuid(&(0x7f0000000180), &(0x7f00000001c0), 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000300)={0x0, 0x8}) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x20}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@empty, @in6=@initdev}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[r0, r2, 0xffffffffffffffff, r6]}, 0x4) 05:31:19 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) sendmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="66d5da50a0d9ab3904b002ed4439f27813ba4c5bcd525ae9a0672979b6", 0x1d}, {&(0x7f0000000140)="542cff16cd77ac144c0a3cd450de16671018abac28562b6079756669a67aef87bb7f75b68bf8bf4b4bfd1bb4680d3b65ed34", 0x32}, {&(0x7f0000000200)="34beff4f88ead86657f5ea05d19b9a8a12ad9151c12edf842eb6917980f8a5d4c5581690d1358eb87f8099c8b094d428c16ecd6fd5691972d64d1e061ae806ec1ccd991bc5d99514ced518833b10609f559addb80537dc103148e31261a627a533da946610c6711805bc3ca5f0515efffd5a90996fbac94336279619174a8e58a527212224385261fde3096bb25bb3844b8cc08b914b0417ebafde8d939b59b1c2d0f07bf8112503b033f1503fbb99286346e956789f1a775ce4eca70cbf15613646d3f5984c51511a92ee787b6ada3581f50cab4eaaba61300969b4fcc8e983e887a40df942fe087c3985e4430265ae6723fa4f1e2815a026a925ad00cabebe71ff963d62d1c8e4b773eb5e474c6d00626acfe9a4759c3cf5af7f689e9febf5f4744b36326ede61d0279d15d02431e6953be5cfc42eb512cf1c672cfaba8decfd364d62f2b65ca663493a8bb979fa70d7d3756466568fdf935d12807daf7bfdafc0fe700b1a505bc8960c8f94b59112e8dba80f416755afdedeabe8031ded190dfb542692b7d7be4f42eee72217bef5571882555f0e75e59fd535884d91571a16cae790ccbdeff4a4f9d30f1d212f5993660b81766e2459b76134383ddc0fcf5413609a8c3bdab3eedebdcbf0ad6d702866721ad94454c2f0beb4478e59bee4ae4843300afd70ca9b7a4e2b9c45fc1e6e8be6971cf7ccf540d4df55daf20f337b63f2bff0fa95e6a74410fa88516b9869aa034640501601d73086a6aaa21ac05a4c0a37131d2bee462703ab67b56d62a109c0567207bfbd773838b6c07c4d8711f6b55a352ed5300157d8e6a1b14585ab48814b7da71f6ae1c9366eed24bf2e2ed623fd4f3fbce7d57e62e41c17398daa4011c09eea9f7f1159108c883a8a576aff6b7944cf1fd52f77a65b7dd846ae87da6b2a8fab29ae0c6d4809d02803dac3f033472ef52244bbb8587198ad30adb5f482ecc8a8ce213c870b35b645c7633328cc1b48e8872916f40624899cdb0c2ae5accf55567f11da84f8d5167e051398498896532ca551a5f92967a341de0a716fd4d47b0f155c7a7a07e2c7f6f6beee5f06dea841fb7c2931251e11731b727a65ba6b5f0b72f2ca94eb1cba9db2a1de3da09b9391a13194c5a8011185d79bb566f859e2cd7f5bf8afdb0074503955ea4516ba98710f3cf6fc1d7bb8262ab4aa0c45d3834bcefbd92705d8b15f6fb7844286e41d468bd7ddcd277ebb5b252199fec0c772ec7cb29654e60183070d2d02f676442e7d4b70a6af6fe1b1b9201f9350ce2fa8fae2eff296a3a1150bc543e4d43d5ee1eb528df746f80282ca99daae38559a9dbed4b6a2cd39d52013aae06db3648e07190497b84917a0eb4757af3edc380d839e976507c1dc0a4276b5e8087e0b3f872c15cf53c96c1aecd5745d2c1a9fe8a4c9124527db8177f8fa5cf4d558ffa0926b04b9554d8a2403f7508a24f9e17d4dcc9bb3de5d6963fb20437085daff47a73abe60d18860dbc9280edb08515779e0e85492ef480d375ad06985e3f896025653981ad647db7845706ea7e1d0dc33b265664f10d652f76ec85aa6179dcb36cd1931763fe9228d291cf7d9628889c634334863076373d220d51b7f6ea436d3e49edac3da99004eb6f069ae37c34ce94ced3ac3a8de662f5efe41311548aa045e7d2ae346ca7d44535b90708c6620ba05005633562eb5e62742f8c7b1d136a4d95aa6a93404b155ed5aa155207f730279a69916f1c8d59fda759fc2afaa567ddda373c6dcae1d5ae388253dc374a99aebb1da213c9bd23c43efb0384e6061cddec70dcdfe7f4d192429a711e95845c748618d41406083406aca5b84b3f1152965d4f5b1a7e482f2ffd62c6d5632aa549d274b99e4c95d765acf3ca62491e8aba6853afa8b19afb07839dadbf4b7cd12126baf1294dd29a36f3b2f5d07e8ae8575aee28f8135f4636a8a3bd40bd2092b413f0cfc0a2a06dc2adcbed61602241c58d665dc29b0658557f871d1e666fd18a064fad273b699759fef4653f44e7de45a5b2a31c0c55a1e5688b2eb3e5b1b2e502c79040b4ba32ea4c31315b2124a3d0191d733017eac71414c6491c67198a991560c3cfe1b05355cfa88a34b97c3a180c51640c560aa8759fa9532127ddafe77bf92665d80503365a8cc0a1100d28a863d3fd268359e5506dcca5e71a3faff8cb27daf9b37556e2dcf0915c44de64ce14cf8458a58016f88c17a9960ebfe98c7fc3afd7384eec469b5bf34ec61713180b2f69e6250e4494bcf2c68c1c3798c74b8cb61d60c90a8abd42eb034f458607e162404601e022c9bbfc65457e866fb511062c0edeb98ef83aefac1ae0a19b06500a0dd846a06d00538b7c6286e7c0404ac68552536e7c055c17d54c97d69536b397ed01a4f2edfe50e972724d181304ac1ab3a0712bcc9e7b02fca890991e94781a2b8ee2dd8cd4a9b9d759d3cd97e7149f5df967450cd475dccd235fc447d486b19e6d6ff6abc25c6a9bf6797800f8fba89be1e2c9008859a2caa7bbd82387ca2a3d931dac4a48ff619587032bbd88bdc7196001e1cc597ffa47b30a748d459325cb2b44d8d43c8cf252994375060f37a62e90e60f8dbe427832944b668dc3b3ac317ac90dfd24d8ef282a895fc5de35bd3323a358d2839fb077ac8229158548186c9e02326b4d153e5170879bca0c10b586565e35e6cf7f64379456c11cbd047c109a46fde98c6b01b50f3595fb7d8b09985a7e2e160a041dfdc581019238a3fa7f46ed4e75ff9309c720c978f7bbf1a4b13ad43f29e1b146b9f10d256f6de2c512d70fc76275322843a9c9235d329537dade3f40903a90972b378c1583155d6261e8ffcfaa7c5b82eb2383315e5e2423e8c9c6f7409ac6b1a9e0de47cdb6bb9ec4983794be69038866a0596ebd264f5a7ae24d4086867a20bcc6bba6fbc6a63107214ad8f5e12fb906aedc951d92a656e5bceba82e93e507370c157d9d02509ba284ab8e751d67a5a96a71eb5e09bcea12097fcc4447a199804827b20839a222e3c68d88a9304035a781ec3221d0ad131210136915384da68a964efc69dedb950e2be6652e72e7190a4654405d8c80b44348e9333474e85e508b2658ae069ce4ffcd58c2b2d2fcca9a0a0d29d8ddb55a07d00fe7c923327e0d06664f70e92e41fab32af708d5ee168c28776cea80740ec3e1809ecfad54ee33345b6439bd3c9310218eac50e3c61d09a22f5c55ddebe2c4b5477bc4f69430df82fa187801f601258dbcb4e5a1743933e6f8e15c69d17f4f35c40433296c0020f74977f325407ae95dbfda153040418a8084438e0065f42a7e7647ad7bbdecec66732469945444c445b3876a7b0e710da084267698baec8d954dac06deb0324d5532a5631833fa7d2fb5ca0543b937208363d53ab600bb92e5a849e2292a97f8a2067977b506783e56e8e795a23a904fce1b44fba1750a35e43b641370eb19bd45acd2040138b22f0c56d6580d641088e9dafc26e3b3d01893163b46429374772c3312af10f621f81a127b34ee5193ee94a2205b819ea4a858f901c6784a25aae2f99429fefc84a90aef7a2b2aaf19ed78ca46d1b4c6d4ed8e4f94a654f1c3e28ab3b184f9c86b29a203cd6b57f05b61a90bf1d469b6a74c09cce6a696f83e2a411c685f3f2ef4565f0d26796541bfb9fa2aa6ba986d2b4928ae5014b5c77b8906a60768eb62d7dd2a3e10c4090ea9106fa7c1829dc84d0e9b4d0422213ca851dbf841dd32377f84b529fc051a6716d2a6c3efcbb272aedcca703c508f6465fddc3a6fabd0e717ecddceae2b01e23136d537141c2e1bec351a0f078b7aa961ac554bb8575c3d179ed162b0718b1694743f30faebc0fb4acbaec8ab2e09a6f458b09be325d916a7a6962bbf6b96883af6635e54f34c3418321b7337b38284ec2a2d810bff3716acd08ebe2784ad91546c0f234720aaa33fdd924e13ff0388ffa513d1784d7ea9b69246410267a32f9bcdefa48c9f4a53c04b3999dcf0adc60d51c7f87cdaf2bbb16a6700c5cc84bd8466a1ae06e8d34de2d5d6fdccc3de4384e4055e6453f72b7d4cd7c50f33dac2c11da862fbe554ce378d2495f3075849ee3c0a881fc3789eeddacb5032a5a66a709f5acd44bbbea186b558c95d25711a981e2c2ec7150c3d5c0c9c94857c90d0fef6722fc86011c5118653157c19e8eecea7b9f9a0b87062e031e8a1698289fbb702207bb2410248babcec7d798f31bd63e9b6d494131fbb687a7178ddeed730c787cc95d6993684a98d4ee00dd8962e70ed0cecd619f9c4627f2af318d9ee22c4aa45728cbd74415c810be2d1a86fc75e9a08d12758596cd23c34689621531411d9800ff85c015eb259a8719754fb27a6c8010243ad956c5bea5da4cebb5231b491f3f853fe69a7540a6378c73e06aa68675035c7f5d557f6fdb55118f772f830fdbe5c30291acc190b9c6c7b54359eb55bd169e7f5bdbff7d990e2015b07a3ab87380c5c798a1feaf797a1f6d9add484b1abb32c73eaa2f7d5b28f42c26720c48248c2d95f82278674aaeca94b341c5a059c8988a3d2e9a24bb473e9752891ff3e4f7b7c3e70bd717b8eecc39acf225d830a7248f48871dd7fe6e88283f658901aada6a05685ce8822eabdc95d534d3ea3b23c31a7804e61775bed1b0fcad765461420f90425e5f98c7e328e83835fcf19e60dc9d8ea9be02df3bc645ccf044b8ddb03cce843a4388104df96afd8577cc2756335d172a8f5587567ed2ddd362e0a2656059fd1bdae675d955851403e6be2130ff78b151687e2b89afd74df5b16678a975672a90535893bd9401c80729d44cf26a9aec2c16e5f5caed41e83d16c94f05e0932598dfb21636dd2bf210505737fb4d75f253b8a41f86d6e8b87223b366fa29bffc1dd88dec38f431115fc14d9e0bd26c07b0f745e49aa10841e052a0268987edd720a76c6e1b77b31bf06ce09b65f4ef4dd6e883cdbb19269f53fb1a8404f3df7960f372639440df3ae8e76cc3964bbbc83e1cb14c7603a6a3e4233b0c37a9c437ca1c4c49cc806f3fe897f1f4fc4d969670627e23de7c5088f3a61ff95a84ecc21a548cc9b6d4b961a32fdf2526f16eca3ac1eb9f9e2ce7dd09fdf49584bfc6c561c3634487340835c5e132af70c600f64442cd96a666f467414d8b154afbd7bdc619783d59a336d3c2df51f48b1ffbfef8b4179e1d20aa330925c2d44c782aafd751b06d0e3f3df462a996da7340b9e9ea56858c6322924f0d5a7096bd3a340f68935edbacfab7535ff999b6c37a87157b8cb3e2fec86c61946e9c33610d6318c940b10cab50e5622c350fb6c508e2c9d69e407a8f30282e56a9e060612d8c904b8562feed29b304e89f16d6b7cc318aa9de4e9a57c0665247310bf9f02c44dd41a66760160bb7e768847c03a5c1e7f2d1eed8938763d2f85fdc7ce8acc035a16d881a6def182843aeccd6c71ee9cc74dff152fa51df141eeaa4d9b98f2c5acbb3bdef967b34021bb1f33817599f38cbac793821153830b6ab1a4374be00095e55dd0ab0be8f9f296432ecebf2e78a807bc9f9b4039f7026177abc02315aa3354280c56598871d2fabd64c1807a98f553e2dd907ece11d1156434bfc3acd3dd4c3d1cb5ee2e9369536cb7ca09635ec8577e6bfe78a8347ad04c571422c2aa51868d31f7177ff90738b68bb8f9dfcf9902eaf357bf9ed382279f6851596582e7aa888b57758ba22397eade1dbaed620df49f0a4e8d4d5e126279c05110076c84e6237ca878f89d1c51395d016", 0x1000}, {&(0x7f0000001200)="f4d5868a01011f4c973a08ab068b939807993e5cf40b3b7fc3653f78e1dc9b0e0c8af156d68615b87c3ec950dabafd632d6751", 0x33}, {&(0x7f0000001240)="3119fc05566870054af598e76509669a22d7e63eecff70c11ed602e8f9c204a28577194d9c0f40c254967ac1d400e82d0f1893cf842c4670dfa9", 0x3a}, {&(0x7f0000001280)="93b089bd001355f6", 0x8}, {&(0x7f00000012c0)="9f24def72d2063917f65262c9f6cd1d8ce6ff118a171603bf517e3f288f2bbc23ac38217906872c5d65077e3c2e1c69c6df3b39ff023188bc156098c56bafd6227299dcc7f723c9121339a984d3c0807c8abd1e2df1c44ba37e19bcc0fd0f855504119d02e151999eb0a3093ee449e16e2e68873a8cb50e28c29411fc053c88c878b43db161ac84ffbeb6534b0c832242e75fc3487923552e78278cd4abf700f6d5c6ea5dab9eb243469d66c45a0d90f692c5a92ecef43ff3a19a01b559f08a6ec880c0bb6ecada7a183602d114f589d4928363e4ec5207151093f6bbbf0a431a811a8f1c18d4a68747ed7f5ca85bb00f8f60403", 0xf4}], 0x7, &(0x7f0000001440)=[{0x38, 0x84, 0xd6dc, "02e58f9edcebb82fb030104e6ad79be6c49c97939b161a65b7c670109a1c6a51c386986cabc3fe"}], 0x38}, 0x40004) r1 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) syz_io_uring_setup(0x1005357, &(0x7f0000000000)={0x0, 0x5f81, 0x20, 0x0, 0x271, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:19 executing program 5: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0xf0bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:19 executing program 3: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, 0xfffffffffffffffc, 0x0) 05:31:19 executing program 1: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_setup(0x4803, &(0x7f0000000000)={0x0, 0x874a, 0x20, 0x2, 0x165, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000380), 0x2) 05:31:19 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) sendmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="66d5da50a0d9ab3904b002ed4439f27813ba4c5bcd525ae9a0672979b6", 0x1d}, {&(0x7f0000000140)="542cff16cd77ac144c0a3cd450de16671018abac28562b6079756669a67aef87bb7f75b68bf8bf4b4bfd1bb4680d3b65ed34", 0x32}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="f4d5868a01011f4c973a08ab068b939807993e5cf40b3b7fc3653f78e1dc9b0e0c8af156d68615b87c3ec950dabafd632d6751", 0x33}, {&(0x7f0000001240)="3119fc05566870054af598e76509669a22d7e63eecff70c11ed602e8f9c204a28577194d9c0f40c254967ac1d400e82d0f1893cf842c4670dfa9", 0x3a}, {&(0x7f0000001280)="93b089bd001355f6", 0x8}, {&(0x7f00000012c0)="9f24def72d2063917f65262c9f6cd1d8ce6ff118a171603bf517e3f288f2bbc23ac38217906872c5d65077e3c2e1c69c6df3b39ff023188bc156098c56bafd6227299dcc7f723c9121339a984d3c0807c8abd1e2df1c44ba37e19bcc0fd0f855504119d02e151999eb0a3093ee449e16e2e68873a8cb50e28c29411fc053c88c878b43db161ac84ffbeb6534b0c832242e75fc3487923552e78278cd4abf700f6d5c6ea5dab9eb243469d66c45a0d90f692c5a92ecef43ff3a19a01b559f08a6ec880c0bb6ecada7a183602d114f589d4928363e4ec5207151093f6bbbf0a431a811a8f1c18d4a68747ed7f5ca85bb00f8f60403", 0xf4}], 0x7, &(0x7f0000001440)=[{0x38, 0x84, 0xd6dc, "02e58f9edcebb82fb030104e6ad79be6c49c97939b161a65b7c670109a1c6a51c386986cabc3fe"}], 0x38}, 0x40004) r1 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) syz_io_uring_setup(0x1005357, &(0x7f0000000000)={0x0, 0x5f81, 0x20, 0x0, 0x271, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3fceeede, 0x202000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000940)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r4}}, 0x30) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0x0) 05:31:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:19 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xfd0d}) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0xfffffffffffffffc, 0x0) 05:31:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0xf0bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:19 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_io_uring_setup(0x39c6, &(0x7f0000000100)={0x0, 0xaebc, 0x20, 0x0, 0x1c2, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 05:31:19 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) sendmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="66d5da50a0d9ab3904b002ed4439f27813ba4c5bcd525ae9a0672979b6", 0x1d}, {&(0x7f0000000140)="542cff16cd77ac144c0a3cd450de16671018abac28562b6079756669a67aef87bb7f75b68bf8bf4b4bfd1bb4680d3b65ed34", 0x32}, {&(0x7f0000000200)="34beff4f88ead86657f5ea05d19b9a8a12ad9151c12edf842eb6917980f8a5d4c5581690d1358eb87f8099c8b094d428c16ecd6fd5691972d64d1e061ae806ec1ccd991bc5d99514ced518833b10609f559addb80537dc103148e31261a627a533da946610c6711805bc3ca5f0515efffd5a90996fbac94336279619174a8e58a527212224385261fde3096bb25bb3844b8cc08b914b0417ebafde8d939b59b1c2d0f07bf8112503b033f1503fbb99286346e956789f1a775ce4eca70cbf15613646d3f5984c51511a92ee787b6ada3581f50cab4eaaba61300969b4fcc8e983e887a40df942fe087c3985e4430265ae6723fa4f1e2815a026a925ad00cabebe71ff963d62d1c8e4b773eb5e474c6d00626acfe9a4759c3cf5af7f689e9febf5f4744b36326ede61d0279d15d02431e6953be5cfc42eb512cf1c672cfaba8decfd364d62f2b65ca663493a8bb979fa70d7d3756466568fdf935d12807daf7bfdafc0fe700b1a505bc8960c8f94b59112e8dba80f416755afdedeabe8031ded190dfb542692b7d7be4f42eee72217bef5571882555f0e75e59fd535884d91571a16cae790ccbdeff4a4f9d30f1d212f5993660b81766e2459b76134383ddc0fcf5413609a8c3bdab3eedebdcbf0ad6d702866721ad94454c2f0beb4478e59bee4ae4843300afd70ca9b7a4e2b9c45fc1e6e8be6971cf7ccf540d4df55daf20f337b63f2bff0fa95e6a74410fa88516b9869aa034640501601d73086a6aaa21ac05a4c0a37131d2bee462703ab67b56d62a109c0567207bfbd773838b6c07c4d8711f6b55a352ed5300157d8e6a1b14585ab48814b7da71f6ae1c9366eed24bf2e2ed623fd4f3fbce7d57e62e41c17398daa4011c09eea9f7f1159108c883a8a576aff6b7944cf1fd52f77a65b7dd846ae87da6b2a8fab29ae0c6d4809d02803dac3f033472ef52244bbb8587198ad30adb5f482ecc8a8ce213c870b35b645c7633328cc1b48e8872916f40624899cdb0c2ae5accf55567f11da84f8d5167e051398498896532ca551a5f92967a341de0a716fd4d47b0f155c7a7a07e2c7f6f6beee5f06dea841fb7c2931251e11731b727a65ba6b5f0b72f2ca94eb1cba9db2a1de3da09b9391a13194c5a8011185d79bb566f859e2cd7f5bf8afdb0074503955ea4516ba98710f3cf6fc1d7bb8262ab4aa0c45d3834bcefbd92705d8b15f6fb7844286e41d468bd7ddcd277ebb5b252199fec0c772ec7cb29654e60183070d2d02f676442e7d4b70a6af6fe1b1b9201f9350ce2fa8fae2eff296a3a1150bc543e4d43d5ee1eb528df746f80282ca99daae38559a9dbed4b6a2cd39d52013aae06db3648e07190497b84917a0eb4757af3edc380d839e976507c1dc0a4276b5e8087e0b3f872c15cf53c96c1aecd5745d2c1a9fe8a4c9124527db8177f8fa5cf4d558ffa0926b04b9554d8a2403f7508a24f9e17d4dcc9bb3de5d6963fb20437085daff47a73abe60d18860dbc9280edb08515779e0e85492ef480d375ad06985e3f896025653981ad647db7845706ea7e1d0dc33b265664f10d652f76ec85aa6179dcb36cd1931763fe9228d291cf7d9628889c634334863076373d220d51b7f6ea436d3e49edac3da99004eb6f069ae37c34ce94ced3ac3a8de662f5efe41311548aa045e7d2ae346ca7d44535b90708c6620ba05005633562eb5e62742f8c7b1d136a4d95aa6a93404b155ed5aa155207f730279a69916f1c8d59fda759fc2afaa567ddda373c6dcae1d5ae388253dc374a99aebb1da213c9bd23c43efb0384e6061cddec70dcdfe7f4d192429a711e95845c748618d41406083406aca5b84b3f1152965d4f5b1a7e482f2ffd62c6d5632aa549d274b99e4c95d765acf3ca62491e8aba6853afa8b19afb07839dadbf4b7cd12126baf1294dd29a36f3b2f5d07e8ae8575aee28f8135f4636a8a3bd40bd2092b413f0cfc0a2a06dc2adcbed61602241c58d665dc29b0658557f871d1e666fd18a064fad273b699759fef4653f44e7de45a5b2a31c0c55a1e5688b2eb3e5b1b2e502c79040b4ba32ea4c31315b2124a3d0191d733017eac71414c6491c67198a991560c3cfe1b05355cfa88a34b97c3a180c51640c560aa8759fa9532127ddafe77bf92665d80503365a8cc0a1100d28a863d3fd268359e5506dcca5e71a3faff8cb27daf9b37556e2dcf0915c44de64ce14cf8458a58016f88c17a9960ebfe98c7fc3afd7384eec469b5bf34ec61713180b2f69e6250e4494bcf2c68c1c3798c74b8cb61d60c90a8abd42eb034f458607e162404601e022c9bbfc65457e866fb511062c0edeb98ef83aefac1ae0a19b06500a0dd846a06d00538b7c6286e7c0404ac68552536e7c055c17d54c97d69536b397ed01a4f2edfe50e972724d181304ac1ab3a0712bcc9e7b02fca890991e94781a2b8ee2dd8cd4a9b9d759d3cd97e7149f5df967450cd475dccd235fc447d486b19e6d6ff6abc25c6a9bf6797800f8fba89be1e2c9008859a2caa7bbd82387ca2a3d931dac4a48ff619587032bbd88bdc7196001e1cc597ffa47b30a748d459325cb2b44d8d43c8cf252994375060f37a62e90e60f8dbe427832944b668dc3b3ac317ac90dfd24d8ef282a895fc5de35bd3323a358d2839fb077ac8229158548186c9e02326b4d153e5170879bca0c10b586565e35e6cf7f64379456c11cbd047c109a46fde98c6b01b50f3595fb7d8b09985a7e2e160a041dfdc581019238a3fa7f46ed4e75ff9309c720c978f7bbf1a4b13ad43f29e1b146b9f10d256f6de2c512d70fc76275322843a9c9235d329537dade3f40903a90972b378c1583155d6261e8ffcfaa7c5b82eb2383315e5e2423e8c9c6f7409ac6b1a9e0de47cdb6bb9ec4983794be69038866a0596ebd264f5a7ae24d4086867a20bcc6bba6fbc6a63107214ad8f5e12fb906aedc951d92a656e5bceba82e93e507370c157d9d02509ba284ab8e751d67a5a96a71eb5e09bcea12097fcc4447a199804827b20839a222e3c68d88a9304035a781ec3221d0ad131210136915384da68a964efc69dedb950e2be6652e72e7190a4654405d8c80b44348e9333474e85e508b2658ae069ce4ffcd58c2b2d2fcca9a0a0d29d8ddb55a07d00fe7c923327e0d06664f70e92e41fab32af708d5ee168c28776cea80740ec3e1809ecfad54ee33345b6439bd3c9310218eac50e3c61d09a22f5c55ddebe2c4b5477bc4f69430df82fa187801f601258dbcb4e5a1743933e6f8e15c69d17f4f35c40433296c0020f74977f325407ae95dbfda153040418a8084438e0065f42a7e7647ad7bbdecec66732469945444c445b3876a7b0e710da084267698baec8d954dac06deb0324d5532a5631833fa7d2fb5ca0543b937208363d53ab600bb92e5a849e2292a97f8a2067977b506783e56e8e795a23a904fce1b44fba1750a35e43b641370eb19bd45acd2040138b22f0c56d6580d641088e9dafc26e3b3d01893163b46429374772c3312af10f621f81a127b34ee5193ee94a2205b819ea4a858f901c6784a25aae2f99429fefc84a90aef7a2b2aaf19ed78ca46d1b4c6d4ed8e4f94a654f1c3e28ab3b184f9c86b29a203cd6b57f05b61a90bf1d469b6a74c09cce6a696f83e2a411c685f3f2ef4565f0d26796541bfb9fa2aa6ba986d2b4928ae5014b5c77b8906a60768eb62d7dd2a3e10c4090ea9106fa7c1829dc84d0e9b4d0422213ca851dbf841dd32377f84b529fc051a6716d2a6c3efcbb272aedcca703c508f6465fddc3a6fabd0e717ecddceae2b01e23136d537141c2e1bec351a0f078b7aa961ac554bb8575c3d179ed162b0718b1694743f30faebc0fb4acbaec8ab2e09a6f458b09be325d916a7a6962bbf6b96883af6635e54f34c3418321b7337b38284ec2a2d810bff3716acd08ebe2784ad91546c0f234720aaa33fdd924e13ff0388ffa513d1784d7ea9b69246410267a32f9bcdefa48c9f4a53c04b3999dcf0adc60d51c7f87cdaf2bbb16a6700c5cc84bd8466a1ae06e8d34de2d5d6fdccc3de4384e4055e6453f72b7d4cd7c50f33dac2c11da862fbe554ce378d2495f3075849ee3c0a881fc3789eeddacb5032a5a66a709f5acd44bbbea186b558c95d25711a981e2c2ec7150c3d5c0c9c94857c90d0fef6722fc86011c5118653157c19e8eecea7b9f9a0b87062e031e8a1698289fbb702207bb2410248babcec7d798f31bd63e9b6d494131fbb687a7178ddeed730c787cc95d6993684a98d4ee00dd8962e70ed0cecd619f9c4627f2af318d9ee22c4aa45728cbd74415c810be2d1a86fc75e9a08d12758596cd23c34689621531411d9800ff85c015eb259a8719754fb27a6c8010243ad956c5bea5da4cebb5231b491f3f853fe69a7540a6378c73e06aa68675035c7f5d557f6fdb55118f772f830fdbe5c30291acc190b9c6c7b54359eb55bd169e7f5bdbff7d990e2015b07a3ab87380c5c798a1feaf797a1f6d9add484b1abb32c73eaa2f7d5b28f42c26720c48248c2d95f82278674aaeca94b341c5a059c8988a3d2e9a24bb473e9752891ff3e4f7b7c3e70bd717b8eecc39acf225d830a7248f48871dd7fe6e88283f658901aada6a05685ce8822eabdc95d534d3ea3b23c31a7804e61775bed1b0fcad765461420f90425e5f98c7e328e83835fcf19e60dc9d8ea9be02df3bc645ccf044b8ddb03cce843a4388104df96afd8577cc2756335d172a8f5587567ed2ddd362e0a2656059fd1bdae675d955851403e6be2130ff78b151687e2b89afd74df5b16678a975672a90535893bd9401c80729d44cf26a9aec2c16e5f5caed41e83d16c94f05e0932598dfb21636dd2bf210505737fb4d75f253b8a41f86d6e8b87223b366fa29bffc1dd88dec38f431115fc14d9e0bd26c07b0f745e49aa10841e052a0268987edd720a76c6e1b77b31bf06ce09b65f4ef4dd6e883cdbb19269f53fb1a8404f3df7960f372639440df3ae8e76cc3964bbbc83e1cb14c7603a6a3e4233b0c37a9c437ca1c4c49cc806f3fe897f1f4fc4d969670627e23de7c5088f3a61ff95a84ecc21a548cc9b6d4b961a32fdf2526f16eca3ac1eb9f9e2ce7dd09fdf49584bfc6c561c3634487340835c5e132af70c600f64442cd96a666f467414d8b154afbd7bdc619783d59a336d3c2df51f48b1ffbfef8b4179e1d20aa330925c2d44c782aafd751b06d0e3f3df462a996da7340b9e9ea56858c6322924f0d5a7096bd3a340f68935edbacfab7535ff999b6c37a87157b8cb3e2fec86c61946e9c33610d6318c940b10cab50e5622c350fb6c508e2c9d69e407a8f30282e56a9e060612d8c904b8562feed29b304e89f16d6b7cc318aa9de4e9a57c0665247310bf9f02c44dd41a66760160bb7e768847c03a5c1e7f2d1eed8938763d2f85fdc7ce8acc035a16d881a6def182843aeccd6c71ee9cc74dff152fa51df141eeaa4d9b98f2c5acbb3bdef967b34021bb1f33817599f38cbac793821153830b6ab1a4374be00095e55dd0ab0be8f9f296432ecebf2e78a807bc9f9b4039f7026177abc02315aa3354280c56598871d2fabd64c1807a98f553e2dd907ece11d1156434bfc3acd3dd4c3d1cb5ee2e9369536cb7ca09635ec8577e6bfe78a8347ad04c571422c2aa51868d31f7177ff90738b68bb8f9dfcf9902eaf357bf9ed382279f6851596582e7aa888b57758ba22397eade1dbaed620df49f0a4e8d4d5e126279c05110076c84e6237ca878f89d1c51395d016", 0x1000}, {&(0x7f0000001200)="f4d5868a01011f4c973a08ab068b939807993e5cf40b3b7fc3653f78e1dc9b0e0c8af156d68615b87c3ec950dabafd632d6751", 0x33}, {&(0x7f0000001240)="3119fc05566870054af598e76509669a22d7e63eecff70c11ed602e8f9c204a28577194d9c0f40c254967ac1d400e82d0f1893cf842c4670dfa9", 0x3a}, {&(0x7f0000001280)="93b089bd001355f6", 0x8}, {&(0x7f00000012c0)="9f24def72d2063917f65262c9f6cd1d8ce6ff118a171603bf517e3f288f2bbc23ac38217906872c5d65077e3c2e1c69c6df3b39ff023188bc156098c56bafd6227299dcc7f723c9121339a984d3c0807c8abd1e2df1c44ba37e19bcc0fd0f855504119d02e151999eb0a3093ee449e16e2e68873a8cb50e28c29411fc053c88c878b43db161ac84ffbeb6534b0c832242e75fc3487923552e78278cd4abf700f6d5c6ea5dab9eb243469d66c45a0d90f692c5a92ecef43ff3a19a01b559f08a6ec880c0bb6ecada7a183602d114f589d4928363e4ec5207151093f6bbbf0a431a811a8f1c18d4a68747ed7f5ca85bb00f8f60403", 0xf4}], 0x7, &(0x7f0000001440)=[{0x38, 0x84, 0xd6dc, "02e58f9edcebb82fb030104e6ad79be6c49c97939b161a65b7c670109a1c6a51c386986cabc3fe"}], 0x38}, 0x40004) syz_io_uring_setup(0x1005357, &(0x7f0000000000)={0x0, 0x5f81, 0x20, 0x0, 0x271}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:19 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0xe, &(0x7f0000002500)=[0xffffffffffffffff], 0x1) 05:31:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:19 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xfd0d}) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0xfffffffffffffffc, 0x0) 05:31:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0xf0bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:20 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) syz_io_uring_setup(0x1005357, &(0x7f0000000000)={0x0, 0x5f81, 0x20, 0x0, 0x271}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:20 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x4, 0x0, 0xffffffff00000000) 05:31:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:20 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xfd0d}) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0xfffffffffffffffc, 0x0) 05:31:20 executing program 2: syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x1005357, &(0x7f0000000000)={0x0, 0x5f81, 0x20, 0x0, 0x271}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0xf0bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:20 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "7a5c452a0a6a1ec1ce13e09708a26bb9f22aa464d01cb82f1c9002d1206dae62a3be60b3ecbb9d0dea8f73f0d820c8f8132792a78c801164122848f9961d06006b951ca21254e8c9735e067133e66e4cf9bc0263f46b6c522eca7d9771536270639919e4b144ab7db82bdc41006eb9835d79ce6a1743c3494ffab1b0e79c7f19b74f0ef7f1f8ec75d54a20e5249d4be8ce018de4a7636d200173d27866494f24bcaa299e271d604b77d46028b30b2c6691c59fc8eeb4ff45a9bdc125748b94c9c312cdf6da3203711cfdd4639bf38dfe09a8729728bf0fd4f73ac56fe64fef3bd7944233d8d2bb67369a0a1d58d3776d4e5551641060e2e33dca93aa581e7a6c", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:20 executing program 3: r0 = io_uring_setup(0x2368, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0xfffffffffffffffc, 0x0) 05:31:20 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x4, &(0x7f0000002500)=[0xffffffffffffffff], 0x1) 05:31:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4044000) 05:31:20 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000)={0x0, 0x5f81, 0x20, 0x0, 0x271}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:20 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x40100, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000001) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) 05:31:20 executing program 3: r0 = io_uring_setup(0x2368, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0xfffffffffffffffc, 0x0) 05:31:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4044000) 05:31:20 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x5f81, 0x20, 0x0, 0x271}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:20 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "1d2691a60ac12008b7bffc871ad6d2f4909a6d6f0530714dfda3ea96e78520d69458ef13be14e2d62fce8596f3f4cd14a98e3e52932f5ea876cc56f8ca4deded72a28f8818a735e0961e6a87e50f25e1284a26c9d386ad2c56dde08445b0a06b85542e6f534088691df492bb3bb3e6844ae4dd358446fbe97c1267e7464215e2f05f34000e63bfd6c2c43b0a551c7b10fc2673abc3ef5da15f39a22b12e4a9e7346a1a6c463a44a73661a621a3dd8b2b4ce5e31c5807063f9eb08632b96c435e4c0354c4aae93b7ac6d87cb8db959cd69a8bfc607a5e89d2ef933170b74a77427019df9e39f5af834447c891062653a723138acedb2942b111d9f533eb5ed442"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:20 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) 