r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0xc400, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x2e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2a0426bd7000fbdbdf25740000000c0099000000000073000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040894)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x5}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r4, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x20000040)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="341e7a397ca9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a78a2de7c713"}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x4040894)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x0)

08:16:52 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000026bd7000ffdbf16a45bd302a6d220300", @ANYRES32=0x0, @ANYBLOB="0c009900050000003a000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000026bd7000ffdbf16a45bd302a