05:31:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:20 executing program 3: r0 = io_uring_setup(0x2368, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0xfffffffffffffffc, 0x0) 05:31:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4044000) 05:31:20 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x5f81, 0x20, 0x0, 0x271}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:21 executing program 3: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0xfffffffffffffffc, 0x0) 05:31:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0xec, 0x0, 0x0, 0xf0bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0xe}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:21 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) 05:31:21 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x5f81, 0x20, 0x0, 0x271}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:21 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:21 executing program 3: io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, 0xfffffffffffffffc, 0x0) 05:31:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0xec, 0x0, 0x0, 0xf0bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0xe}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:21 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) 05:31:21 executing program 2: syz_io_uring_setup(0x1005357, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:21 executing program 3: io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, 0xfffffffffffffffc, 0x0) 05:31:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0xec, 0x0, 0x0, 0xf0bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0xe}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:21 executing program 2: syz_io_uring_setup(0x1005357, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:21 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:21 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:21 executing program 3: io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, 0xfffffffffffffffc, 0x0) 05:31:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0xf0bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:21 executing program 2: syz_io_uring_setup(0x1005357, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:21 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:22 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) 05:31:22 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "7a5c452a0a6a1ec1ce13e09708a26bb9f22aa464d01cb82f1c9002d1206dae62a3be60b3ecbb9d0dea8f73f0d820c8f8132792a78c801164122848f9961d06006b951ca21254e8c9735e067133e66e4cf9bc0263f46b6c522eca7d9771536270639919e4b144ab7db82bdc41006eb9835d79ce6a1743c3494ffab1b0e79c7f19b74f0ef7f1f8ec75d54a20e5249d4be8ce018de4a7636d200173d27866494f24bcaa299e271d604b77d46028b30b2c6691c59fc8eeb4ff45a9bdc125748b94c9c312cdf6da3203711cfdd4639bf38dfe09a8729728bf0fd4f73ac56fe64fef3bd7944233d8d2bb67369a0a1d58d3776d4e5551641060e2e33dca93aa581e7a6c", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:22 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x271}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:22 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:22 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x271}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:22 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) 05:31:22 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:22 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:22 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:31:22 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) 05:31:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:22 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:22 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:22 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 05:31:22 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "7a5c452a0a6a1ec1ce13e09708a26bb9f22aa464d01cb82f1c9002d1206dae62a3be60b3ecbb9d0dea8f73f0d820c8f8132792a78c801164122848f9961d06006b951ca21254e8c9735e067133e66e4cf9bc0263f46b6c522eca7d9771536270639919e4b144ab7db82bdc41006eb9835d79ce6a1743c3494ffab1b0e79c7f19b74f0ef7f1f8ec75d54a20e5249d4be8ce018de4a7636d200173d27866494f24bcaa299e271d604b77d46028b30b2c6691c59fc8eeb4ff45a9bdc125748b94c9c312cdf6da3203711cfdd4639bf38dfe09a8729728bf0fd4f73ac56fe64fef3bd7944233d8d2bb67369a0a1d58d3776d4e5551641060e2e33dca93aa581e7a6c", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:23 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:23 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 05:31:23 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) 05:31:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:23 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:23 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) 05:31:23 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 05:31:23 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:23 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) 05:31:23 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:23 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 05:31:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:23 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:23 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 05:31:23 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r0 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:23 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 2: syz_io_uring_setup(0x1005357, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 05:31:24 executing program 4: io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(0xffffffffffffffff, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:24 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, 0xffffffffffffffff, 0x8000000) 05:31:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, 0xffffffffffffffff, 0x8000000) 05:31:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:24 executing program 4: io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(0xffffffffffffffff, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, 0xffffffffffffffff, 0x8000000) 05:31:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 4: io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(0xffffffffffffffff, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:24 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:24 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:24 executing program 2: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:24 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:25 executing program 3: r0 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 2: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:25 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:25 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:25 executing program 2: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:25 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 4: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:25 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:25 executing program 4: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:25 executing program 3: r0 = io_uring_setup(0x3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:25 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:26 executing program 4: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4044000) 05:31:26 executing program 3: r0 = io_uring_setup(0x3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:26 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4044000) 05:31:26 executing program 3: r0 = io_uring_setup(0x3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4044000) 05:31:26 executing program 3: r0 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:26 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0xec, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0xe}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 3: r0 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2ae}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0xec, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0xe}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:27 executing program 3: r0 = io_uring_setup(0x3, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0xec, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0xe}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:27 executing program 3: r0 = io_uring_setup(0x3, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) 05:31:27 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 3: r0 = io_uring_setup(0x3, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) 05:31:27 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:27 executing program 3: r0 = io_uring_setup(0x3, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) 05:31:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:27 executing program 3: r0 = io_uring_setup(0x3, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) 05:31:27 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:28 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 3: io_uring_setup(0x3, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 05:31:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 1: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:28 executing program 3: io_uring_setup(0x3, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 05:31:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, 0x0) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 3: io_uring_setup(0x3, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 05:31:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x80000000, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, 0x0) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:28 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, 0x0) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:29 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:29 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:29 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 4: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(0xffffffffffffffff, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x4}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:29 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 4: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(0xffffffffffffffff, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:30 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:30 executing program 4: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(0xffffffffffffffff, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:30 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(r0, 0x0, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:30 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:31 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(r0, 0x0, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:31 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:31 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:31 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:31 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:32 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(r0, 0x0, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe9}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:32 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:32 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe9}, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:32 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:32 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(r0, 0x548e, 0x0, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:33 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:33 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(r0, 0x548e, 0x0, 0x0, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:33 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(r0, 0x548e, 0x0, 0x0, 0x0, 0x0) 05:31:33 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:33 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x2, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:33 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(r0, 0x548e, 0x0, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:34 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:34 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:34 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:34 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0xa}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:34 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:35 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x0, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:35 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:35 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:36 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:37 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:37 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xf}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:37 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:38 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:38 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:38 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, 0x0) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:38 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:38 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:39 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:39 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:39 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:39 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:39 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:40 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xff}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:40 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0x70}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x0, 0x1c, 0xff}]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) 05:31:40 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:40 executing program 1: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:40 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:41 executing program 1: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:41 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:41 executing program 1: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:41 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:42 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r0, 0x8000000) 05:31:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4044000) 05:31:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES={0x0, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:42 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4044000) 05:31:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x4044000) 05:31:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 4: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, 0xffffffffffffffff, 0x8000000) 05:31:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5203}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0xec, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:42 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "1d2691a60ac12008b7bffc871ad6d2f4909a6d6f0530714dfda3ea96e78520d69458ef13be14e2d62fce8596f3f4cd14a98e3e52932f5ea876cc56f8ca4deded72a28f8818a735e0961e6a87e50f25e1284a26c9d386ad2c56dde08445b0a06b85542e6f534088691df492bb3bb3e6844ae4dd358446fbe97c1267e7464215e2f05f34000e63bfd6c2c43b0a551c7b10fc2673abc3ef5da15f39a22b12e4a9e7346a1a6c463a44a73661a621a3dd8b2b4ce5e31c5807063f9eb08632b96c435e4c0354c4aae93b7ac6d87cb8db959cd69a8bfc607a5e89d2ef933170b74a77427019df9e39f5af834447c891062653a723138acedb2942b111d9f533eb5ed442"}}}, 0x120) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0xec, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x0, 0x10, 0x5203}, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) 05:31:43 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) 05:31:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0xec, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "7a5c452a0a6a1ec1ce13e09708a26bb9f22aa464d01cb82f1c9002d1206dae62a3be60b3ecbb9d0dea8f73f0d820c8f8132792a78c801164122848f9961d06006b951ca21254e8c9735e067133e66e4cf9bc0263f46b6c522eca7d9771536270639919e4b144ab7db82bdc41006eb9835d79ce6a1743c3494ffab1b0e79c7f19b74f0ef7f1f8ec75d54a20e5249d4be8ce018de4a7636d200173d27866494f24bcaa299e271d604b77d46028b30b2c6691c59fc8eeb4ff45a9bdc125748b94c9c312cdf6da3203711cfdd4639bf38dfe09a8729728bf0fd4f73ac56fe64fef3bd7944233d8d2bb67369a0a1d58d3776d4e5551641060e2e33dca93aa581e7a6c", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 3: syz_io_uring_setup(0x1005357, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 05:31:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x65}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)={0x0, 0xfc9f, 0x0, 0x0, 0x2a7}) r1 = io_uring_setup(0x3, &(0x7f0000000100)={0x0, 0xba82, 0x1, 0x0, 0x2ae}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x13, r1, 0x8000000) io_uring_enter(r0, 0x548e, 0x658c, 0x3, &(0x7f0000000180)={[0x47e]}, 0x8) 05:31:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x0, 0x4, 0x65}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:43 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x4044000) 05:31:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x56d}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) socket(0x3, 0x5, 0x401) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x3e60, "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", 0x9, 0x4, 0x3f, 0xdb, 0xc6, 0x40, 0x1}}}, 0x120) socket(0x5, 0x2, 0x7) syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xe8172, 0xffffffffffffffff, 0x0) 05:31:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_setup(0x3, &(0x7f0000000880)=0x0) io_cancel(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) r3 = socket$inet6(0xa, 0x6, 0xfffffffb) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001340), 0x30000, 0x0) r5 = syz_io_uring_setup(0x4ed5, &(0x7f0000001440)={0x0, 0xd92a, 0x4, 0x1, 0x61, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000014c0), &(0x7f0000001500)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000b40)={@host}) r7 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r1, 0xa, &(0x7f0000002940)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000100)="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", 0x1000, 0x81, 0x0, 0x0, r2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x200, r3, &(0x7f0000001140)="62b3f6a8bfba18a91aab2e8805faec02a008734247c302c24f9731de0efcbd1244d1aa85d5d5d8fe3064798846920381d2a46be5f15fe58f0249bcadfdecd6aef15ce6b939cced82cd1ee28d159e1a1fe0de99a9f370b6a0b40325617ce9428cbd174aa12470356b09375a9ed1fb25eaea192d97b880c28b9d552ad667c6c8a2e5e0a0d98aeb8b1427819a51f8a8c55042aea0a265997dc84ca725a20adbd934e72c46d004e3de6d63ecb7e41e11d6ee0097e3c28a81ed92d40400a22ee3898004e3eae092667774061e8d88bb1af1aac8927b4989089766961631574b550a3de0d23078f31ffe", 0xe7, 0x7, 0x0, 0x2}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0xd, 0x6, r0, &(0x7f0000001280)="d1bac2567ac80392ae59c864e01ec49ba20178468840afbf3307edf35f2f0d8ae9a0716a4496113fbe4533aed97cd48d49f01a040fd11c246b5f357a0263b32d85c0d70a5906f84a9c9df8564614b5b6094e74976577eab1", 0x58, 0x2, 0x0, 0x2}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x8, 0xfff, r4, &(0x7f0000001380)="13e068284cf097e73e605a47dd71f26e956573eef0b4998a066ed414b3d063ed071c3add8b46605d3f73ec641b666b9a7e9bc097c67d677f105f85f625cc6870110b22", 0x43, 0x2000200000, 0x0, 0x2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x8, 0x14, r5, &(0x7f0000001540)="1cba30f5ec9c971a2affafbb596974bcb3d468d62e51645c4bd2d3de7302901388fe20c672566a5ce0", 0x29, 0xfffffffffffffffd, 0x0, 0x2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0x7, r6, &(0x7f00000015c0)="a4a3018db549e7d6f45fad96bd84d73fdb9573f2615b81a27c56591ea92e1c6f824c81e617b99d28eb346dfea4e4828a173632a7325afb116f136765", 0x3c, 0x0, 0x0, 0x0, r7}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x1f, r0, &(0x7f0000001640)="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", 0x1000, 0x0, 0x0, 0x3}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000002680)="3a144be5ed6e8d5346859ba462ebad570c3683e013f1e406b8978ea4f664d9341b76108487756c684400ca28b0ea4c4817169a93cac3119bf11e2f2ab15f5bb33f7a865361be19ef1f6823f0296cb7c609b372eb4b6e9ff2978e1145ee5c7cdfba0d1cf1802aeeec317f4d4bc818f76843e3fdd694b1e029d6459a735ffa1c424ede61ccacb612", 0x87, 0x2, 0x0, 0x3}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000002780)="7c49520ac9ebb80a06827f9e2e5d88bd8e7a5d61013031a2c494518242c2372b1b84ea5eee5a84fda103031bf4d46e713d3f7bff550f447c7dcc683136ecc332e933de451d788f5950160e7a5177d214673e055d871ced77c4cc452720d77f8b136ed745ec4d28ca129025debab644adbd15c9303346191a2426bdb69e01292763ca2e4d4a7bb9dedc338fc4a9d6", 0x8e, 0x5}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x8, 0xf7b4, r8, &(0x7f0000002880)="e8597fbef26d70ebf07f925e0237ea054bd0a1c460a2b978846f990ac62fdb92b1965daba98068770d340bdbd56655ce64a64c8b051a569138bbb2a17955e58ba71e49ab4cd793125dd3fa2601de16fab3a51407e0f009497b2fa63af5846c7157", 0x61, 0x9, 0x0, 0x3}]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) 05:31:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x0, 0x18, 0x56d}, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='+\x00', r1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000100)='./file0\x00', 0x0, 0xc}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x0, {0x101, 0xffffffe1, "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", 0x7f, 0xb8, 0x8, 0x2, 0x2, 0x9, 0x2}, r3}}, 0x128) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0x0) 05:31:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 0: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000100), 0x9, 0x82) r5 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000300)={@local}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000002c0)=[r6, 0xffffffffffffffff, r7, r8], 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x5df, @rand_addr=' \x01\x00', 0xffffffc0}, {0xa, 0x4e22, 0x8, @loopback, 0x1000}, r9, 0x5819}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000940)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x840d}, r10}}, 0x30) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r10, 0x40}}, 0x18) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000380), 0x2) 05:31:45 executing program 4: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 05:31:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0xf0ffffff7f0000) 05:31:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x800, 0x1, "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", 0x4, 0x0, 0x2, 0x6, 0x1, 0x4, 0xff}}}, 0x128) 05:31:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0xf0ffffff7f0000) 05:31:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0xf0ffffff7f0000) 05:31:45 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xff}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0xf0ffffff7f0000) 05:31:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:45 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 3: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0xf0ffffff7f0000) 05:31:46 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WDEV={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x10002000) 05:31:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 3: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0xf0ffffff7f0000) 05:31:46 executing program 4: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000380), 0x2) 05:31:46 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x10002000) 05:31:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x4044000) 05:31:46 executing program 3: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0xf0ffffff7f0000) 05:31:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 4: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000380), 0x2) 05:31:46 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x10002000) 05:31:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0xf0ffffff7f0000) 05:31:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x0, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 4: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000380), 0x2) 05:31:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0xf0ffffff7f0000) 05:31:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:47 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0xf0ffffff7f0000) 05:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x4044000) 05:31:47 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:47 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0xf0ffffff7f0000) 05:31:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:47 executing program 0: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:47 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0xf0ffffff7f0000) 05:31:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 0: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:47 executing program 4: r0 = io_uring_setup(0x2368, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 0: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:47 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0xf0ffffff7f0000) 05:31:47 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:47 executing program 4: r0 = io_uring_setup(0x2368, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:48 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:48 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:48 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, 0xffffffffffffffff, 0x10000000) 05:31:48 executing program 4: r0 = io_uring_setup(0x2368, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:48 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:48 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:48 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, 0xffffffffffffffff, 0x10000000) 05:31:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:48 executing program 4: io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000380), 0x2) 05:31:48 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, 0xffffffffffffffff, 0x10000000) 05:31:48 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:48 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:48 executing program 4: io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000380), 0x2) 05:31:48 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:48 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:48 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, 0xffffffffffffffff, 0x10000000) 05:31:48 executing program 4: io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000380), 0x2) 05:31:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:48 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:49 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:49 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, 0xffffffffffffffff, 0x10000000) 05:31:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:49 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:49 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, 0x0, 0x0) 05:31:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:49 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, 0xffffffffffffffff, 0x10000000) 05:31:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:49 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:49 executing program 5: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:49 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, 0x0, 0x0) 05:31:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:49 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:49 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, 0x0, 0x0) 05:31:49 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:31:49 executing program 5: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:49 executing program 4 (fault-call:1 fault-nth:0): r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:49 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:49 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10002000) 05:31:49 executing program 5: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2008.238251][T11093] FAULT_INJECTION: forcing a failure. [ 2008.238251][T11093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2008.299009][T11093] CPU: 1 PID: 11093 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 2008.307455][T11093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2008.317520][T11093] Call Trace: [ 2008.320812][T11093] dump_stack_lvl+0xcd/0x134 [ 2008.325425][T11093] should_fail.cold+0x5/0xa [ 2008.329960][T11093] _copy_from_user+0x2c/0x180 [ 2008.334667][T11093] __do_sys_io_uring_register+0xfca/0x2e70 [ 2008.340505][T11093] ? lock_downgrade+0x6e0/0x6e0 05:31:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2008.345396][T11093] ? kiocb_done+0xb40/0xb40 [ 2008.349939][T11093] ? syscall_enter_from_user_mode+0x21/0x70 [ 2008.355868][T11093] do_syscall_64+0x35/0xb0 [ 2008.360309][T11093] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2008.366222][T11093] RIP: 0033:0x4665f9 [ 2008.370127][T11093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.389752][T11093] RSP: 002b:00007f38b557f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab 05:31:50 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) [ 2008.398182][T11093] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2008.406163][T11093] RDX: 0000000020000380 RSI: 0000000000000013 RDI: 0000000000000003 [ 2008.414143][T11093] RBP: 00007f38b557f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2008.422136][T11093] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 2008.430121][T11093] R13: 0000000000a9fb1f R14: 00007f38b557f300 R15: 0000000000022000 05:31:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:50 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:50 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10002000) 05:31:50 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:50 executing program 4 (fault-call:1 fault-nth:1): r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:50 executing program 3: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:50 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10002000) 05:31:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:50 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:50 executing program 3: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) [ 2008.938084][T11128] FAULT_INJECTION: forcing a failure. [ 2008.938084][T11128] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:31:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2009.018878][T11128] CPU: 0 PID: 11128 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 2009.027321][T11128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2009.037386][T11128] Call Trace: [ 2009.040675][T11128] dump_stack_lvl+0xcd/0x134 [ 2009.045286][T11128] should_fail.cold+0x5/0xa [ 2009.049825][T11128] _copy_to_user+0x2c/0x150 [ 2009.054350][T11128] __do_sys_io_uring_register+0x2788/0x2e70 [ 2009.060273][T11128] ? lock_downgrade+0x6e0/0x6e0 [ 2009.065147][T11128] ? kiocb_done+0xb40/0xb40 [ 2009.069681][T11128] ? syscall_enter_from_user_mode+0x21/0x70 [ 2009.075605][T11128] do_syscall_64+0x35/0xb0 [ 2009.080049][T11128] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2009.085965][T11128] RIP: 0033:0x4665f9 [ 2009.089878][T11128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2009.109506][T11128] RSP: 002b:00007f38b557f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab 05:31:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:50 executing program 0: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x10002000) [ 2009.117934][T11128] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2009.125922][T11128] RDX: 0000000020000380 RSI: 0000000000000013 RDI: 0000000000000003 [ 2009.133902][T11128] RBP: 00007f38b557f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2009.141883][T11128] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 2009.149862][T11128] R13: 0000000000a9fb1f R14: 00007f38b557f300 R15: 0000000000022000 05:31:50 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) 05:31:50 executing program 4 (fault-call:1 fault-nth:2): r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:50 executing program 3: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:50 executing program 0: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x10002000) 05:31:51 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:51 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) [ 2009.464295][T11152] FAULT_INJECTION: forcing a failure. [ 2009.464295][T11152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2009.525253][T11152] CPU: 1 PID: 11152 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 2009.533698][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2009.543763][T11152] Call Trace: [ 2009.547049][T11152] dump_stack_lvl+0xcd/0x134 [ 2009.551663][T11152] should_fail.cold+0x5/0xa [ 2009.556199][T11152] _copy_to_user+0x2c/0x150 [ 2009.560727][T11152] simple_read_from_buffer+0xcc/0x160 [ 2009.566125][T11152] proc_fail_nth_read+0x187/0x220 05:31:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2009.571179][T11152] ? proc_fault_inject_read+0x220/0x220 [ 2009.576746][T11152] ? security_file_permission+0xab/0xd0 [ 2009.582315][T11152] ? proc_fault_inject_read+0x220/0x220 [ 2009.587885][T11152] vfs_read+0x1b5/0x600 [ 2009.592066][T11152] ksys_read+0x12d/0x250 [ 2009.596327][T11152] ? vfs_write+0xae0/0xae0 [ 2009.600766][T11152] ? syscall_enter_from_user_mode+0x21/0x70 [ 2009.606690][T11152] do_syscall_64+0x35/0xb0 [ 2009.611131][T11152] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2009.617046][T11152] RIP: 0033:0x41937c 05:31:51 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x4, 0x13, r0, 0x10000000) [ 2009.620949][T11152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2009.640572][T11152] RSP: 002b:00007f38b557f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2009.649001][T11152] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041937c [ 2009.656980][T11152] RDX: 000000000000000f RSI: 00007f38b557f1e0 RDI: 0000000000000004 [ 2009.664952][T11152] RBP: 00007f38b557f1d0 R08: 0000000000000000 R09: 0000000000000000 05:31:51 executing program 0: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x10002000) 05:31:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2009.672920][T11152] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 2009.680887][T11152] R13: 0000000000a9fb1f R14: 00007f38b557f300 R15: 0000000000022000 05:31:51 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x13, r0, 0x10000000) 05:31:51 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:51 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:51 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:31:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x4044000) 05:31:51 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:31:51 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380), 0x2) 05:31:51 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:51 executing program 5: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 05:31:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) [ 2010.327453][T11190] FAULT_INJECTION: forcing a failure. [ 2010.327453][T11190] name failslab, interval 1, probability 0, space 0, times 0 [ 2010.395086][T11190] CPU: 0 PID: 11190 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 2010.403531][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2010.413597][T11190] Call Trace: [ 2010.416885][T11190] dump_stack_lvl+0xcd/0x134 [ 2010.421499][T11190] should_fail.cold+0x5/0xa [ 2010.426028][T11190] ? vm_area_dup+0x88/0x2b0 [ 2010.430552][T11190] should_failslab+0x5/0x10 [ 2010.435079][T11190] kmem_cache_alloc+0x5e/0x4a0 [ 2010.439876][T11190] vm_area_dup+0x88/0x2b0 [ 2010.444255][T11190] ? mark_lock+0xef/0x17b0 [ 2010.448692][T11190] ? mark_lock+0xef/0x17b0 [ 2010.453131][T11190] ? lock_chain_count+0x20/0x20 [ 2010.458005][T11190] ? __lock_acquire+0xbc2/0x54a0 [ 2010.462962][T11190] ? mark_lock+0xef/0x17b0 [ 2010.467403][T11190] ? lock_chain_count+0x20/0x20 [ 2010.472274][T11190] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2010.478277][T11190] ? mark_lock+0xef/0x17b0 [ 2010.482717][T11190] ? vm_area_alloc+0x110/0x110 [ 2010.487502][T11190] ? find_held_lock+0x2d/0x110 [ 2010.492293][T11190] ? __lock_acquire+0x162f/0x54a0 [ 2010.497350][T11190] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2010.503089][T11190] ? vmacache_find+0x62/0x330 [ 2010.507786][T11190] __split_vma+0xa5/0x550 [ 2010.512148][T11190] __do_munmap+0xcc1/0x11c0 [ 2010.516680][T11190] mmap_region+0x2fd/0x1650 [ 2010.521204][T11190] ? security_mmap_file+0x1a7/0x1b0 [ 2010.526435][T11190] do_mmap+0x869/0xfb0 [ 2010.530534][T11190] vm_mmap_pgoff+0x1b7/0x290 [ 2010.535156][T11190] ? randomize_stack_top+0x100/0x100 [ 2010.540470][T11190] ? __fget_files+0x23d/0x3e0 [ 2010.545168][T11190] ksys_mmap_pgoff+0x49f/0x620 [ 2010.549953][T11190] ? mlock_future_check+0x120/0x120 [ 2010.555172][T11190] ? syscall_enter_from_user_mode+0x21/0x70 [ 2010.561091][T11190] do_syscall_64+0x35/0xb0 [ 2010.565528][T11190] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2010.571443][T11190] RIP: 0033:0x4665f9 [ 2010.575352][T11190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 05:31:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:52 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, &(0x7f0000000380), 0x2) 05:31:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2010.594969][T11190] RSP: 002b:00007f5f27020188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2010.603394][T11190] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2010.611377][T11190] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 2010.619357][T11190] RBP: 00007f5f270201d0 R08: 0000000000000003 R09: 0000000010002000 [ 2010.627340][T11190] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2010.635318][T11190] R13: 0000000000a9fb1f R14: 00007f5f27020300 R15: 0000000000022000 05:31:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:52 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:52 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x4, &(0x7f0000000380), 0x2) 05:31:52 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:31:52 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:52 executing program 5: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 05:31:52 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2010.941362][T11216] FAULT_INJECTION: forcing a failure. [ 2010.941362][T11216] name failslab, interval 1, probability 0, space 0, times 0 [ 2010.975175][T11216] CPU: 0 PID: 11216 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 2010.979201][T11218] FAULT_INJECTION: forcing a failure. [ 2010.979201][T11218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.983613][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2010.983633][T11216] Call Trace: [ 2010.983645][T11216] dump_stack_lvl+0xcd/0x134 [ 2011.014545][T11216] should_fail.cold+0x5/0xa [ 2011.019077][T11216] ? vm_area_alloc+0x1c/0x110 [ 2011.023773][T11216] should_failslab+0x5/0x10 [ 2011.028298][T11216] kmem_cache_alloc+0x5e/0x4a0 [ 2011.033092][T11216] vm_area_alloc+0x1c/0x110 [ 2011.037617][T11216] mmap_region+0xa91/0x1650 [ 2011.042138][T11216] ? security_mmap_file+0x1a7/0x1b0 [ 2011.047363][T11216] do_mmap+0x869/0xfb0 [ 2011.051459][T11216] vm_mmap_pgoff+0x1b7/0x290 [ 2011.056072][T11216] ? randomize_stack_top+0x100/0x100 [ 2011.061373][T11216] ? __fget_files+0x23d/0x3e0 [ 2011.066064][T11216] ksys_mmap_pgoff+0x49f/0x620 [ 2011.070852][T11216] ? mlock_future_check+0x120/0x120 [ 2011.076064][T11216] ? syscall_enter_from_user_mode+0x21/0x70 [ 2011.081974][T11216] do_syscall_64+0x35/0xb0 [ 2011.086406][T11216] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2011.092303][T11216] RIP: 0033:0x4665f9 [ 2011.096199][T11216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.115812][T11216] RSP: 002b:00007f5f27020188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2011.124228][T11216] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2011.132202][T11216] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 2011.140174][T11216] RBP: 00007f5f270201d0 R08: 0000000000000003 R09: 0000000010002000 [ 2011.148145][T11216] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2011.156115][T11216] R13: 0000000000a9fb1f R14: 00007f5f27020300 R15: 0000000000022000 [ 2011.164131][T11218] CPU: 1 PID: 11218 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 2011.172554][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2011.182603][T11218] Call Trace: [ 2011.185874][T11218] dump_stack_lvl+0xcd/0x134 [ 2011.190470][T11218] should_fail.cold+0x5/0xa [ 2011.194980][T11218] _copy_from_user+0x2c/0x180 [ 2011.199661][T11218] __copy_msghdr_from_user+0x91/0x4b0 [ 2011.205039][T11218] ? __ia32_sys_shutdown+0x70/0x70 [ 2011.210152][T11218] ? mark_lock+0xef/0x17b0 [ 2011.214565][T11218] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2011.220553][T11218] sendmsg_copy_msghdr+0xa1/0x160 [ 2011.225581][T11218] ? do_recvmmsg+0x6d0/0x6d0 [ 2011.230174][T11218] ? lock_chain_count+0x20/0x20 [ 2011.235021][T11218] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2011.241006][T11218] ___sys_sendmsg+0xc6/0x170 [ 2011.245600][T11218] ? sendmsg_copy_msghdr+0x160/0x160 [ 2011.250891][T11218] ? __fget_files+0x21b/0x3e0 [ 2011.255565][T11218] ? lock_downgrade+0x6e0/0x6e0 [ 2011.260425][T11218] ? __fget_files+0x23d/0x3e0 [ 2011.265102][T11218] ? __fget_light+0xea/0x280 [ 2011.269689][T11218] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2011.275930][T11218] __sys_sendmsg+0xe5/0x1b0 [ 2011.280437][T11218] ? __sys_sendmsg_sock+0x30/0x30 [ 2011.285474][T11218] ? syscall_enter_from_user_mode+0x21/0x70 [ 2011.291375][T11218] do_syscall_64+0x35/0xb0 [ 2011.295797][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2011.301690][T11218] RIP: 0033:0x4665f9 [ 2011.305580][T11218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.325178][T11218] RSP: 002b:00007f28aa52f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2011.333588][T11218] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 05:31:52 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, &(0x7f0000000380), 0x2) [ 2011.341549][T11218] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2011.349510][T11218] RBP: 00007f28aa52f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2011.357482][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2011.365449][T11218] R13: 0000000000a9fb1f R14: 00007f28aa52f300 R15: 0000000000022000 05:31:53 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f0000000380), 0x2) 05:31:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:53 executing program 5: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 05:31:53 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) 05:31:53 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:31:53 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:53 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, &(0x7f0000000380), 0x2) [ 2011.698823][T11238] FAULT_INJECTION: forcing a failure. [ 2011.698823][T11238] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:31:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2011.751176][T11238] CPU: 1 PID: 11238 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 2011.759621][T11238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2011.769688][T11238] Call Trace: [ 2011.772977][T11238] dump_stack_lvl+0xcd/0x134 [ 2011.777590][T11238] should_fail.cold+0x5/0xa [ 2011.782120][T11238] _copy_to_user+0x2c/0x150 [ 2011.786643][T11238] simple_read_from_buffer+0xcc/0x160 [ 2011.792055][T11238] proc_fail_nth_read+0x187/0x220 05:31:53 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) [ 2011.797107][T11238] ? proc_fault_inject_read+0x220/0x220 [ 2011.802677][T11238] ? security_file_permission+0xab/0xd0 [ 2011.808252][T11238] ? proc_fault_inject_read+0x220/0x220 [ 2011.814082][T11238] vfs_read+0x1b5/0x600 [ 2011.818264][T11238] ksys_read+0x12d/0x250 [ 2011.822525][T11238] ? vfs_write+0xae0/0xae0 [ 2011.826963][T11238] ? syscall_enter_from_user_mode+0x21/0x70 [ 2011.832885][T11238] do_syscall_64+0x35/0xb0 [ 2011.837323][T11238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2011.843241][T11238] RIP: 0033:0x41937c 05:31:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2011.847151][T11238] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2011.866771][T11238] RSP: 002b:00007f5f27020170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2011.875193][T11238] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 2011.883176][T11238] RDX: 000000000000000f RSI: 00007f5f270201e0 RDI: 0000000000000004 [ 2011.888240][T11240] FAULT_INJECTION: forcing a failure. 05:31:53 executing program 5: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f0000000380), 0x2) [ 2011.888240][T11240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2011.891152][T11238] RBP: 00007f5f270201d0 R08: 0000000000000000 R09: 0000000010002000 [ 2011.912110][T11238] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2011.920093][T11238] R13: 0000000000a9fb1f R14: 00007f5f27020300 R15: 0000000000022000 [ 2011.972785][T11240] CPU: 0 PID: 11240 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 2011.981229][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2011.991291][T11240] Call Trace: [ 2011.994577][T11240] dump_stack_lvl+0xcd/0x134 [ 2011.999191][T11240] should_fail.cold+0x5/0xa [ 2012.003727][T11240] _copy_from_user+0x2c/0x180 [ 2012.008426][T11240] move_addr_to_kernel.part.0+0x31/0x110 [ 2012.014087][T11240] __copy_msghdr_from_user+0x3da/0x4b0 [ 2012.019572][T11240] ? __ia32_sys_shutdown+0x70/0x70 [ 2012.024723][T11240] sendmsg_copy_msghdr+0xa1/0x160 [ 2012.029772][T11240] ? do_recvmmsg+0x6d0/0x6d0 [ 2012.034390][T11240] ? lock_chain_count+0x20/0x20 [ 2012.039258][T11240] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2012.045263][T11240] ___sys_sendmsg+0xc6/0x170 [ 2012.049876][T11240] ? sendmsg_copy_msghdr+0x160/0x160 [ 2012.055186][T11240] ? __fget_files+0x21b/0x3e0 [ 2012.059882][T11240] ? lock_downgrade+0x6e0/0x6e0 [ 2012.064763][T11240] ? __fget_files+0x23d/0x3e0 [ 2012.069463][T11240] ? __fget_light+0xea/0x280 [ 2012.074069][T11240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2012.080337][T11240] __sys_sendmsg+0xe5/0x1b0 [ 2012.084858][T11240] ? __sys_sendmsg_sock+0x30/0x30 [ 2012.089920][T11240] ? syscall_enter_from_user_mode+0x21/0x70 [ 2012.095842][T11240] do_syscall_64+0x35/0xb0 [ 2012.100278][T11240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2012.106195][T11240] RIP: 0033:0x4665f9 [ 2012.110099][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2012.129713][T11240] RSP: 002b:00007f28aa52f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2012.138142][T11240] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2012.146128][T11240] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2012.154110][T11240] RBP: 00007f28aa52f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2012.162089][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:31:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:53 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:31:53 executing program 5: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 05:31:53 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:31:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2012.170070][T11240] R13: 0000000000a9fb1f R14: 00007f28aa52f300 R15: 0000000000022000 05:31:53 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000380), 0x2) 05:31:54 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:54 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2004, 0x0, 0x13, r0, 0x10002000) 05:31:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:54 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x10, r0, 0x10000000) 05:31:54 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:31:54 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x9, &(0x7f0000000380), 0x2) [ 2012.553963][T11271] FAULT_INJECTION: forcing a failure. [ 2012.553963][T11271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2012.612625][T11271] CPU: 1 PID: 11271 Comm: syz-executor.5 Not tainted 5.14.0-syzkaller #0 [ 2012.616982][T11278] FAULT_INJECTION: forcing a failure. [ 2012.616982][T11278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2012.621074][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2012.621094][T11271] Call Trace: [ 2012.621105][T11271] dump_stack_lvl+0xcd/0x134 [ 2012.621141][T11271] should_fail.cold+0x5/0xa [ 2012.656502][T11271] _copy_to_user+0x2c/0x150 [ 2012.661024][T11271] simple_read_from_buffer+0xcc/0x160 [ 2012.666419][T11271] proc_fail_nth_read+0x187/0x220 [ 2012.671468][T11271] ? proc_fault_inject_read+0x220/0x220 [ 2012.677032][T11271] ? security_file_permission+0xab/0xd0 [ 2012.682604][T11271] ? proc_fault_inject_read+0x220/0x220 [ 2012.688174][T11271] vfs_read+0x1b5/0x600 [ 2012.692349][T11271] ksys_read+0x12d/0x250 [ 2012.696605][T11271] ? vfs_write+0xae0/0xae0 [ 2012.701041][T11271] ? syscall_enter_from_user_mode+0x21/0x70 [ 2012.706950][T11271] do_syscall_64+0x35/0xb0 05:31:54 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x10, r0, 0x10000000) 05:31:54 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000380), 0x2) [ 2012.711377][T11271] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2012.717281][T11271] RIP: 0033:0x41937c [ 2012.721186][T11271] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2012.740805][T11271] RSP: 002b:00007fb2af452170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2012.749232][T11271] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c 05:31:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2012.757212][T11271] RDX: 000000000000000f RSI: 00007fb2af4521e0 RDI: 0000000000000004 [ 2012.765190][T11271] RBP: 00007fb2af4521d0 R08: 0000000000000000 R09: 0000000010000000 [ 2012.773169][T11271] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 2012.781151][T11271] R13: 0000000000a9fb1f R14: 00007fb2af452300 R15: 0000000000022000 [ 2012.789182][T11278] CPU: 0 PID: 11278 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 2012.797614][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2012.807678][T11278] Call Trace: [ 2012.810960][T11278] dump_stack_lvl+0xcd/0x134 [ 2012.815571][T11278] should_fail.cold+0x5/0xa [ 2012.820107][T11278] _copy_from_user+0x2c/0x180 [ 2012.824809][T11278] iovec_from_user+0x242/0x3c0 [ 2012.829607][T11278] __import_iovec+0x65/0x580 [ 2012.834227][T11278] import_iovec+0x10c/0x150 [ 2012.838757][T11278] sendmsg_copy_msghdr+0x12d/0x160 [ 2012.843890][T11278] ? do_recvmmsg+0x6d0/0x6d0 [ 2012.848505][T11278] ? lock_chain_count+0x20/0x20 [ 2012.853377][T11278] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2012.859381][T11278] ___sys_sendmsg+0xc6/0x170 [ 2012.863994][T11278] ? sendmsg_copy_msghdr+0x160/0x160 [ 2012.869306][T11278] ? __fget_files+0x21b/0x3e0 [ 2012.873995][T11278] ? lock_downgrade+0x6e0/0x6e0 [ 2012.878874][T11278] ? __fget_files+0x23d/0x3e0 [ 2012.883574][T11278] ? __fget_light+0xea/0x280 [ 2012.888177][T11278] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2012.894441][T11278] __sys_sendmsg+0xe5/0x1b0 [ 2012.898965][T11278] ? __sys_sendmsg_sock+0x30/0x30 [ 2012.904022][T11278] ? syscall_enter_from_user_mode+0x21/0x70 [ 2012.909938][T11278] do_syscall_64+0x35/0xb0 [ 2012.914372][T11278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2012.920283][T11278] RIP: 0033:0x4665f9 [ 2012.924185][T11278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2012.943805][T11278] RSP: 002b:00007f28aa52f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2012.952234][T11278] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 05:31:54 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x10, r0, 0x10000000) 05:31:54 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10002000) [ 2012.960220][T11278] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2012.968200][T11278] RBP: 00007f28aa52f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2012.976182][T11278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2012.984161][T11278] R13: 0000000000a9fb1f R14: 00007f28aa52f300 R15: 0000000000022000 05:31:54 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xb, &(0x7f0000000380), 0x2) 05:31:54 executing program 2 (fault-call:1 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:54 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x13, r0, 0x10002000) 05:31:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:54 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) 05:31:54 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:31:54 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000380), 0x2) 05:31:55 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) 05:31:55 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x10002000) 05:31:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xa8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2013.409692][T11304] FAULT_INJECTION: forcing a failure. [ 2013.409692][T11304] name failslab, interval 1, probability 0, space 0, times 0 [ 2013.473964][T11304] CPU: 0 PID: 11304 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 2013.482409][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2013.492473][T11304] Call Trace: [ 2013.495760][T11304] dump_stack_lvl+0xcd/0x134 [ 2013.500373][T11304] should_fail.cold+0x5/0xa [ 2013.504905][T11304] should_failslab+0x5/0x10 [ 2013.509431][T11304] kmem_cache_alloc_node+0x65/0x3e0 [ 2013.514737][T11304] ? __alloc_skb+0x20b/0x340 [ 2013.519353][T11304] __alloc_skb+0x20b/0x340 [ 2013.523795][T11304] netlink_sendmsg+0x967/0xdb0 [ 2013.528580][T11304] ? netlink_unicast+0x7d0/0x7d0 [ 2013.533546][T11304] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2013.539810][T11304] ? netlink_unicast+0x7d0/0x7d0 [ 2013.544769][T11304] sock_sendmsg+0xcf/0x120 [ 2013.549207][T11304] ____sys_sendmsg+0x6e8/0x810 [ 2013.553991][T11304] ? kernel_sendmsg+0x50/0x50 [ 2013.558685][T11304] ? do_recvmmsg+0x6d0/0x6d0 [ 2013.563297][T11304] ? lock_chain_count+0x20/0x20 [ 2013.568164][T11304] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2013.574170][T11304] ___sys_sendmsg+0xf3/0x170 [ 2013.578781][T11304] ? sendmsg_copy_msghdr+0x160/0x160 [ 2013.584093][T11304] ? __fget_files+0x21b/0x3e0 [ 2013.588782][T11304] ? lock_downgrade+0x6e0/0x6e0 [ 2013.593666][T11304] ? __fget_files+0x23d/0x3e0 [ 2013.598368][T11304] ? __fget_light+0xea/0x280 [ 2013.602972][T11304] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2013.609300][T11304] __sys_sendmsg+0xe5/0x1b0 [ 2013.613826][T11304] ? __sys_sendmsg_sock+0x30/0x30 [ 2013.618885][T11304] ? syscall_enter_from_user_mode+0x21/0x70 [ 2013.624800][T11304] do_syscall_64+0x35/0xb0 [ 2013.629245][T11304] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2013.635156][T11304] RIP: 0033:0x4665f9 [ 2013.639062][T11304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2013.658772][T11304] RSP: 002b:00007f28aa52f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2013.667201][T11304] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 05:31:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:55 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0xe0ff20, 0x10, r0, 0x10000000) [ 2013.675185][T11304] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2013.683166][T11304] RBP: 00007f28aa52f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2013.691150][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2013.699216][T11304] R13: 0000000000a9fb1f R14: 00007f28aa52f300 R15: 0000000000022000 05:31:55 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) 05:31:55 executing program 2 (fault-call:1 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:55 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x60, 0x13, r0, 0x10002000) 05:31:55 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xd, &(0x7f0000000380), 0x2) 05:31:55 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x1000000, 0x10, r0, 0x10000000) 05:31:55 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0xe0ff20, 0x10, r0, 0x10000000) 05:31:55 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xe, &(0x7f0000000380), 0x2) 05:31:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2014.161139][T11335] FAULT_INJECTION: forcing a failure. [ 2014.161139][T11335] name failslab, interval 1, probability 0, space 0, times 0 05:31:55 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2004, 0x0, 0x13, r0, 0x10002000) [ 2014.223359][T11335] CPU: 0 PID: 11335 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 2014.231802][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2014.241865][T11335] Call Trace: [ 2014.245152][T11335] dump_stack_lvl+0xcd/0x134 [ 2014.249767][T11335] should_fail.cold+0x5/0xa [ 2014.254302][T11335] should_failslab+0x5/0x10 [ 2014.258831][T11335] __kmalloc_node_track_caller+0x7d/0x360 [ 2014.264573][T11335] ? netlink_sendmsg+0x967/0xdb0 05:31:55 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x13, r0, 0x10002000) [ 2014.269540][T11335] __alloc_skb+0xde/0x340 [ 2014.273890][T11335] netlink_sendmsg+0x967/0xdb0 [ 2014.278679][T11335] ? netlink_unicast+0x7d0/0x7d0 [ 2014.283647][T11335] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2014.289917][T11335] ? netlink_unicast+0x7d0/0x7d0 [ 2014.294871][T11335] sock_sendmsg+0xcf/0x120 [ 2014.299310][T11335] ____sys_sendmsg+0x6e8/0x810 [ 2014.304098][T11335] ? kernel_sendmsg+0x50/0x50 [ 2014.308790][T11335] ? do_recvmmsg+0x6d0/0x6d0 [ 2014.313406][T11335] ? lock_chain_count+0x20/0x20 05:31:55 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x10, r0, 0x10000000) [ 2014.318277][T11335] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2014.324283][T11335] ___sys_sendmsg+0xf3/0x170 [ 2014.328896][T11335] ? sendmsg_copy_msghdr+0x160/0x160 [ 2014.334207][T11335] ? __fget_files+0x21b/0x3e0 [ 2014.338900][T11335] ? lock_downgrade+0x6e0/0x6e0 [ 2014.343786][T11335] ? __fget_files+0x23d/0x3e0 [ 2014.348492][T11335] ? __fget_light+0xea/0x280 [ 2014.353100][T11335] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2014.359363][T11335] __sys_sendmsg+0xe5/0x1b0 [ 2014.363887][T11335] ? __sys_sendmsg_sock+0x30/0x30 [ 2014.368947][T11335] ? syscall_enter_from_user_mode+0x21/0x70 [ 2014.374865][T11335] do_syscall_64+0x35/0xb0 [ 2014.379306][T11335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2014.385222][T11335] RIP: 0033:0x4665f9 [ 2014.389126][T11335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2014.408752][T11335] RSP: 002b:00007f28aa52f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:31:56 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) [ 2014.417184][T11335] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2014.425170][T11335] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2014.433148][T11335] RBP: 00007f28aa52f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2014.441129][T11335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2014.449112][T11335] R13: 0000000000a9fb1f R14: 00007f28aa52f300 R15: 0000000000022000 [ 2014.639462][T11348] FAULT_INJECTION: forcing a failure. [ 2014.639462][T11348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2014.673488][T11348] CPU: 0 PID: 11348 Comm: syz-executor.3 Not tainted 5.14.0-syzkaller #0 [ 2014.681924][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2014.691989][T11348] Call Trace: [ 2014.695277][T11348] dump_stack_lvl+0xcd/0x134 [ 2014.699887][T11348] should_fail.cold+0x5/0xa [ 2014.704424][T11348] _copy_to_user+0x2c/0x150 [ 2014.708950][T11348] simple_read_from_buffer+0xcc/0x160 [ 2014.714343][T11348] proc_fail_nth_read+0x187/0x220 [ 2014.719391][T11348] ? proc_fault_inject_read+0x220/0x220 [ 2014.724965][T11348] ? security_file_permission+0xab/0xd0 [ 2014.730535][T11348] ? proc_fault_inject_read+0x220/0x220 [ 2014.736102][T11348] vfs_read+0x1b5/0x600 [ 2014.740282][T11348] ksys_read+0x12d/0x250 [ 2014.744539][T11348] ? vfs_write+0xae0/0xae0 [ 2014.748974][T11348] ? syscall_enter_from_user_mode+0x21/0x70 [ 2014.754896][T11348] do_syscall_64+0x35/0xb0 [ 2014.759339][T11348] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2014.765253][T11348] RIP: 0033:0x41937c [ 2014.769158][T11348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 05:31:56 executing program 2 (fault-call:1 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:56 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x20ffe000, 0x10, r0, 0x10000000) 05:31:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:56 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xf, &(0x7f0000000380), 0x2) 05:31:56 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x13, r0, 0x10002000) [ 2014.788781][T11348] RSP: 002b:00007f33a9c41170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2014.797212][T11348] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 2014.805194][T11348] RDX: 000000000000000f RSI: 00007f33a9c411e0 RDI: 0000000000000004 [ 2014.813177][T11348] RBP: 00007f33a9c411d0 R08: 0000000000000000 R09: 0000000010000000 [ 2014.821157][T11348] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2014.829140][T11348] R13: 0000000000a9fb1f R14: 00007f33a9c41300 R15: 0000000000022000 [ 2014.961459][T11361] FAULT_INJECTION: forcing a failure. [ 2014.961459][T11361] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:31:56 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x10, &(0x7f0000000380), 0x2) 05:31:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:56 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0xe0ff2000000000, 0x10, r0, 0x10000000) [ 2015.012265][T11361] CPU: 0 PID: 11361 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 2015.020706][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2015.030770][T11361] Call Trace: [ 2015.034056][T11361] dump_stack_lvl+0xcd/0x134 [ 2015.038664][T11361] should_fail.cold+0x5/0xa [ 2015.043197][T11361] _copy_from_iter+0x389/0x1320 [ 2015.048074][T11361] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2015.054338][T11361] ? hash_and_copy_to_iter+0x200/0x200 05:31:56 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6000, 0x13, r0, 0x10002000) [ 2015.059821][T11361] ? memset+0x20/0x40 [ 2015.063821][T11361] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2015.070079][T11361] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2015.076337][T11361] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2015.082596][T11361] ? __phys_addr+0xc4/0x140 [ 2015.087120][T11361] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2015.093380][T11361] ? __phys_addr_symbol+0x2c/0x70 [ 2015.098435][T11361] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2015.104173][T11361] ? __check_object_size+0x16e/0x3f0 [ 2015.109549][T11361] netlink_sendmsg+0x7d5/0xdb0 [ 2015.114335][T11361] ? netlink_unicast+0x7d0/0x7d0 [ 2015.119296][T11361] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2015.125564][T11361] ? netlink_unicast+0x7d0/0x7d0 [ 2015.130520][T11361] sock_sendmsg+0xcf/0x120 [ 2015.134956][T11361] ____sys_sendmsg+0x6e8/0x810 [ 2015.139745][T11361] ? kernel_sendmsg+0x50/0x50 [ 2015.144442][T11361] ? do_recvmmsg+0x6d0/0x6d0 [ 2015.149052][T11361] ? lock_chain_count+0x20/0x20 [ 2015.153916][T11361] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2015.159924][T11361] ___sys_sendmsg+0xf3/0x170 [ 2015.164542][T11361] ? sendmsg_copy_msghdr+0x160/0x160 [ 2015.169857][T11361] ? __fget_files+0x21b/0x3e0 [ 2015.174548][T11361] ? lock_downgrade+0x6e0/0x6e0 [ 2015.179436][T11361] ? __fget_files+0x23d/0x3e0 [ 2015.184135][T11361] ? __fget_light+0xea/0x280 [ 2015.188744][T11361] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2015.195010][T11361] __sys_sendmsg+0xe5/0x1b0 [ 2015.199535][T11361] ? __sys_sendmsg_sock+0x30/0x30 [ 2015.204595][T11361] ? syscall_enter_from_user_mode+0x21/0x70 05:31:56 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000, 0x13, r0, 0x10002000) [ 2015.210509][T11361] do_syscall_64+0x35/0xb0 [ 2015.214948][T11361] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2015.220859][T11361] RIP: 0033:0x4665f9 [ 2015.224760][T11361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2015.244383][T11361] RSP: 002b:00007f28aa52f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2015.252819][T11361] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2015.260804][T11361] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2015.268783][T11361] RBP: 00007f28aa52f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2015.276765][T11361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2015.284745][T11361] R13: 0000000000a9fb1f R14: 00007f28aa52f300 R15: 0000000000022000 05:31:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:57 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:31:57 executing program 2 (fault-call:1 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:57 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x11, &(0x7f0000000380), 0x2) 05:31:57 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x100000000000000, 0x10, r0, 0x10000000) 05:31:57 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000, 0x13, r0, 0x10002000) 05:31:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:57 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001004, 0x0, 0x13, r0, 0x10000000) 05:31:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2015.800644][T11391] FAULT_INJECTION: forcing a failure. [ 2015.800644][T11391] name failslab, interval 1, probability 0, space 0, times 0 05:31:57 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x12, &(0x7f0000000380), 0x2) [ 2015.875140][T11391] CPU: 0 PID: 11391 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 2015.883586][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2015.893651][T11391] Call Trace: [ 2015.896944][T11391] dump_stack_lvl+0xcd/0x134 [ 2015.901555][T11391] should_fail.cold+0x5/0xa [ 2015.906088][T11391] ? skb_clone+0x170/0x3c0 [ 2015.910525][T11391] should_failslab+0x5/0x10 [ 2015.915051][T11391] kmem_cache_alloc+0x5e/0x4a0 [ 2015.919841][T11391] skb_clone+0x170/0x3c0 [ 2015.924105][T11391] netlink_deliver_tap+0xa63/0xc30 [ 2015.929243][T11391] netlink_unicast+0x5e5/0x7d0 [ 2015.934040][T11391] ? netlink_attachskb+0x890/0x890 [ 2015.939169][T11391] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2015.945439][T11391] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2015.951702][T11391] ? __phys_addr_symbol+0x2c/0x70 [ 2015.956747][T11391] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2015.962484][T11391] ? __check_object_size+0x16e/0x3f0 [ 2015.967796][T11391] netlink_sendmsg+0x86d/0xdb0 [ 2015.972587][T11391] ? netlink_unicast+0x7d0/0x7d0 [ 2015.977552][T11391] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2015.983812][T11391] ? netlink_unicast+0x7d0/0x7d0 [ 2015.988766][T11391] sock_sendmsg+0xcf/0x120 [ 2015.993203][T11391] ____sys_sendmsg+0x6e8/0x810 [ 2015.997993][T11391] ? kernel_sendmsg+0x50/0x50 [ 2016.002688][T11391] ? do_recvmmsg+0x6d0/0x6d0 [ 2016.007306][T11391] ? lock_chain_count+0x20/0x20 [ 2016.012175][T11391] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2016.018183][T11391] ___sys_sendmsg+0xf3/0x170 [ 2016.022796][T11391] ? sendmsg_copy_msghdr+0x160/0x160 [ 2016.028107][T11391] ? __fget_files+0x21b/0x3e0 [ 2016.032799][T11391] ? lock_downgrade+0x6e0/0x6e0 [ 2016.037682][T11391] ? __fget_files+0x23d/0x3e0 [ 2016.042386][T11391] ? __fget_light+0xea/0x280 [ 2016.046994][T11391] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2016.053267][T11391] __sys_sendmsg+0xe5/0x1b0 [ 2016.057796][T11391] ? __sys_sendmsg_sock+0x30/0x30 [ 2016.062860][T11391] ? syscall_enter_from_user_mode+0x21/0x70 [ 2016.068780][T11391] do_syscall_64+0x35/0xb0 [ 2016.073219][T11391] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2016.079140][T11391] RIP: 0033:0x4665f9 [ 2016.083043][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2016.102662][T11391] RSP: 002b:00007f28aa52f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2016.111089][T11391] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 05:31:57 executing program 4: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000280)={'\x00', 0xaff, 0x1, 0x3}) r0 = eventfd(0xffffff57) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000240)={0x1, r0}) r1 = io_uring_setup(0x2368, &(0x7f0000000180)) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) connect$rds(r2, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = io_uring_setup(0x134d, &(0x7f0000000000)={0x0, 0x728a, 0x10, 0x0, 0x356, 0x0, r1}) syz_io_uring_setup(0x505b, &(0x7f0000000080)={0x0, 0x9b1c, 0x1, 0x3, 0x1a4, 0x0, r3}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000846000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) 05:31:57 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x600000, 0x13, r0, 0x10002000) 05:31:57 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r1 = io_uring_setup(0x4943, &(0x7f0000000200)={0x0, 0x73cc, 0x10, 0x1, 0x29d, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001480)=[{&(0x7f0000000280)=""/170, 0xaa}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/90, 0x5a}, {&(0x7f00000013c0)=""/156, 0x9c}], 0x4) syz_io_uring_setup(0x52c2, &(0x7f0000000100)={0x0, 0x97a8, 0x0, 0x3, 0x160, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x30, r2, 0x10000000) [ 2016.119072][T11391] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2016.127052][T11391] RBP: 00007f28aa52f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2016.135033][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.143015][T11391] R13: 0000000000a9fb1f R14: 00007f28aa52f300 R15: 0000000000022000 05:31:57 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x13, r0, 0x10000000) 05:31:58 executing program 2 (fault-call:1 fault-nth:7): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:58 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80ffff, 0x13, r0, 0x10002000) 05:31:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @mcast1, 0xa3}, r1}}, 0x30) r2 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r2, 0x10000000) r3 = syz_io_uring_setup(0x4e71, &(0x7f0000000280)={0x0, 0xf906, 0x2, 0x2, 0x1dd}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000380)=[r2, r0, r2], 0x3) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f0000000200)=[r2, r2, r0, r2]}, 0x4) 05:31:58 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_usbip_server_init(0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000b40)={@host}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r5 = syz_io_uring_setup(0x1eac, &(0x7f0000000040)={0x0, 0x6f70, 0x20, 0x3, 0x358, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_setup(0x1e9c, &(0x7f0000000200)={0x0, 0xbc2f, 0x1, 0x1, 0x242, 0x0, r5}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000b40)={@host}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000b40)={@host}) r7 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x742}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7ff}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x10f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048810}, 0x24008810) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000000)=[r2, r3, r0, r4, r1, r6, r0], 0x7) 05:31:58 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4, 0x13, r0, 0x10000000) [ 2016.616770][T11423] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2016.623317][T11423] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) 05:31:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) [ 2016.673350][T11436] FAULT_INJECTION: forcing a failure. [ 2016.673350][T11436] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:31:58 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0x10002000) [ 2016.718055][T11423] vhci_hcd vhci_hcd.0: Device attached [ 2016.748596][T11429] vhci_hcd: connection closed [ 2016.749035][T18939] vhci_hcd: stop threads [ 2016.749297][T11436] CPU: 1 PID: 11436 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 2016.753821][T18939] vhci_hcd: release socket [ 2016.757949][T11436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2016.757968][T11436] Call Trace: [ 2016.757979][T11436] dump_stack_lvl+0xcd/0x134 [ 2016.758015][T11436] should_fail.cold+0x5/0xa [ 2016.758053][T11436] _copy_to_user+0x2c/0x150 [ 2016.758084][T11436] simple_read_from_buffer+0xcc/0x160 [ 2016.803089][T11436] proc_fail_nth_read+0x187/0x220 [ 2016.808140][T11436] ? proc_fault_inject_read+0x220/0x220 [ 2016.813712][T11436] ? security_file_permission+0xab/0xd0 [ 2016.813829][T18939] vhci_hcd: disconnect device [ 2016.819276][T11436] ? proc_fault_inject_read+0x220/0x220 [ 2016.819310][T11436] vfs_read+0x1b5/0x600 [ 2016.819343][T11436] ksys_read+0x12d/0x250 [ 2016.819371][T11436] ? vfs_write+0xae0/0xae0 [ 2016.819400][T11436] ? syscall_enter_from_user_mode+0x21/0x70 [ 2016.819438][T11436] do_syscall_64+0x35/0xb0 [ 2016.819471][T11436] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2016.858563][T11436] RIP: 0033:0x41937c [ 2016.862470][T11436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2016.882089][T11436] RSP: 002b:00007f28aa52f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2016.890518][T11436] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 000000000041937c [ 2016.898498][T11436] RDX: 000000000000000f RSI: 00007f28aa52f1e0 RDI: 0000000000000004 [ 2016.906480][T11436] RBP: 00007f28aa52f1d0 R08: 0000000000000000 R09: 0000000000000000 05:31:58 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r0, 0x10002000) 05:31:58 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[r1, r2, r3, r1, r1, r1]}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r0], 0x2) 05:31:58 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x60, 0x13, r0, 0x10000000) [ 2016.914479][T11436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.922460][T11436] R13: 0000000000a9fb1f R14: 00007f28aa52f300 R15: 0000000000022000 05:31:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:58 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x6000, 0x13, r0, 0x10000000) 05:31:58 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x43a01fff, 0x13, r0, 0x10002000) 05:31:58 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f00000000c0)) r1 = io_uring_setup(0x3bb0, &(0x7f0000000100)={0x0, 0x4e83, 0x4, 0x2, 0x69, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f00000003c0)=""/36, 0x24}], 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:31:59 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) 05:31:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:59 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_io_uring_setup(0x5651, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x223}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:31:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:59 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xff1fa043, 0x13, r0, 0x10002000) 05:31:59 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x600000, 0x13, r0, 0x10000000) 05:31:59 executing program 5: r0 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="439a7901e5adf4a898d1c9ef0289d8a725ae4d4867a865030d151202a09178817f491d7e994ab5b30e3cccb12c8c6ae1c9838d32807511206e9f90384291618740ffae07bef9095e84f7c2dffa2bbad5f9c16e92882768facaff7f0d5c676de23f07e05f4f59867a8eb1059ed76a7c18f88c2a5d69ac359217d8ca604a47fa0d205f062c05473e6274ab86fe", 0x8c, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='+\x00', r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='user\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 05:31:59 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:59 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x80ffff, 0x13, r0, 0x10000000) 05:31:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:59 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffff8000, 0x13, r0, 0x10002000) 05:31:59 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_NMI(r1, 0xae9a) 05:31:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:59 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x1000000, 0x13, r0, 0x10000000) 05:31:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:59 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x990a}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:31:59 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000000000, 0x13, r0, 0x10002000) 05:31:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x7}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:31:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:31:59 executing program 5: r0 = syz_io_uring_setup(0x7330, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xdc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:31:59 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) io_uring_setup(0x208b, &(0x7f0000000000)={0x0, 0xec9c, 0x10, 0x1, 0x2a9}) 05:31:59 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x4000000, 0x13, r0, 0x10000000) 05:31:59 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x20000000000000, 0x13, r0, 0x10002000) 05:32:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:00 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0xffff8000, 0x13, r0, 0x10000000) 05:32:00 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000000)={0x304}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:00 executing program 5: r0 = syz_io_uring_setup(0x3cff, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x3160, &(0x7f0000000100)={0x0, 0x6188, 0x20, 0x2, 0x2d5, 0x0, r0}) r2 = eventfd(0x0) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x6, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000001c0)={0xffff, 0x0, &(0x7f0000000380)=[r0, r0, r1, r2]}, 0x4) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000005c0)={0x0, r2}) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000480)={{0x2000, 0x4, 0x8, 0x20, 0x0, 0x0, 0x9f, 0x4, 0x9, 0x1f, 0x0, 0x3}, {0x6000, 0x9000, 0xc, 0x40, 0x8, 0x23, 0x3f, 0x8, 0xfa, 0x8, 0x1, 0x7f}, {0x0, 0x4, 0xd, 0x1f, 0x3f, 0x0, 0x9, 0x0, 0x3f, 0x68, 0x61, 0x80}, {0x2000, 0x100000, 0xe, 0x9, 0x41, 0x7f, 0x1, 0x11, 0x7, 0x1, 0x6, 0x1}, {0x4000, 0x2000, 0xc, 0x20, 0x86, 0x40, 0x0, 0x7, 0x8, 0x7, 0x2, 0x7f}, {0x0, 0x10c000, 0xc, 0x4, 0x48, 0x9, 0x2, 0xad, 0x81, 0x2, 0x20, 0x4}, {0x5000, 0x2000, 0x0, 0x1, 0x6, 0x20, 0x6, 0x8, 0x9, 0x1, 0x6, 0x81}, {0x2, 0x0, 0x4, 0x7, 0xc5, 0x6, 0x1, 0x1, 0xff, 0x0, 0x7f, 0x1}, {0x0, 0x800}, {0xd000, 0x200}, 0x40010000, 0x0, 0x1000, 0x400000, 0x3, 0x0, 0xd000, [0x81, 0x2, 0x2, 0x2]}) r6 = syz_open_dev$audion(&(0x7f0000000200), 0x3, 0x10000) r7 = syz_open_dev$audion(&(0x7f00000003c0), 0xfc00000000000000, 0x10000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x49}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x5, {"0d0c8259315e1989e00d44dcf9715ca4"}, 0xfffffffffffffffd, 0x0, 0x9}}}, 0x90) r9 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x7, &(0x7f0000000440)=r6, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:00 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x60000000000000, 0x13, r0, 0x10002000) 05:32:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:00 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r0, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:00 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x60000000000000, 0x13, r0, 0x10000000) 05:32:00 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80ffff00000000, 0x13, r0, 0x10002000) 05:32:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6558}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:00 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x13, r0, 0x8000000) 05:32:00 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x80ffff00000000, 0x13, r0, 0x10000000) 05:32:00 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r1 = io_uring_setup(0x35ed, &(0x7f0000000000)={0x0, 0x93c4, 0x20, 0x1, 0x2f}) syz_io_uring_setup(0x7efe, &(0x7f0000000080)={0x0, 0x3bc1, 0x1, 0x2, 0x2b6, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 05:32:00 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000000000000, 0x13, r0, 0x10002000) 05:32:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x8100}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:00 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x100000000000000, 0x13, r0, 0x10000000) 05:32:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:00 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x1, 0x40a00) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000180), 0xd19, 0xc0000) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x3, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r6, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_FRAME={0x23, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @broadcast, @device_b, @from_mac=@device_b, {0x1, 0x80}}, @sp_mp_open={0xf, 0x1, {0xa426, {0x1, 0x1, [{0x6}]}, @void, @void}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000001c0)={0x3, r3}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000380)={0x1}) 05:32:00 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000000000000, 0x13, r0, 0x10002000) 05:32:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:00 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = io_uring_setup(0x2365, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x32a, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) 05:32:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:01 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x400000000000000, 0x13, r0, 0x10000000) 05:32:01 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000000000000000, 0x13, r0, 0x10002000) 05:32:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:01 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000b40)={@host}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x7, 0x0) r5 = socket(0xb, 0x1, 0x6) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000200), 0x9, 0xefa5ba6581876818) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000240)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000b40)={@host}) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r10, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r6, r8, r9, r10, r0], 0x5) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[r5, r2, r0, r0, r3, r0, r0, r4, r0]}, 0x9) 05:32:01 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB="e99fd52ab5034979932efce82cfecb608451089f8d7b946301dfc6848a3eadf535c98ab237d97195ba10232a59c79abe5eec1460cbc5f9af1222582e11a7ffffff348f42f496aff2edc63c4ed6efdfe1372aab403a88da259a1e7177107efb3427ce68"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000010, 0x13, r0, 0x8000000) 05:32:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xd7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:01 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000004) 05:32:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x3}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:01 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xff1fa04300000000, 0x13, r0, 0x10002000) 05:32:01 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x20010010) 05:32:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x0, 0x1b, 0xd7}, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:01 executing program 4: io_uring_setup(0x5d17, &(0x7f0000000000)={0x0, 0xf391, 0x20, 0x0, 0x1fc}) r0 = io_uring_setup(0x2368, &(0x7f0000000080)={0x0, 0xed1a, 0x0, 0x0, 0x80001}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:01 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000060) 05:32:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:01 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) 05:32:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:01 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0xbb76}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:01 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000000)={{0x8a, 0x1}, {0xfffffffffffffffd, 0x80}, 0xf22f}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x7}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:01 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10006000) 05:32:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:02 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 05:32:02 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000a, 0x10, r0, 0x8000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:02 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x5, 0x2a0580) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x3, 0xa800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f0000000280)={0x0, 0x0, r2}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3001c6805751d355a65ad689c4977343d2b144d428f7364206658c65d677958b368aa7dc5a5f5395d1c54c8dbafb9f0a8330fe34e728e1180a37fd", @ANYRES16=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x1ded, 0x4, 0xfffdffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r3, 0x10000000) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x7fffffff, 0x14800) fanotify_mark(r4, 0x18, 0x1b, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') 05:32:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:02 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000100), 0x4, 0x400002) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)={0x5, 0x0, [{0x10000, 0xc4, &(0x7f0000000140)=""/196}, {0x2000, 0x1a, &(0x7f0000000240)=""/26}, {0x0, 0xe3, &(0x7f0000000280)=""/227}, {0xf000, 0x1000, &(0x7f0000000380)=""/4096}, {0x10000, 0x79, &(0x7f0000001380)=""/121}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001640)={0x1, 0x0, [{0x4, 0xd1, &(0x7f0000001540)=""/209}]}) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000001500)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc880}, 0x0) r2 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r2, 0x10000000) 05:32:02 executing program 4: r0 = io_uring_setup(0x182c, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x6, 0x200000) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x3, 0x4) syz_io_uring_setup(0x1149, &(0x7f00000000c0)={0x0, 0xbc72, 0x2, 0x2, 0x10e, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200)) r3 = syz_open_dev$audion(&(0x7f0000000280), 0x3, 0x262200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r4, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x2f, 0xf2, "bc224b37a7378a257d361f3a59808c1b25856dcba8bcdf055f5b124b8a5bbdf894d015d6f1be42410c641f"}, @NL80211_ATTR_FILS_KEK={0x3e, 0xf2, "6a6c43ab2af28867fea082d238935d2b2b431c6c14ab83468e4040e81eb56b0f0cf693325df2c865be68b49cab778d979d826bed76ffe879e75d"}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x40000) io_uring_setup(0x259f, &(0x7f0000000000)={0x0, 0x21b9, 0x30, 0x2, 0x13}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:02 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002004) 05:32:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x8000, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0xe}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:02 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)=0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:02 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x0, 0x0, [0xfc, 0x6, 0x3, 0x4, 0x5257, 0xfa0a, 0x5b4, 0x7, 0xe7, 0x3ff, 0x20, 0xc12, 0x7, 0x23bb, 0x8, 0x3]}, {0x0, 0x0, [0x1f, 0x7ff, 0xed, 0x7, 0x6, 0x753d, 0x6, 0x3f, 0x6, 0x30270, 0x964, 0x1, 0x81, 0x9, 0xfff, 0x6]}], r1, 0x1, 0x1, 0x90}}, 0x20) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r2 = io_uring_setup(0x1f32, &(0x7f0000000280)={0x0, 0xe58, 0x10, 0x0, 0x1d, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r2, 0x0) 05:32:02 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x1}) r1 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x300}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) 05:32:02 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/32, 0x20}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/79, 0x4f}], 0x5) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x60}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:02 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@host}) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a92ab997ed68f10fe0acc782bfa69b", 0xf, 0x1f, 0x0, 0x0, r2}, &(0x7f00000001c0)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000440), 0x80000000, 0x242a00) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000480)={{0x106001, 0x6000, 0x8, 0x7, 0x6, 0x3f, 0xb3, 0xff, 0x2, 0x7, 0xf8, 0x7}, {0x117000, 0x4, 0x4, 0x8, 0x40, 0x1, 0x73, 0x1, 0x40, 0x6, 0x3, 0x2}, {0x100000, 0x4000, 0xb, 0xa6, 0x1c, 0x5, 0xde, 0x3, 0x0, 0x3f, 0xff, 0x4}, {0xf000, 0x0, 0xb, 0x31, 0x1, 0x4, 0x5, 0x20, 0x8, 0x8, 0x7f, 0x7}, {0x3002, 0xd000, 0xb, 0x1, 0x4, 0x9, 0x8, 0x81, 0x1, 0x9, 0x1, 0xfd}, {0x100000, 0xd000, 0xe, 0x9, 0x20, 0x0, 0x83, 0x23, 0x1, 0x3, 0x4, 0x7f}, {0x2000, 0xf000, 0x4, 0x53, 0x0, 0x0, 0x40, 0x20, 0x54, 0x1, 0x4, 0x20}, {0x100002, 0x100000, 0xf, 0x0, 0x1, 0x1, 0xc3, 0x4, 0xb1, 0xe0, 0x3, 0xe6}, {0x5000, 0x4}, {0x1000, 0x6}, 0x10000, 0x0, 0x4000, 0x24001, 0x4, 0x1000, 0x10000, [0x1, 0x2, 0xfffffffffffffc00, 0x1000]}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000280)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x3}}, 0xfffffffffffffea9) 05:32:02 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x800000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x3ca1cda994825268) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:02 executing program 4: r0 = io_uring_setup(0x3521, &(0x7f0000000000)={0x0, 0x2e53, 0x0, 0x3, 0xf4}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) r2 = socket$kcm(0x29, 0x7, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000100)=[r0, r1, r2], 0x4087) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:32:02 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = syz_io_uring_setup(0x11ad, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x219, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10002000) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000000)=""/55) 05:32:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0xf0}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:03 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000d, 0x4010, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:03 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x30, r1, 0x8000000) 05:32:03 executing program 4: io_uring_setup(0x2366, &(0x7f0000000180)) 05:32:03 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1) r1 = syz_io_uring_setup(0x7355, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000080)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10002000) 05:32:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x300}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:03 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0xc55d}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x700}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:03 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x4, 0x8) r2 = accept4(r1, &(0x7f0000000180)=@ipx, &(0x7f0000000340)=0x80, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={0x0, @tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, @can, 0x3f, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)='team_slave_1\x00', 0x2, 0x9, 0x27b}) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000200)={0x0, 'sit0\x00', {0x4}, 0x8}) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) io_uring_setup(0x63a1, &(0x7f0000000100)={0x0, 0x85aa, 0x8, 0x0, 0x3c5, 0x0, r3}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:03 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r0, r0], 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:03 executing program 5: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000100)={0x700000000000000, 0x6000, 0x0, 0xc, 0x8}) r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x10000000) 05:32:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x78}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:03 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x40000) socket$rds(0x15, 0x5, 0x0) r1 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0xfffffff8, 0x0, &(0x7f0000000000)=[r1, r1]}, 0x2) 05:32:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0xe00}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:03 executing program 0: syz_io_uring_setup(0x7351, &(0x7f0000000100), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x59a5, &(0x7f0000000000)={0x0, 0xec4c, 0x20, 0x3, 0x2c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10002000) 05:32:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:03 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@host}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x12, 0x0, &(0x7f0000000100)=[r1, r2, r0]}, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:03 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) io_uring_setup(0x283c, &(0x7f0000000000)={0x0, 0xdcaf, 0x20, 0x3, 0x264}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x9010, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080), 0x1) 05:32:03 executing program 3: r0 = syz_io_uring_setup(0x87351, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000100)={{0x1, 0x0, 0x80, {0x7c456c2011c4c186, 0x1, 0x1}}, "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", "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"}) 05:32:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x3561}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:03 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@nl, &(0x7f0000000180)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x942a, 0x59}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) 05:32:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:04 executing program 3: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0xfffffff7, 0x0, &(0x7f0000000100)}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10010, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) keyctl$dh_compute(0x18, 0x0, &(0x7f0000000040)=""/39, 0x27, 0x0) r1 = io_uring_setup(0x7312, &(0x7f0000000180)={0x0, 0x4740, 0x1, 0x0, 0x128, 0x0, r0}) r2 = syz_io_uring_setup(0x5fc, &(0x7f0000000200)={0x0, 0x72ea, 0x20, 0x0, 0xff, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x10, r2, 0x0) 05:32:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:04 executing program 5: r0 = syz_io_uring_setup(0x3d67, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={r1, 0x0, r2}) 05:32:04 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x400000) r1 = io_uring_setup(0x7391, &(0x7f0000000180)={0x0, 0xf829, 0x18, 0x0, 0x215}) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) io_uring_enter(r1, 0x2636, 0x97e1, 0x3, &(0x7f0000000000)={[0x81]}, 0x8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 05:32:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x6000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:04 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000100), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x72a3, &(0x7f0000000000)={0x0, 0x7a96, 0x4, 0x3, 0x34a, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000180), 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x6135}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:04 executing program 3: syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f00000001c0), 0xf407, 0x300) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000100)={0x2, 0x400}) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000200), 0x7db7, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000240)=r3, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r1, 0x10000000) 05:32:04 executing program 4: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x4180000000000000, 0x100000, 0x8, 0x8, 0x1b}) r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:04 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:04 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0xf000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:04 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@host}) r2 = syz_io_uring_setup(0x7b71, &(0x7f0000000300)={0x0, 0x53f0, 0x20, 0x2, 0x57}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r3 = io_uring_setup(0x441e, &(0x7f0000000380)={0x0, 0x18fa, 0x2, 0x2, 0x18b, 0x0, r2}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000b40)={@host}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4800, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[r1, r4, r1, r2, r5, r1, r1, r6, r7, r0], 0xa) r8 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r8, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[r1, r0, r0, r2, r0, r0]}, 0x6) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000280)) 05:32:04 executing program 4: r0 = socket(0xb, 0x800, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x54, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x800}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x82f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x23f}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r1 = io_uring_setup(0x2368, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x8000}) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r2}) r3 = eventfd(0x331d) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x1, r3}) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7e}, @alu={0x7, 0x0, 0x6, 0x7, 0x4}, @ldst={0x1, 0x2, 0x3, 0x0, 0x7, 0x30, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='syzkaller\x00', 0x800, 0x16, &(0x7f0000000300)=""/22, 0x40f00, 0x0, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000340)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x8, 0x6, 0x98}, 0x10, 0xffffffffffffffff, r1}, 0x78) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000b40)={@host}) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000b40)={@host}) r10 = syz_open_dev$dri(&(0x7f0000000440), 0x40, 0xd303f60b58635c15) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000004c0)={0x20, 0x0, &(0x7f0000000480)=[r5, r6, 0xffffffffffffffff, r7, r8, r2, r9, r10]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) 05:32:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:04 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) 05:32:04 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) io_uring_setup(0x1de4, &(0x7f0000000380)={0x0, 0x724c, 0x0, 0x3, 0x97}) r1 = io_uring_setup(0x740f, &(0x7f0000000100)={0x0, 0x711d, 0x20, 0x3, 0x1b1, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000180), 0x1) r2 = syz_io_uring_setup(0x46a2, &(0x7f00000001c0)={0x0, 0x11ec, 0x30, 0x0, 0xf}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_setup(0x3b06, &(0x7f00000002c0)={0x0, 0x260c, 0x20, 0x0, 0x199, 0x0, r2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000340), 0x1) 05:32:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0xffff}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_WDEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:04 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x644d, &(0x7f0000000100)={0x0, 0xb18c, 0x10, 0x3, 0xc}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x490800) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r2, 0x1) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000200)=""/216, 0xd8}, &(0x7f0000000300), 0x1}, 0x20) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:04 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000200)=""/125, 0x7d}], 0x3) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x191040) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000040)=r3, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000080)=[r2, r4], 0x2) 05:32:05 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/40, 0x28}], 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 05:32:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:05 executing program 0: r0 = syz_io_uring_setup(0x613e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0xb7}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) io_setup(0x401, &(0x7f00000003c0)=0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000b40)={@host}) io_cancel(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xcd3cb64f7105028c, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="b145d9f939371f41c1f4948e571e42841b2982dcd887aa046680fa6955cad9b3bd536434fcf43e87a524e92d97644c48e9312a2f5e276cfd5ab1d65faab66b7263627955529c8803123499a4acb5005d9ff02fceb04b0659078deaeca919018a68481bea994be2e38c29ffa80a", 0x6d, 0x400, 0x0, 0x2}, &(0x7f00000004c0)) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000100)=0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000140)={'\x00', 0xa56, 0x0, 0x2, 0x0, 0x3f, 0x0, 0x5000}) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x3) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000500)={0x3, 0x401, [{0x3ff, 0x0, 0x800}, {0x81}, {0x8, 0x0, 0xf6}]}) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000300)) 05:32:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4044000) 05:32:05 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = io_uring_setup(0x2368, &(0x7f0000000000)={0x0, 0xf56c, 0x1, 0x1, 0x2d1, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) 05:32:05 executing program 3: r0 = syz_io_uring_setup(0x27351, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:05 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000100), 0x800, 0x24400) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)) socket$inet6(0xa, 0x1, 0xc00) r1 = syz_io_uring_setup(0x7359, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r1, 0x10000000) 05:32:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:05 executing program 4: r0 = io_uring_setup(0x802368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x4044000) 05:32:05 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socket$inet6(0xa, 0x1, 0x8) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:05 executing program 0: ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/75) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10002000) io_uring_setup(0x42b9, &(0x7f0000000180)={0x0, 0x3525, 0x0, 0x1, 0x2db}) 05:32:05 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0xfffffffe}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:05 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @ax25={0x3, @default, 0x2}, @rc={0x1f, @any, 0x45}, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='vcan0\x00', 0x7, 0x8, 0x5}) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000200)={0x1, 0x2c08}) 05:32:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:05 executing program 0: r0 = syz_io_uring_setup(0x2ab4, &(0x7f0000000000)={0x0, 0xadb, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r0, r1, r2], 0x3) 05:32:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:05 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0xd9ae, 0x2, 0x4, 0x138}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000eb6000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x7041, &(0x7f0000000140)={0x0, 0x5962, 0x20, 0x3, 0x258, 0x0, r0}) io_uring_setup(0x1791, &(0x7f00000001c0)={0x0, 0xf459, 0xd13d8d750744b40, 0x3, 0x292, 0x0, r1}) 05:32:05 executing program 3: connect$rds(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10) r0 = syz_open_dev$audion(&(0x7f00000001c0), 0x10000, 0x90800) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000100)={0x0, 0x35f4, 0x10, 0x2, 0x19f, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000200)) io_uring_enter(r0, 0x2f7e, 0x5566, 0x2, &(0x7f0000000240)={[0x947]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0xba84, 0x0, 0x7ffd, 0xfffffffc, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r2, 0x10000000) 05:32:05 executing program 4: io_uring_setup(0x2368, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0xfffffffe}) 05:32:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:06 executing program 0: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$audion(&(0x7f0000000100), 0x9, 0x161e02) 05:32:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x7}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:06 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x10010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:06 executing program 4: r0 = io_uring_setup(0x2217, &(0x7f00000000c0)={0x0, 0x37ef, 0x2, 0x1, 0x8}) r1 = io_uring_setup(0x21ca, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200202) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0xffffff01, 0x0, &(0x7f0000000040)=[r2]}, 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) 05:32:06 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/40, 0x28}], 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 05:32:06 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 05:32:06 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x1, 0x40) io_uring_setup(0x107d, &(0x7f0000000140)={0x0, 0xcdab, 0x20, 0x1, 0xe1, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:06 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:06 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all, 0xb) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000100)={0x267, 0x10001, 0xb08b}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000140)={0x5000, 0xd000, 0x1, 0x6, 0x9}) 05:32:06 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/40, 0x28}], 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 05:32:06 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x8b9a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000380)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000002c0)=[r1]}, 0x1) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x2, 0x200) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/183, 0xb7}], 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140), 0x1) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000340)=r2, 0x1) 05:32:06 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x4a66, &(0x7f0000000100)={0x0, 0xebc8, 0x10, 0x0, 0x224}) io_uring_enter(r1, 0x5831, 0xd82, 0x1, &(0x7f0000000280)={[0x2]}, 0x8) r2 = syz_io_uring_setup(0x561c, &(0x7f0000000200)={0x0, 0x31e4, 0x1, 0x0, 0x18c, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x10010, r2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r0, 0x10000000) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f00000002c0)=r3, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) r4 = syz_io_uring_setup(0x5478, &(0x7f0000000300)={0x0, 0xcaec, 0x4, 0x3, 0x14c}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r4, 0x1102, 0xbc00, 0x2, &(0x7f0000000400)={[0x10000]}, 0x8) r5 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000440)={{{@in=@loopback, @in6=@initdev}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x4010, r2, 0x10000000) 05:32:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xe}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:06 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 05:32:06 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/40, 0x28}], 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 05:32:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x60}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:06 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={0x0}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f00000002c0)={0x3, 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, r1, r2, 0x0, r3, 0x0, 0x0, 0x0], &(0x7f0000000240)=[r5, 0x0, 0x0], 0xa}) r6 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r6, 0x10000000) r7 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r7, 0x10000000) 05:32:06 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000b40)={@host}) r4 = syz_usbip_server_init(0x5) r5 = userfaultfd(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1, r0, r0, r2, r3, r0, r4, r5, r0], 0x9) r6 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x3, {0xa, 0x4e23, 0x1, @remote, 0x14b}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)="497204", 0x3}, {&(0x7f0000000280)="a794a706ee4eebdb3c7a544943632c415e31b3932f3fca686bcefd4c00b1", 0x1e}, {&(0x7f00000002c0)="f203fc20495ce44403d8468d4a7b38b4b9a20dc1658b2cb95c7ce625253b42d2e749ab58eadc2c5c1ad72e2b509a5261b100b34dce105d66415c9d8064abd60ffafc57a5d5c44f2521d82c", 0x4b}, {&(0x7f0000000340)="10d7a2326ab24038c3290a8a3ce9a5e4f9f2d8e0bed0d39c48a3c5736405a3120feddfa13175dd77c7ee8de00394b435e3356ff6d9fe4526751fade7c0ab48a962b2486feb6639645633750a4e98135f809c136b90c405241425130941f0bd17154706c414163d0039f5ed354f70aacda0d7725181260958940ac0aab399245dbc4573b5885393250a73607ac2ab43616686666cd00c282663357d66c3cd731204c155abc696f4a348d985a89a84819138f5a8f2024ea8d2c540cd54a52921cb1a6174d018fec1e80cd8af8b3090704f05af", 0xd2}, {&(0x7f0000000440)="6ff0c687189d98046190f863bf317ef18958572fce691b375724c41f00e20219c361dba6fb02d0868cc2643d", 0x2c}, {&(0x7f0000000480)="372b2e29714760fcb9adb7661e47a3f26d9950177a28e33eb580344687cbf7198084bd98f84aa6aaf24913a981cac1a83a8beb038e92d2d467c0544de44c7b2cf078d33ac285f6920596a0b27812023777b16b3e992535c3fe93692aa96fa0e4b835b31840697aa23d0141624a8770ce911104ee28f885836c986e9f467c15e64de92f484ccc1e9518d1576271e207ae9825798227c6353e1fc3db44fdac2b914990ee32800494785aef0f151ddd19128f2092d156ce48e7bfa78b2e417dc113b0be80a984528c8e73368a37419d85c698d7f17adfaa4933b6a332364105bd2ccd97d75b8e8b610f9dd1bcae9ff766376c3f753493aa22b25f9b8365", 0xfc}, {&(0x7f0000000580)="7632588dca4675f94fd1387354af30513c1d8087136e7520a68a0428f01ad8e9b1b4d2247cd1d7a5ca63dbbc76196e15a3726b60eaf51322d4d643e3650a33cb75f6089b486ad0ee6f54cb6c2a5cde49d2d1c63c2260e35d22e28269b18a1a456ceab7e92f67a4b072ada377621d824f5fb58bd1fcbb06dcdea7e01451502929a1446e89cbdcb6d8881721ce52d4b673efe4920fa468fab4de41607aba15b951f315d189d0b69dd184d633235be01017bc554eb5", 0xb4}], 0x7, &(0x7f0000000740)=[{0xe0, 0x84, 0x80000000, "21ccc6430397586a742c05b4cf4339b91615b345fc3f289894467db5520d1a2cfcfcee3f240bdef90599bda7728e38f5be3b900bf225dd10e4c170f5a32ccd61e3bd0d1952bd37e02dbb5acc43b6c5da2b530a14ca9e79f2048eb623016a3ade6994eb1d005137fb532e9f81fe1621a499ac946f6fa92bf4d320354bed062dcac38fb85f2f5a2cfa080366ed35e43958e442446da075fb1730aa789cdb80fe00efad6ac0e017d09ae888f82e0db2053acf64584be266f3e1eafe2e159ccfe37224ca4761b1cf27ba8a961b12d1"}], 0xe0}, 0x4) 05:32:06 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) syz_usbip_server_init(0x4) io_setup(0x4, &(0x7f0000000000)=0x0) r3 = eventfd(0x20) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) io_submit(r2, 0x2, &(0x7f0000001200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5217186b66b94f40, 0x0, r0, &(0x7f0000000040)="715e93af1dcb307133fed41cd340b287d1ee1d3fdbfca865a14a0edacf6153c53d88d13d02d88a3b96d2b91e92ff1f4fe2429630ea5068c4117f7e9df1ff12d0e041a6945d716e6b06801b0e8a412453fb04ee53c74431a2dd7eaddeaa0717ca6529edba6bc41d943ebf3964c0f1b4a4dd11f97ed619e3ff46483723297464a7", 0x80, 0x3ff, 0x0, 0x1, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000200)="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", 0x1000, 0x8000, 0x0, 0x0, r4}]) 05:32:06 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000280)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x4, 0x4, 0x3, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000480)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1c8698899bdf6f67}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000580)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000005c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000680)={&(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000780)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000840)={&(0x7f00000002c0)=[r1, 0x0, r2, 0x0, 0x0], &(0x7f00000007c0)=[r3, 0x0, 0x0, r4, r5, r6, 0x0, r7, r8, r9], 0x5, 0x1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x100, 0x30bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x2d}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffe, 0x65}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x4000004) r11 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r11, 0x10000000) 05:32:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:07 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/40, 0x28}], 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:07 executing program 3: sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x519400) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000240)=0x13, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000280), 0x3, 0x400c1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000002c0)="0f20c06635000000200f22c066b9350900000f32f20f001dbaa000b00aee66b9080900000f3226d9fb0fc72c6567f2acdbe20f01cb", 0x35}], 0x1, 0x0, &(0x7f0000000340), 0x0) [ 2025.453744][T11947] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2025.460286][T11947] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2025.479908][T11953] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2025.486436][T11953] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2025.513132][T11947] vhci_hcd vhci_hcd.0: Device attached [ 2025.545962][T11951] vhci_hcd: connection closed [ 2025.546376][T11411] vhci_hcd: stop threads [ 2025.571915][T11953] vhci_hcd vhci_hcd.0: Device attached [ 2025.576679][T11411] vhci_hcd: release socket [ 2025.607364][T11411] vhci_hcd: disconnect device 05:32:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x300}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) [ 2025.613307][T11954] vhci_hcd: connection closed [ 2025.641221][T11411] vhci_hcd: stop threads 05:32:07 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000140)={'\x00', 0x2, 0x2, 0x1ff}) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r1, 0x10000000) 05:32:07 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/40, 0x28}], 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) [ 2025.682671][T11411] vhci_hcd: release socket [ 2025.729544][T11411] vhci_hcd: disconnect device 05:32:07 executing program 3: r0 = syz_io_uring_setup(0x7197, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffdff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x30, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x700}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) [ 2025.763603][ T2593] vhci_hcd: vhci_device speed not set 05:32:07 executing program 1: syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) [ 2026.060316][T11957] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 2026.066871][T11957] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2026.085568][T11957] vhci_hcd vhci_hcd.0: Device attached [ 2026.092736][T11986] vhci_hcd: connection closed [ 2026.096773][T11411] vhci_hcd: stop threads 05:32:07 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x358e, &(0x7f0000000140)={0x0, 0x9006, 0x0, 0x1, 0x370, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) io_uring_enter(r0, 0x784b, 0x118e, 0x1, &(0x7f0000000080)={[0x2]}, 0x8) [ 2026.111842][T11411] vhci_hcd: release socket [ 2026.122898][T11411] vhci_hcd: disconnect device [ 2026.144893][T11962] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(4) [ 2026.151420][T11962] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2026.193715][T11989] vhci_hcd: connection closed [ 2026.194177][T11962] vhci_hcd vhci_hcd.0: Device attached [ 2026.227193][ T102] vhci_hcd: stop threads [ 2026.231451][ T102] vhci_hcd: release socket [ 2026.247281][ T102] vhci_hcd: disconnect device 05:32:07 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000000)={0x1, 0x4fe, 0x7f}) 05:32:07 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r1, 0x10000000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1) 05:32:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xe00}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:07 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 05:32:07 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000300)=""/141, 0x8d}, {&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/224, 0xe0}], 0x7) 05:32:07 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) io_uring_enter(r0, 0x712f, 0x30de, 0x3, &(0x7f0000000100)={[0x4]}, 0x8) r1 = getegid() keyctl$chown(0x4, 0x0, 0x0, r1) 05:32:08 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 05:32:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x3561}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:08 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x13, r0, 0x10002000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_setup(0x4291, &(0x7f0000000000)={0x0, 0x9529, 0x2, 0x3, 0x45, 0x0, r1}) 05:32:08 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x26}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r1 = syz_io_uring_setup(0x4b6d, &(0x7f0000000100)={0x0, 0x2cf9, 0x4, 0x1, 0x2df, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r1, 0x8000000) 05:32:08 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = io_uring_setup(0x656f, &(0x7f0000000000)={0x0, 0x9e64, 0x20, 0x1, 0xd, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x90010, r1, 0x0) syz_io_uring_setup(0xa2c, &(0x7f0000000080)={0x0, 0x593c, 0x20, 0x3, 0x10}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:08 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000012000000ffd60000000000e804fef3000600799416204ff2b59fe006000000000000"]) 05:32:08 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 05:32:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x6000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:08 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000002c0)=r1, 0x1) r2 = syz_io_uring_setup(0x36b4, &(0x7f0000000100)={0x0, 0x96e2, 0x0, 0x3, 0x1ac, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="c74424009f090000c744240200500000c7442406000000000f011c24b805000000b9f6ffffff0f01c10f01382e2546000000f08682d5000000ea0000000059000f0134af66bad104b000eec4c245be81fa7f00000f09", 0x56}], 0x1, 0x45, &(0x7f00000002c0), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 05:32:08 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x57ce, 0x20}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000011, 0x80010, r0, 0x8000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:08 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3f54, &(0x7f0000000200)) io_uring_enter(r1, 0x548e, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:08 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@host}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000b40)={@host}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x3, 0x5, 0x3, 0x95, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r1, r2, r3, r0], 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:08 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 05:32:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x6135}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:08 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x1f, 0x98483) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x2, {0x347f, 0x3, "8255274466b23e4bf09e4ba39b53ffda115bb660faf50e5242323ffa93c9a677f3904c2355922ef95aec5565d7527e87526999983455bd810756c4f52080d76bcbb746ad1547e42f83dbee0588a7ec4af2d0b7fa5fdf4363bbe3fe50b9a606e8db740db1550e04270e3106b0fe9dffc6ac1de323fc84bb66e70f201528b0f931b57e56b832b9f21a87fb418f9cf728365d0f837b2002acc4f6f809e2c65bac7695f757b6d2b09d4fc194f8d23aca17155cb41dc8d85e6966072bac0cba0ed58dcad35d1b8dbc9f29e234607cb6b29e4cf6c7510a2b91fbbd0609ee8a25ae3a18e20f47679bbb95826a4053ab9a3051a0dbf9e2c0e5120aec9e6e5893cea3ebf5", 0x2, 0xff, 0x3, 0x1, 0xd6, 0x71, 0x6, 0x1}}}, 0x128) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:08 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x13, r0, 0x10002000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_setup(0x4291, &(0x7f0000000000)={0x0, 0x9529, 0x2, 0x3, 0x45, 0x0, r1}) 05:32:08 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:08 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x10002000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) syz_io_uring_setup(0x53, &(0x7f00000012c0)={0x0, 0x6ea7, 0x1, 0x1, 0xfd}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000001340)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x40010, r1, 0x10000000) syz_open_dev$audion(&(0x7f0000000000), 0xa4, 0x521000) r2 = syz_open_dev$audion(&(0x7f0000001400), 0x6, 0x484082) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000002c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000013c0)={&(0x7f0000001380)='./file0\x00'}, 0x10) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/165) 05:32:08 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180), 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/29, 0x1d}], 0x4) 05:32:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:09 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@host}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000b40)={@host}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x3, 0x5, 0x3, 0x95, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r1, r2, r3, r0], 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:09 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xfffffffe, 0x3fa}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) io_setup(0x807, &(0x7f0000000000)=0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002740)) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000024c0)={0x0, r3}) r4 = syz_io_uring_setup(0x7ff1, &(0x7f0000000080)={0x0, 0x67a8, 0x10, 0x0, 0x23b, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = syz_open_dev$dri(&(0x7f0000002500), 0x8001, 0x200100) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000026c0)={0x3, 0x40000, &(0x7f00000025c0)=""/28, &(0x7f0000002600)=""/55, &(0x7f0000002780)=""/115, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000002540)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r5, 0xc01064c2, &(0x7f0000002580)={r6, 0x1, r3}) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000012c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) r8 = eventfd(0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002480)=[r8, r8, r7], 0x3) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000b40)={@host}) io_submit(r1, 0x4, &(0x7f0000002440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000, 0x8, 0x0, 0x1}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000001200)="e6aa93d3eda4167bd9c3afb48e55a8647a13c337b342514dce9c1af2ce84e10e00ce9c21aafe363c87f0458ab9c15be8e8815c114583cbf27cc63ab029063464006d5eb8968156ee4764", 0x4a, 0x4, 0x0, 0x3}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x6, 0xe944, r7, &(0x7f0000001300)="83285e36fd93b1b81ad142c5e1d585d3ea2dcdc62de8c7ac1e44e0921e4905cd4b4714c7b2b9a0ad31d5dfbe50d7b5445fa2b5023eb97256afbdb46d9f2f5c8b2028136086af8829b1f105c2206a3117d18b7b48b1cb070b87f29d39faa53ebd62c362e3374dd9f84a1fa052da1fab01be380e7c3163f86f468f5e95730830ac56c3a07970f9e099f49413d28a499c44425f1863d0dc0f3869f777b4d0d9539a6952dff9b43f2dba31", 0xa9, 0x8001, 0x0, 0x1, r8}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x6, 0x7, r9, &(0x7f0000001400)="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", 0x1000, 0x1, 0x0, 0x2}]) 05:32:09 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x31ee, &(0x7f0000000100)={0x0, 0x6041, 0x4, 0x3, 0x37b, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_open_dev$audion(&(0x7f0000000200), 0xffff, 0x6280) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000240)=r2, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:09 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000180), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000100)={{0x7b, 0x6}, 0x14}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:09 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) r2 = eventfd(0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140)=r2, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x15, &(0x7f0000000100)=0x40, 0x4) 05:32:09 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x10002000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) syz_io_uring_setup(0x53, &(0x7f00000012c0)={0x0, 0x6ea7, 0x1, 0x1, 0xfd}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000001340)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x40010, r1, 0x10000000) syz_open_dev$audion(&(0x7f0000000000), 0xa4, 0x521000) r2 = syz_open_dev$audion(&(0x7f0000001400), 0x6, 0x484082) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000002c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000013c0)={&(0x7f0000001380)='./file0\x00'}, 0x10) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/165) 05:32:09 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0xc0000000, 0x3, 0x5, 0x6}]}) syz_io_uring_setup(0x7354, &(0x7f0000000000)={0x0, 0x9708}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r1, 0x10000000) 05:32:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:09 executing program 0: getgid() r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:09 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x3, 0x2, 0x80000001}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:09 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x4, 0x1ff}, {0x7, 0x101}, 0xc78, 0x1}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:09 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:09 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) r2 = eventfd(0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140)=r2, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x15, &(0x7f0000000100)=0x40, 0x4) 05:32:09 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r1 = eventfd(0x200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "1d2691a60ac12008b7bffc871ad6d2f4909a6d6f0530714dfda3ea96e78520d69458ef13be14e2d62fce8596f3f4cd14a98e3e52932f5ea876cc56f8ca4deded72a28f8818a735e0961e6a87e50f25e1284a26c9d386ad2c56dde08445b0a06b85542e6f534088691df492bb3bb3e6844ae4dd358446fbe97c1267e7464215e2f05f34000e63bfd6c2c43b0a551c7b10fc2673abc3ef5da15f39a22b12e4a9e7346a1a6c463a44a73661a621a3dd8b2b4ce5e31c5807063f9eb08632b96c435e4c0354c4aae93b7ac6d87cb8db959cd69a8bfc607a5e89d2ef933170b74a77427019df9e39f5af834447c891062653a723138acedb2942b111d9f533eb5ed442"}}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0xf97, 0x0, &(0x7f0000000000)=[r0, r1, r0]}, 0x3) 05:32:09 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x21}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x50, r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0xc020660b, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1f, r0, &(0x7f0000000140)="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", 0x1000, 0x7fff, 0x0, 0x3, r3}, &(0x7f0000001140)) 05:32:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x3000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:09 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000003c0)={0x20002, 0x0, [0x1000, 0x800, 0x495c, 0x2, 0xfffffffffffffe01, 0x23, 0x9, 0x9]}) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10002000) r2 = io_uring_setup(0x38f8, &(0x7f0000000200)={0x0, 0x4458, 0x10, 0x3, 0x204, 0x0, r1}) syz_io_uring_setup(0x6c9, &(0x7f0000000280)={0x0, 0x1eb, 0x1, 0x0, 0x242, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_setup(0x216d, &(0x7f0000000100)={0x0, 0xdb85, 0x20, 0x2, 0x87, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 05:32:09 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0xffffffffffffffff]}, 0x1) r1 = io_uring_setup(0x14cc, &(0x7f0000000940)={0x0, 0x305, 0x2, 0x3, 0x1f6, 0x0, r0}) r2 = syz_io_uring_setup(0x803b25, &(0x7f0000000100)={0x0, 0xca44, 0x2, 0x2, 0xf9, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_setup(0x461e, &(0x7f0000000200)={0x0, 0xe4aa, 0x1, 0x1, 0x185, 0x0, r2}) r3 = eventfd(0x5) io_submit(0x0, 0x4, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f0000000580)="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", 0xfb, 0x5, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x1ff, 0xffffffffffffffff, &(0x7f00000006c0)="6212ce0c2e2aec805ad82f7f5125f83a4ecc5658e2dbfc120a3647f485e65c378a16658674742508ddeac13bf2366ae616f39b62d39a1327235d643ec1c335aa9dc3761555248fc2e8f40032c0d7c0a4bf8c45b12a70186399bf6a87d94491cfd283fadc1a47e43a5124d606ec245d45561fbd97ec5f954f021de0d09b4cc40fb367d79a59ca6b6b0d4ec4c5a6fa49569934f3aa403fb70d3394d76eeb95329fd84551b677d5", 0xa6, 0x5, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x20, 0xffffffffffffffff, &(0x7f00000007c0)="cb13be6c8fa72b4ccd40e6921bae464532ca50d682fed4a4ac3f766bde2607434921754082a54257365c29442b99bd34f973af43a9db202fa4bbc6", 0x3b, 0x1000, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x7f, r3, &(0x7f0000000840)="3b54f7b7b16bd8990f1306dbe2db6f7f", 0x10, 0x5, 0x0, 0x3}]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000b40)={@host}) r5 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x401, r4, &(0x7f0000000480)="e538e63e559115fe1665b1920f5a0cae4fd2646f6d9b895ba50db87526ea24fa08771d9717f5f492e1a7d1e8ee4900f28213a0f5bd112845460ee53ae62aa9ac661175f48e232aaa3d10349bc2048d0de6f9dd8ba4315509f2b6f97990d8b01fa952537658a556831c3285fe83f5003b429a8da99b010ec5ebed486daceea39c352aa101a46596f29af0eadb761e13fdbe10b5f23bd75dbed82d00164f686ee8024e10b64a9f1a55dbfa7838b7678e1569a7d11cb143c6911384fd4e0d1a085715bd3e9e21d0f05b31b61e0988f728a72fe1f70a126d74f145ae4e2768e966", 0xdf, 0x4, 0x0, 0x2, r5}]) r6 = io_uring_setup(0x4db0, &(0x7f0000000280)={0x0, 0x2ad8, 0x2, 0x0, 0x37c, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x11, r6, 0x10000000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000300), 0x1) 05:32:09 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) r2 = eventfd(0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140)=r2, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x15, &(0x7f0000000100)=0x40, 0x4) 05:32:09 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_setup(0x200, &(0x7f0000000000)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'wg2\x00', {}, 0x3}) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20, r2, &(0x7f0000000080)="7e1bbb05d2953f7ce8c07ff543b8cec213fa28ffd95191b97f375fdc4ad627ce46ce175ad9bd18ac8f42a49fe05435d5a188548b232f490f664c8a60805897db4f632f706ff6d77c2e4226d843c011ec8a968d0770aa7f130fb092d67400741717b48f0f0e238819e903c172c0f801207df7a0b0a3525e27cb4ccc9422da2d320eb7b84fb11e9f1f1e3e8a62ade0a6d6407831fbfdcaa5d5250e39dc3ff96fd7e2cd85e0decaf8a0adf22e8d4881e4e374cbef921c9e9c20dc8ef67b09b99054854ff7d71216c017a1aa", 0xca, 0x1, 0x0, 0x1}, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) io_setup(0x3, &(0x7f0000000880)=0x0) io_cancel(r3, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r4 = eventfd(0x51e) io_setup(0x3, &(0x7f0000000880)=0x0) io_cancel(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f00000002c0)="46a3de1a7b6e1d42316791c0058305d4dc6aca5c0e651f41640f4904da4aa02d7455eb68afefea0d5f0eef599f588256c22cd2035a4ede61145fe943cebb3fce86ed26ef26a0ee1cb954c8f26a13bc74596c188a97e67ecc0026d468bb45b61bd60e31cbdf1555a40617cbe50b43d14d12ec304caa87bbb4871d383ff9", 0x7d, 0x2ba, 0x0, 0x3, r4}, &(0x7f0000000380)) 05:32:10 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) io_setup(0x1, &(0x7f0000000100)=0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000140)="b34b81884cbe79ec39eb53e7cf9adcc545b73546b613b1ef69e1cfeee9292ee8dbb2860c722a28d3484510400159aecbb1623b950dffe95abfc1ef289cfdd8bad2e4c066b652d9a3c791a308ad220fbe802dbc1a67656a9ddeb8c58af0431a190530b11394bdd8330fb806fac6", 0x6d, 0x3, 0x0, 0x2, r3}, &(0x7f0000000200)) 05:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:10 executing program 0: r0 = syz_io_uring_setup(0x7355, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x10, 0x1, 0x6, 0x40, 0x97, 0x6, 0x1, 0x3, 0xf7, 0x81}, {0xd000, 0x6000, 0x10, 0x3, 0x2, 0x2, 0xb3, 0xe5, 0x3, 0x0, 0x7, 0x16}, {0x0, 0x100000, 0x3, 0x6, 0x1, 0x3, 0x8, 0x2, 0xc9, 0x7, 0x5, 0xfe}, {0x1, 0x5000, 0x3, 0x4, 0x5, 0x4, 0x3, 0x3f, 0x5, 0x7, 0x2, 0x2}, {0x6000, 0x8000, 0xe, 0x6, 0x1, 0x1, 0x7, 0x0, 0x5, 0x7, 0x2, 0x1f}, {0x0, 0xd000, 0x0, 0x4, 0x20, 0x1, 0x3, 0x5, 0x79, 0x80, 0x20, 0xfc}, {0x101004, 0x10000, 0x3, 0x40, 0x7, 0x2, 0x3f, 0xe6, 0xff, 0x5, 0x20}, {0x2, 0x1000, 0x9, 0x1, 0x0, 0x8, 0x5, 0x9, 0x76, 0xbd, 0xf8, 0x9}, {0x100000, 0x273}, {0xd000, 0x9}, 0xc0000000, 0x0, 0x106006, 0x1, 0xb, 0x4000, 0x3000, [0xb7, 0xfffffffffffffff9, 0x0, 0x8001]}) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f00000002c0)=0x400, 0x4) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000300), 0x4) 05:32:10 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) r2 = eventfd(0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140)=r2, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x15, &(0x7f0000000100)=0x40, 0x4) 05:32:10 executing program 3: syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000100), 0x6, 0x20100) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7000007, 0x30, r0, 0x10000000) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r2, 0x8000000) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 05:32:10 executing program 4: r0 = io_uring_setup(0xce, &(0x7f0000000000)={0x0, 0x4326, 0x2, 0x1, 0xa8}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x2368, &(0x7f0000000180)) r2 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='+\x00', r2) request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', r2) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) 05:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x7000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:10 executing program 5: syz_io_uring_setup(0x1d09, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x8}}}}, [@NL80211_ATTR_SSID={0x1f, 0x34, @random="b26fe50a6cab03437493f111cc00b82c2332a080fee1b50da97f4d"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x59}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x3, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa8, 0x6d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x680, 0x0) 05:32:10 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10002000) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x5af, 0xa40803) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, r2, r0], 0x3) 05:32:10 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) r2 = eventfd(0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140)=r2, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r1, 0x46, '\f)z', "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"}}, 0x110) r2 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r2, 0x10000000) 05:32:10 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 05:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:10 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x2414, 0x0, 0xf80000}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$audion(&(0x7f0000000100), 0x2, 0x450080) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10002000) 05:32:10 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x16d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xe000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:10 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) syz_open_dev$audion(&(0x7f0000000000), 0x400, 0x2000) r2 = syz_io_uring_setup(0x4863, &(0x7f0000000080)={0x0, 0x9f7d, 0x1, 0x3, 0x1b3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r3, r1, r1, r0, r0], 0x5) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)) 05:32:10 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) r2 = eventfd(0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140)=r2, 0x1) 05:32:11 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000180), 0x400, 0x28082) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) connect$rds(r1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 05:32:11 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0xc3a, 0x9, "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", 0x2, 0x3, 0x0, 0x7f, 0x4, 0x1, 0xa7, 0x1}}}, 0x120) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$KVM_RUN(r0, 0xae80, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r1, 0x10000000) 05:32:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x60000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:11 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x8000000) 05:32:11 executing program 4: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)={0x5, 0x3, 0x8, 0x0, 0x101, 0xff, 0x96, 0x5a, 0x3, 0x8, 0x1, 0x7f, 0x0, 0x2, 0x3, 0x3, 0x7f, 0x0, 0x1, '\x00', 0x0, 0x4}) r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:11 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:11 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in=@dev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = syz_io_uring_setup(0x1d4e, &(0x7f0000000100)={0x0, 0xcb29, 0x10, 0xfffffffd, 0x22e, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x10000000) syz_io_uring_setup(0x2d55, &(0x7f0000000040)={0x0, 0xc8ff, 0x4, 0x3, 0x365}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_open_dev$audion(&(0x7f0000000200), 0x3f, 0x101041) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) 05:32:11 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000100)={0x2, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r1, 0x10000000) 05:32:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x61350000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:11 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000000)=""/64, 0x40, &(0x7f0000000040)=""/128, 0x3, 0x4}}, 0x48) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) 05:32:11 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:11 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:11 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000100), 0xe1, 0x149000) setsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000140)="9f5591be8bae4ab1257de2dd444de95a070ff8e2f35554329cb797f29574948d60acb052bbadceede47762ea6973a925745db094c7536f01fa7c2ec58f47af68658a78ea6d3797f12fec3b23a26e998c264c24ae603a9ebe4f80db118ef4c1d1f3060b58e230be5281222bfb1325a56607b38a8a4045f6c5734eb5af37285e18b389cb8c66868e09ca4f4a22e4f70b5906344f62ae29147e16d465ab10bb24fd83371975c9e886acbefc4ecae4f19c30038735ca312c8713250dd0f96542a44a1a4de73400cbf2bbb4b07e71bdeacec7b76f", 0xd2) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:11 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="2e670f017e0b0e66b8007000000f23d80f21f86635400000100f23f83e260f22c666b9800000c00f326635004000000f300fe98a0a00d9230fb9e2ba2100ed0f01ca", 0x42}], 0x1, 0x10, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:11 executing program 4: ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000000)) r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:11 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xfffffffe}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="ff22f5b0f124a7659c392c93fcdae439b784ff12eee57c448f1e73d8caeddb9a816a09146c7180c5f37237308dfa87763b8e0d12fb47af516a103fc41fc2209515f033336084851643751fef96c0289d67d3f8eddfaf4c9930d25b26bd75fe3772dd121a20f8114978fc96ab1c90c6827b4f26c474050de709ba87603ff0dfad3a26500e37f33005c1081d0c81e5efe8b62b1384f25a9b70d9f96e04472ab934297e1dd168f3bedb53f274e96e3028b6097755ae4b191dcde683c1c6a365bbe1e2fb4ab7f64a4b9857af340b", 0xcc, 0xfffffffffffffffc) r2 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "f25253427f923c1defff7641de06a817b196e6de88d7d7696557dbbd2228ef592ff3fd822a0ce87b5e538c6e9f1190598fa0855a07b4dcfba48788ec957a402d", 0x2b}, 0x48, 0xfffffffffffffffa) r3 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "0408dfdb949eafe4e4456030309ecc2aa74d114c071be7d72d0a18e07e48b4037d1e2e38837df8bc44beff6fed15c3176044cec3080ef6ff687e3509dd8dfbf0", 0x39}, 0x48, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000480)={r1, r2, r3}, &(0x7f00000004c0)=""/208, 0xd0, &(0x7f0000000640)={&(0x7f00000005c0)={'sha224-arm64\x00'}, &(0x7f0000000600)="a0bcb2429a2288a3f8f6f5401a9336463a427ba6d6aaaaec9fc53bc7db8b8a3c9c0c7cd45267a49ac546e6b62e731e9933a18ffe", 0x34}) 05:32:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:11 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_io_uring_setup(0x738b, &(0x7f0000000100)={0x0, 0x53c4, 0x2, 0x1, 0x292}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r3 = io_uring_setup(0x6d63, &(0x7f0000000280)={0x0, 0x9707, 0x59a462fb12cf9183, 0x3, 0x28, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000000480)=""/159, 0x9f}], 0x3) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x81, 0x0, &(0x7f0000000200)=[r2]}, 0x1) 05:32:11 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:11 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x3, 0x1}) io_setup(0x401, &(0x7f0000000000)=0x0) io_destroy(r1) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 05:32:11 executing program 5: ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0x101, 0x4, 0x2, 0x0, 0x4, 0xf000, 0x2, '\x00', 0xd6}) r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x7ce0, &(0x7f0000000100)={0x0, 0x3010, 0x1, 0x2, 0x1c9, 0x0, r0}) syz_io_uring_setup(0xe23, &(0x7f0000000180)={0x0, 0x9667, 0x0, 0x3, 0x293, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:12 executing program 3: r0 = syz_io_uring_setup(0x7352, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:12 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) [ 2030.443789][T12245] could not allocate digest TFM handle sha224-arm64 [ 2030.487390][T12270] [ 2030.489730][T12270] ====================================================== [ 2030.496749][T12270] WARNING: possible circular locking dependency detected [ 2030.503765][T12270] 5.14.0-syzkaller #0 Not tainted [ 2030.508789][T12270] ------------------------------------------------------ [ 2030.515802][T12270] syz-executor.4/12270 is trying to acquire lock: [ 2030.522216][T12270] ffff888050fa5c70 (&sqd->lock){+.+.}-{3:3}, at: __do_sys_io_uring_register+0x10aa/0x2e70 [ 2030.532163][T12270] 05:32:12 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r2, 0x21, 0x2, &(0x7f0000000280), &(0x7f00000002c0)) r3 = syz_io_uring_setup(0x2d08, &(0x7f0000000180)={0x0, 0x9eb0, 0x20, 0x3, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000280), 0x1, 0x40082) io_uring_setup(0x2f53, &(0x7f0000000300)={0x0, 0x1e3, 0x1, 0x3, 0x224, 0x0, r4}) [ 2030.532163][T12270] but task is already holding lock: [ 2030.539525][T12270] ffff8880251080a8 (&ctx->uring_lock){+.+.}-{3:3}, at: __do_sys_io_uring_register+0x2e1/0x2e70 [ 2030.549909][T12270] [ 2030.549909][T12270] which lock already depends on the new lock. [ 2030.549909][T12270] [ 2030.560304][T12270] [ 2030.560304][T12270] the existing dependency chain (in reverse order) is: [ 2030.569315][T12270] [ 2030.569315][T12270] -> #1 (&ctx->uring_lock){+.+.}-{3:3}: [ 2030.577055][T12270] __mutex_lock+0x131/0x12f0 [ 2030.582179][T12270] io_sq_thread+0x65a/0x1370 05:32:12 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000100)={0x400000000000000, 0x1000, 0x1ff, 0x4, 0x1a}) [ 2030.587315][T12270] ret_from_fork+0x1f/0x30 [ 2030.592303][T12270] [ 2030.592303][T12270] -> #0 (&sqd->lock){+.+.}-{3:3}: [ 2030.599515][T12270] __lock_acquire+0x2a07/0x54a0 [ 2030.604908][T12270] lock_acquire+0x1ab/0x510 [ 2030.609942][T12270] __mutex_lock+0x131/0x12f0 [ 2030.615060][T12270] __do_sys_io_uring_register+0x10aa/0x2e70 [ 2030.621487][T12270] do_syscall_64+0x35/0xb0 [ 2030.626441][T12270] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2030.632859][T12270] [ 2030.632859][T12270] other info that might help us debug this: [ 2030.632859][T12270] [ 2030.643073][T12270] Possible unsafe locking scenario: [ 2030.643073][T12270] [ 2030.650503][T12270] CPU0 CPU1 [ 2030.655851][T12270] ---- ---- [ 2030.661196][T12270] lock(&ctx->uring_lock); [ 2030.665689][T12270] lock(&sqd->lock); [ 2030.672179][T12270] lock(&ctx->uring_lock); [ 2030.679188][T12270] lock(&sqd->lock); [ 2030.683155][T12270] [ 2030.683155][T12270] *** DEADLOCK *** [ 2030.683155][T12270] [ 2030.691276][T12270] 1 lock held by syz-executor.4/12270: [ 2030.696718][T12270] #0: ffff8880251080a8 (&ctx->uring_lock){+.+.}-{3:3}, at: __do_sys_io_uring_register+0x2e1/0x2e70 [ 2030.707508][T12270] [ 2030.707508][T12270] stack backtrace: [ 2030.713378][T12270] CPU: 1 PID: 12270 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 2030.721781][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2030.731822][T12270] Call Trace: [ 2030.735098][T12270] dump_stack_lvl+0xcd/0x134 [ 2030.739684][T12270] check_noncircular+0x25f/0x2e0 [ 2030.744613][T12270] ? __x64_sys_ioctl+0xb3/0x200 [ 2030.749453][T12270] ? print_circular_bug+0x1e0/0x1e0 [ 2030.754644][T12270] ? lockdep_lock+0xc6/0x200 [ 2030.759224][T12270] ? call_rcu_zapped+0xb0/0xb0 [ 2030.763980][T12270] __lock_acquire+0x2a07/0x54a0 [ 2030.768831][T12270] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2030.774810][T12270] lock_acquire+0x1ab/0x510 [ 2030.779304][T12270] ? __do_sys_io_uring_register+0x10aa/0x2e70 [ 2030.785368][T12270] ? lock_release+0x720/0x720 [ 2030.790045][T12270] __mutex_lock+0x131/0x12f0 [ 2030.794624][T12270] ? __do_sys_io_uring_register+0x10aa/0x2e70 [ 2030.800682][T12270] ? find_held_lock+0x2d/0x110 [ 2030.805450][T12270] ? __do_sys_io_uring_register+0x10aa/0x2e70 [ 2030.811600][T12270] ? mutex_lock_io_nested+0x1150/0x1150 [ 2030.817147][T12270] __do_sys_io_uring_register+0x10aa/0x2e70 [ 2030.823039][T12270] ? lock_downgrade+0x6e0/0x6e0 [ 2030.827879][T12270] ? kiocb_done+0xb40/0xb40 [ 2030.832383][T12270] ? syscall_enter_from_user_mode+0x21/0x70 [ 2030.838275][T12270] do_syscall_64+0x35/0xb0 [ 2030.842690][T12270] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2030.848578][T12270] RIP: 0033:0x4665f9 [ 2030.852460][T12270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2030.872056][T12270] RSP: 002b:00007f38b555e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 2030.880459][T12270] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 05:32:12 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_NMI(r0, 0xae9a) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) [ 2030.888420][T12270] RDX: 0000000020000380 RSI: 0000000000000013 RDI: 0000000000000003 [ 2030.896380][T12270] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 2030.904338][T12270] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c038 [ 2030.912298][T12270] R13: 0000000000a9fb1f R14: 00007f38b555e300 R15: 0000000000022000 05:32:12 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r1, 0x10000000) 05:32:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:12 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180), 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:12 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 05:32:12 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x7cd2}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r1 = socket(0xf, 0x6, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)) 05:32:12 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) read$ptp(r0, &(0x7f0000000100)=""/35, 0x23) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r1, 0x10000000) 05:32:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:12 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000200)={0x9, 0x772a, [{0x1000, 0x0, 0x2}, {0x5, 0x0, 0xfffffffffffffffa}, {0x2}, {0xfffffffa, 0x0, 0x1ff}, {0x3, 0x0, 0x20}, {0x7fff, 0x0, 0x2}, {0x80000001, 0x0, 0x3}, {0x1, 0x0, 0x4}, {0x8000, 0x0, 0xab9}]}) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) syz_io_uring_setup(0x2b36, &(0x7f0000000100)={0x0, 0x322d, 0x1b, 0x2, 0x243, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 05:32:12 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x10002000) io_uring_enter(0xffffffffffffffff, 0x1ae3, 0xe497, 0x2, &(0x7f0000000000)={[0x4]}, 0x8) 05:32:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:12 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180), 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:12 executing program 0: r0 = syz_io_uring_setup(0x2bdd, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000480)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) r2 = io_uring_setup(0x43a9, &(0x7f0000000100)={0x0, 0x8705, 0x0, 0x1, 0x2fb, 0x0, r1}) io_uring_setup(0x722, &(0x7f0000000180)={0x0, 0x5440, 0x4, 0x1, 0x37c, 0x0, r2}) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000b40)={@host}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000b40)={@my=0x0}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200, 0xff) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r9, 0x4008af14, &(0x7f0000000340)={0x0, 0x7ff}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[r4, r0, r5, r6, r7, r8], 0x6) getsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@sco, {&(0x7f0000000b80)=""/4096, 0x1000}, &(0x7f0000000380), 0xa}, 0xa0) 05:32:12 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0x10000000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x50000, 0x0, [0x401, 0xffff, 0xff, 0x9, 0x853, 0x50, 0x1, 0xe6]}) 05:32:12 executing program 4: r0 = io_uring_setup(0x68c2, &(0x7f0000000180)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:12 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x80010, r0, 0x0) 05:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0xffffffff}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:13 executing program 3: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x18}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0xf5de, 0x23, 0x9]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x82, 0xac, "a1a2a843ee0acb40a992be7ad588b26b331bafb7ee4a52637f3c819b19868a1951d671c9eb7c9e666020054e0ef5e0bf935a2cd338d640afe6a55d1b825fc566b470b723fe7d3ee3ff2d7b44f356ec6ef97cf41aeaa9441f8e995e6e610b9139e5ff282b61129385cdc1d06c2180ec88210ea66528638da8ffab26fb9949"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48004}, 0x4000004) r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf25768400000cfe32ad245ce922b2009d81b3f80b063c00990080ffffff450000000c0058007a00000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0xc001) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) fanotify_init(0x8, 0x8000) 05:32:13 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000000)=""/71, 0x47}, &(0x7f0000000080), 0x1}, 0x20) r1 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) 05:32:13 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180), 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:13 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x8c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:13 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100), 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:13 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:13 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x8e38, 0x0, 0x7ff, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r1, 0x10000000) 05:32:13 executing program 1: r0 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000180)=r0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000140), 0x1) 05:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x3, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x60}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20005850}, 0x4) r2 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0xe410b4111ac047f7, r2, 0x10000000) 05:32:13 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000100df7000fbdbdf25810000212300e017cf81140000000a000600080211000000000004006700000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40001000}, 0x4000000) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000240)={0x7}) r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000580), 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:13 executing program 5: r0 = syz_io_uring_setup(0x7353, &(0x7f0000000000)={0x0, 0x7fd4, 0x1, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:13 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x2000}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x80000001}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0xb, 0x1, 0x6, 0x30, 0x10}, @exit, @ldst={0x2, 0x0, 0x3, 0x1, 0x8, 0xc, 0xfffffffffffffffc}, @generic={0xf9, 0x3, 0x9, 0x7f, 0x7a5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0xffff4b71, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x4, 0x6, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff, r2}) 05:32:13 executing program 1: r0 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000180)=r0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000140), 0x1) 05:32:13 executing program 5: r0 = io_uring_setup(0x5643, &(0x7f0000000200)={0x0, 0x1df2, 0x4, 0x1, 0x203}) io_uring_setup(0x7a4e, &(0x7f0000000280)={0x0, 0x243c, 0x20, 0x3, 0x232, 0x0, r0}) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x6fc5, &(0x7f0000000100)={0x0, 0xd45, 0x10, 0x0, 0x1a3, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1800002, 0x13, r2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r1, 0x10000000) 05:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:13 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) r1 = eventfd(0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r1, 0x1) 05:32:13 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) r2 = syz_open_dev$audion(&(0x7f0000000200), 0x100000001, 0x802) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000240)=r3, 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="040029bd7000fedbdf25323b020008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20044000) 05:32:13 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x9132, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:13 executing program 1: r0 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000180)=r0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000140), 0x1) 05:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x7}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:13 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in=@local}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) 05:32:13 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='%\\}\'{\x00', r1) request_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000002c0)='\x00\x88', r2) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x66, 0x62, 0x38, 0x38, 0x34, 0x32, 0x62, 0x66, 0x62, 0x37, 0x36, 0x35, 0x62, 0x30, 0x36, 0x34]}, &(0x7f0000000080)={0x0, "000ff3419da4e5d772373668c8007dc6a06b82e79bd50a972cff86741818c49ec0f51eb2a6c06ec207d996ac6a1753ba19ece882e552de705b0026034dd1cf7a", 0x33}, 0x48, r1) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:13 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000d, 0x20010, r0, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000380)=""/27, 0x1b}], 0x7) syz_io_uring_setup(0x4301, &(0x7f0000000440)={0x0, 0xdc55, 0x0, 0x2, 0x23, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r3 = io_uring_setup(0x5b8e, &(0x7f0000000980)={0x0, 0x1c22, 0x20, 0x0, 0xc2, 0x0, r0}) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f0000000640)={0x0, 0x1, r1}) r6 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000940)=r6) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000b40)={@host}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x6, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0x2, 0x3, 0x7, 0x30, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x2, 0x2, 0x6, 0x6, 0x3, 0x1748cdac24bf864e, 0xffffffffffffffff}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0xd2, &(0x7f0000000700)=""/210, 0x40f00, 0x1, '\x00', 0x0, 0x8, r1, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)={0xffffffffffffffff}, 0x4) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000900)=[r5, r7, r8, r9], 0x4) io_uring_setup(0x4d3, &(0x7f00000005c0)={0x0, 0x3f8, 0x20, 0x1, 0x393, 0x0, r3}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:13 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) socket$nl_generic(0x10, 0x3, 0x10) 05:32:13 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:13 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x8000000) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000000)) 05:32:13 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000200)={0x0, r0}) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r1, 0x10000000) r2 = io_uring_setup(0x2c4a, &(0x7f0000000240)={0x0, 0x58ef, 0x8, 0x2, 0xad, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa06de13fa99ea0db, 0x12, r0, 0x8000000) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x10000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000300)=r3, 0x1) r4 = syz_io_uring_setup(0x51e7, &(0x7f0000000100)={0x0, 0xb16f, 0x20, 0x0, 0x168, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0xc0010, r4, 0x10000000) 05:32:13 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:13 executing program 0: io_uring_setup(0x40ca, &(0x7f0000000100)={0x0, 0x212a, 0x2, 0x2, 0x2ec}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000180)={{0xf000, 0x1, 0xb, 0xf7, 0x9, 0x8, 0x24, 0x3f, 0x4, 0x20, 0x1, 0x4}, {0x4, 0xf000, 0x8, 0x5, 0x52, 0x1, 0x65, 0x6, 0x7f, 0x81, 0x79, 0x2}, {0x4, 0xf000, 0xf, 0x3, 0x0, 0xab, 0x6, 0xaf, 0x5c, 0x80, 0x2, 0x1}, {0xf000, 0x5000, 0x9, 0x8, 0xb4, 0x1f, 0x5, 0x19, 0xe4, 0x20, 0x7f, 0x1}, {0x10000, 0xd000, 0xe, 0x7, 0xe7, 0x3f, 0xfc, 0x7, 0x7f, 0xff, 0x3, 0x8f}, {0x2, 0x4, 0xa, 0x0, 0x80, 0x74, 0xe7, 0xff, 0x2, 0x40, 0x80, 0x40}, {0x4000, 0x0, 0xe, 0x8, 0x4, 0x7, 0xff, 0x2, 0x8c, 0xff, 0x20, 0x80}, {0x100000, 0x2, 0xb, 0x3, 0x1b, 0x80, 0x37, 0x2, 0x8, 0xc0, 0x9, 0x3}, {0x15000, 0x7}, {0x5000, 0xfffe}, 0x60000018, 0x0, 0x6000, 0x0, 0xa, 0x100, 0x4, [0xd2, 0x3, 0x2, 0x5]}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x10002000) 05:32:14 executing program 5: r0 = syz_io_uring_setup(0x4007351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@host}) r2 = eventfd(0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000940)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r7}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000a80)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000a40), r7, 0x0, 0x2, 0x4}}, 0x20) r8 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000a00)={0x0, r8}) r9 = eventfd(0x20) io_submit(0x0, 0x7, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f00000001c0)="b37724c2d1b164faa615d1a34fe335311da8429458055ec3bf88403b36c57cb90396d6e64148d3f706e635a68e160d14e905e4b5e087075b73a14cabfc3b69b880926fab64e72ab75fbe86a0cb10023aca8fd69f7cd1577505afd114b74eb1aeb080503171e49bc08f2ad30b888370bd097e2c8107bba5f29770cf14813106ed82b8465884916924eff65df1de6407d9890e07", 0x93, 0x5, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x1000, r3, &(0x7f0000000300)="34c9f8490ec93a010755b3db85720a3ca779d42a49975f7beb2dea12936b5a43b058d881340a92fb0b7372e266b1468eba9af236433962cffd160f10f33ceb83cb80a1686d6b6074d9fceee016f314f00921028ee27367aceafed5984793cafd3838560ede1d8822904e932cdabb8476427198e3d1bdbd411b27b2499df79191507ceaefe8212c69315ef5d7d61a79e7fa1bb33f6683ea36471a708243521021ca40fc7468d868980bcfda0c9fe9c5d4f4b4a061f4296079a6b9d7f58b4fb73e8b457a2e17c273b6b95caf5717f7d039be455b52525330e21abcddf8afe1dca4367578f7a7", 0xe5, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, &(0x7f0000000440)="ac35afbfe3173395616f5cff5f46c01ccb473890899f8a1be074370eb9bef513c7e052d87293aad842a4adadce4e9c340e18b762912d9bccdaff9ba8d565979fccf63eb5280a3f8ed9cb6fe736c3e05dd36e7c5651529802581eb12b3cd1ef213379efbde6ef06cb4c2778fccd7554213bd1afe03c871891669a3c21fede8f884f5e82c5fbee2544c7a0acc19986270f47309827ba50aa", 0x97, 0x2, 0x0, 0x1, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000540)="351db26bdff3be854bd3ecb6dd1a481b849bd440b426eb59daabc03623f318c8bb5f7fa90a800b27eaa35b0c8e1986d4917e387a5946f3e6c8e87e283ca22f6d2ac2dd9abcce151300f7e0dccf1bb5bbbc42eb80d413c3941e4c3172ffae40eede941fabacf42e443ec794f1e7963dc6df984ddbcf2548a90e3993e50a6dbf8e0a968c1baca9fa26d26ab3ca676741e048a863fa41275729cdc33c538107f63e4dff38935dd8750e723e642caa7178db840c1cd33fb6c41f04f9cbceb16d92c8750a68fdcf08a665af04ffb4b1edc79cb04b27888439", 0xd6, 0x9, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x94, r0, &(0x7f0000000680)="10b270b9b59999abb0a7e260d4bca0100aaa56c2ac4885762a1adcf54843f841545b07af49e6ff8846f70fc524839ba5ea70a31318acc4f1e5883b754af7c0dd73c3e51ed70f4d5af39f3b62dcc9d37e89a4477f8d50d2b01372da8b74eafd4c837b7d2a23df05691493671a75358f5730f6", 0x72, 0x7ff, 0x0, 0x2, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000740)="8496fde910bf94bc03432610581739c9e224e9e08e6a5a7a2cefb3c94ec89ce8239cff0aa56f5a9fc9cb863b9ec03a76e98e2a0fd96debfac6ea095a5f45769a594c4734df27c088c324ce0eb40f3b00f194911e39a11d76daf6d64157ea5feb2409f8214030463c5aae7256b7f3e59741ccfc88e4b824d913b4430c4baae307c0460f1d14030d2ed08fae53c52633706b2beae2ff5f802adfaae66663128d2fa135adb60d4389a66890dedd97390bf0aab2cb71", 0xb4, 0xbb, 0x0, 0x2, r9}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0xff, r0, &(0x7f0000000840)="f0fdb89b48aba5565db36e4dc3e1003306cddd9af8690a21f28e9c68ba72f7c46041820c5deb13ae9a9750d78a6534f9e0c8cbde7bab240e3bb6a31c7d879964b4f077cc0c1554cde98de9593742050a1f15126f564b9b9db0e5f7834cf47b25247d578caf5557d036785afffd3b8aa29bc955af171cce2106c4d6088044397a43d98ff644b4c6658e07aeeeef4c8bee7386b9b32bf86e9b360c4e0690dd481bca09ec3c3e8e1382d37918bf21bd40bcfbdc35575687889e2d360c8577fa5021fdffc9bb2b11cf59c4fb76f4e8b6bf4b2e0d65cb40905ec3275364154e84e3fefe273d", 0xe3, 0x1, 0x0, 0x3}]) accept4(0xffffffffffffffff, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000009c0)=0xffffffffffffffff, 0x4) 05:32:14 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:14 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = io_uring_setup(0x2369, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x3c9, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) 05:32:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:14 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x3b8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x2d82, &(0x7f0000000100)={0x0, 0x554e, 0x1, 0x3, 0x314, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:14 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000100)={0x0, 0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:14 executing program 1: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:14 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:14 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x2b6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:14 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x10000000) r1 = syz_io_uring_setup(0x2222, &(0x7f0000000100)={0x0, 0x8f32, 0x20, 0x1, 0xe4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x62c0, &(0x7f0000000200)={0x0, 0x8f4d, 0x8, 0x1, 0x3c, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 05:32:14 executing program 1: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:14 executing program 3: mq_unlink(&(0x7f0000000100)='Z(\'+&\x00') r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:14 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x810, r0, 0x10002000) 05:32:14 executing program 4: r0 = io_uring_setup(0x236a, &(0x7f0000000180)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) syz_io_uring_setup(0x3ba2, &(0x7f0000000000)={0x0, 0xa238, 0x4, 0x1, 0x1f5, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:32:14 executing program 3: r0 = syz_io_uring_setup(0x1007351, &(0x7f0000000200)={0x0, 0x9621, 0x1, 0x0, 0x243}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = syz_io_uring_setup(0x727, &(0x7f0000000100)={0x0, 0x435c, 0x6836e826262701fe, 0x0, 0x314, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000040)={0xfffff801, 0x0, &(0x7f0000000000)=[r2, r3]}, 0x2) 05:32:14 executing program 1: r0 = syz_io_uring_setup(0x7351, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:14 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7ffffffd}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x700}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:14 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) select(0x40, &(0x7f0000000100)={0x2, 0x1000, 0xff, 0x4, 0x10000, 0x3, 0xcc, 0x7}, &(0x7f0000000140)={0x9, 0x4, 0x9b85, 0x1f, 0xfffffffffffffff7, 0x7, 0x7, 0x2}, &(0x7f0000000180)={0x2, 0x80000001, 0x10000, 0x8, 0xffffffff, 0xfb39, 0xd60, 0x1}, &(0x7f00000001c0)={0x0, 0x2710}) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, r2, 0x0, 0x0, r3, r4], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x6}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:14 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0], 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x10002000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000240)={&(0x7f0000000180)=[r1, 0x0], &(0x7f0000000200)=[0x0, r2, 0x0, 0x0], 0xfffffffeffffffff, 0x2}) 05:32:14 executing program 3: r0 = io_uring_setup(0xe1b, &(0x7f0000000500)={0x0, 0xef75, 0x0, 0xe6f9, 0xc4}) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x26a, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x19de, &(0x7f0000000180)={0x0, 0x4be4, 0x2, 0x3, 0x2d7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) getgid() syz_io_uring_setup(0x1514, &(0x7f0000000280)={0x0, 0x9004, 0x0, 0x0, 0x1c1, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000580), &(0x7f0000000340)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r1, 0x10000000) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'batadv_slave_1\x00', {0x4}, 0x180}) r4 = io_uring_setup(0x639a, &(0x7f0000000380)={0x0, 0xa968, 0x2, 0x1, 0x35d, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/29, 0x1d}], 0x1) r5 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, 0x0) connect$rds(r5, &(0x7f0000000480)={0x2, 0x4, @empty}, 0x10) 05:32:14 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:14 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000000)=""/118, 0x76}], 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r1 = syz_io_uring_setup(0x2160, &(0x7f00000000c0)={0x0, 0x2462, 0x0, 0x2, 0x324}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000001200)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, r1, 0x10000000) 05:32:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe00}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:14 executing program 5: r0 = syz_io_uring_setup(0x34d1, &(0x7f0000000000)={0x0, 0xd49b, 0x2, 0x800}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0x81, &(0x7f0000000180)="80c3664e07f3c75d343e92a51550dd3a84d9a22641dc48f3f560232762edfe53ce90e6919d6167029d3b6815af94a6073e89f374cca4578a37b0bed225d0f6c0ceadc9dada30dd3d084c955c1ad0244d7160485590fb7069fa80c912e062301394b50fc95669d0f364a15560ce0f79e68f8949132fff10af0b9c97774f0f0de423314167ecb77d3462e685b7821e8473d21f932b8a28", 0x96) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000280)={@my=0x0}) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[r0, r1, 0xffffffffffffffff, r3, r0]}, 0x2) r4 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r4, 0x10000000) 05:32:14 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0xc0800) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_open_dev$dri(&(0x7f0000000180), 0x7fffffff, 0x42) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000100)={'\x00', 0x6, 0x2, 0x6c1b}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000002880)) r3 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x10002000) 05:32:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x3561}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:14 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:14 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x22, 0x1, 0x15d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080), 0x4) 05:32:14 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:14 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x469c, &(0x7f0000000100)={0x0, 0xa325, 0x1, 0x0, 0x38d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:14 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x2, 0x2000) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000240)={0x1, 0x1ff}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x810, r0, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000100)={0x5, 0x0, [{0x0, 0x8e, 0x1, 0xffffffff, 0x0, 0x1, 0x652}, {0x4, 0x681, 0x4, 0x8, 0xf0, 0x1, 0xec80}, {0x80000019, 0x400, 0x4, 0x0, 0x5, 0xffff0001, 0x81}, {0x80000008, 0x10001, 0x4, 0x8000, 0x580, 0x7c, 0x9}, {0x2, 0x1d, 0x5, 0x2, 0x7fffffff, 0x2, 0x5}]}) r2 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x10002000) 05:32:14 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:14 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100), 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:15 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x20800) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) 05:32:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6135}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:15 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:15 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_usbip_server_init(0x3) write$usbip_server(r1, &(0x7f0000000100)=@ret_unlink={{0x4, 0x5, 0x0, 0x1, 0x4}, {0x8779}}, 0x30) 05:32:15 executing program 0: ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000001c0)={0x9, 0x1}) r0 = syz_open_dev$audion(&(0x7f0000000100), 0x2, 0x40) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472cc1f17db3d60a9796c"], 0xf) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x2, r1}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140)=0x16f2, 0x4) r2 = syz_io_uring_setup(0x7353, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x10002000) 05:32:15 executing program 3: r0 = syz_io_uring_setup(0x7b51, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) io_setup(0x0, &(0x7f0000000880)) r2 = syz_io_uring_setup(0x6096, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/177, 0xb1}, {0x0}], 0x3) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000b40)={@host}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000100)='/dev/audio#\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x10000000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000b40)={@host}) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f00000003c0)={0x1}) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000440)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xd2401, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) 05:32:15 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0xfd72, 0x10, 0x0, 0x3b2, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'ip6gre0\x00', {0x3}, 0x20}) 05:32:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:15 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:15 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) syz_open_dev$audion(&(0x7f0000000100), 0x2, 0x22000) [ 2033.634747][T12542] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 2033.641286][T12542] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2033.684917][T12542] vhci_hcd vhci_hcd.0: Device attached [ 2033.710356][T12544] vhci_hcd: connection closed [ 2033.710536][T11411] vhci_hcd: stop threads [ 2033.720052][T11411] vhci_hcd: release socket 05:32:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:15 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)={0x0, 0x0, 0x4}) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@xdp, &(0x7f0000000200)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x2, 0x5, 0x0, {0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x6, 0xff}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200448f0}, 0xc805) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x4, 0x0, [{0x9a3, 0x0, 0x20}, {0x2b1, 0x0, 0x7}, {0x0, 0x0, 0xffff}, {0x206, 0x0, 0x4}]}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0xb2) [ 2033.736923][T11411] vhci_hcd: disconnect device 05:32:15 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = eventfd(0xddcd) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r2, 0x1) 05:32:15 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) r1 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:15 executing program 0: ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000100)={{0xc4d9, 0x80000001}, {0x80000001, 0x1}, 0x8000}) r0 = syz_io_uring_setup(0x7350, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:15 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_setup(0x8c3, &(0x7f0000000100)={0x0, 0x26, 0x8, 0x0, 0xcb, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:15 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:15 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_io_uring_setup(0x3ad, &(0x7f0000000100)={0x0, 0x4803, 0x1, 0x2, 0x105, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 05:32:15 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) r3 = io_uring_setup(0x2366, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000380), 0x2) 05:32:15 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) getegid() clock_gettime(0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:15 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000100)={0x0, 0x200000, 0x1, 0x0, 0x40000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:16 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0xfffffffd, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x1a67, &(0x7f0000000140)={0x0, 0xb778, 0x0, 0x2, 0x286, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 05:32:16 executing program 4: io_setup(0x3, &(0x7f0000000880)=0x0) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_cancel(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff38, 0xfffffffffffffffc, 0x0, 0x0, r1}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0x0) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="ba58b18b97238625c4c4e9f442d1711a2cfdf0b73a53e26b39f31d21612cf45ed5c3f94d49bd97dc4bce0748b4a1f8f86e97b0ed810def98c3733767c5250266f16496a27897517e64dec340d2f598a2f8f116f3d1ca2399034d5ad169ad903091d1f90c313e5512748e848f359aada6225b07796cb86725ad9d256af7b91d8bc86556811a0a780938bc433f7574c5159cc8d82c514ad24c23d34f01f3c982d5a969355d2be827aa6c1ca3538d2415b594652250adb00bf48250fa64f2a9", 0xbe, 0x3d7ac952, 0x0, 0x2, r2}, &(0x7f0000000200)) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x2}) r4 = io_uring_setup(0x25c, &(0x7f0000000080)={0x0, 0x35ca}) io_uring_register$IORING_REGISTER_FILES(r4, 0x13, &(0x7f0000000380), 0x2) 05:32:16 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:16 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0xb22d, 0x8, 0x4, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r1 = io_uring_setup(0x3d88, &(0x7f0000000540)={0x0, 0xc905, 0x4, 0x3, 0x3e7, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x10000000) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000000c0)=0x80000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x6, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x100000000, 0x7, 0x2, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[r2, r3, r4, r5, r6, 0x0], 0x6}) 05:32:16 executing program 0: r0 = syz_io_uring_setup(0x4fd1, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000240), 0x8, 0x101000) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000280)='+[\\\\!-,\x00') write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000d40)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x65, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, {0xa, 0x4e20, 0x3, @empty, 0x3}, r3}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x9, @empty, 0xfffffff7}, r3}}, 0x30) 05:32:16 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) 05:32:16 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:16 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x200000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000200)={{0x4, 0xf6ae}, 0x1}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000001c0)=r2, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)=[r0, r0, r0, r1]}, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:16 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_io_uring_setup(0x3ea, &(0x7f0000000040)={0x0, 0x5614, 0x28, 0x3, 0x2d7, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000380), 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x8}, {0xff, 0x6}, 0x200}) 05:32:16 executing program 4: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = io_uring_setup(0x6be9, &(0x7f0000000000)={0x0, 0x6845, 0x0, 0x3, 0x305, 0x0, r0}) r2 = io_uring_setup(0x2361, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x4, 0x0, r1}) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x5, 0x200000) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000080)=""/126, &(0x7f0000000100)=0x7e) io_uring_enter(r2, 0x2a2d, 0x543e, 0x1, &(0x7f0000000200)={[0x2]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000380), 0x2) socket$inet6(0xa, 0x1, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000240)={0x2, r3}) 05:32:16 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x29}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x80) r3 = syz_open_dev$audion(&(0x7f00000001c0), 0x3ff, 0x480) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000200)={r2, r3}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) 05:32:16 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:16 executing program 0: r0 = syz_io_uring_setup(0x734f, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x9, 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000140)={0x0, 0x3}) 05:32:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x7000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:16 executing program 3: r0 = syz_io_uring_setup(0x3062, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) 05:32:16 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 05:32:16 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:16 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000100)={0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x10000000) 05:32:16 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000100)={0xffffffff, 0xff, 0xb17}) 05:32:16 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000b40)={@host}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000840)={0x6, 0x0, &(0x7f0000000800)=[r2, r0]}, 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000380), 0x2) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x200, 0xc080) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f00000007c0)={&(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/89, 0x59}], 0x7, 0x0, 0x0, 0x80}, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000040), 0x4) write$vhost_msg_v2(r3, &(0x7f0000000880)={0x2, 0x0, {&(0x7f0000000080)=""/253, 0xfd, &(0x7f0000000200)=""/28, 0x3, 0x3}}, 0x48) 05:32:16 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7, 0x1, 0x2, 0x8, 0x3}]}) r1 = syz_io_uring_setup(0x7351, &(0x7f0000000000)={0x0, 0xb20f, 0x0, 0x0, 0x22a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x6c91, &(0x7f00000001c0)={0x0, 0xa316, 0x1, 0x0, 0x1cf}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x40010, r2, 0x0) 05:32:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:16 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:16 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e21, @broadcast}}}, 0x90) 05:32:16 executing program 3: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r0, 0x10000000) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000240), 0xc37, 0x80) io_uring_setup(0x1681, &(0x7f0000000280)={0x0, 0x8342, 0x1, 0x1, 0x376, 0x0, r1}) r2 = syz_open_dev$audion(&(0x7f00000001c0), 0x80000001, 0x40000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000008c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000940)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r5}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e1d, 0x6, @mcast2, 0x3}, r5}}, 0x30) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x20010, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000100)) 05:32:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:16 executing program 4: r0 = syz_io_uring_setup(0x3ebb, &(0x7f0000000000)={0x0, 0xd0d9, 0x2, 0x3, 0x165}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x0) r1 = io_uring_setup(0x2368, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000380), 0x2) r2 = syz_io_uring_setup(0x7cf8, &(0x7f0000000100)={0x0, 0x4a0b, 0x1, 0x3, 0x362, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10010, r2, 0x0) 05:32:16 executing program 1: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) 05:32:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x61350000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:16 executing program 0: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) write$usbip_server(0xffffffffffffffff, &(0x7f0000000100)=@ret_unlink={{0x4, 0x9, 0x0, 0x1, 0x20}, {0x9}}, 0x30) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10002000) 05:32:16 executing program 4: r0 = io_uring_setup(0x2368, &(0x7f0000000180)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@host}) r2 = io_uring_setup(0x614d, &(0x7f0000000080)={0x0, 0x2ab5, 0x4, 0x1, 0x3f, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000040)=[r0, r2, r0, r0, r1], 0x5) 05:32:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0xfffffffffffffe52, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_AUTO_OPEN_PLINKS, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_PEER_LINKS, @NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_PLINK_TIMEOUT]}, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_IFINDEX, @NL80211_ATTR_WDEV, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_HT_OPMODE]}, @NL80211_ATTR_WDEV]}, 0x28}}, 0x0) 05:32:16 executing program 5: r0 = syz_io_uring_setup(0x7351, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x34, 0x282080) write$usbip_server(r1, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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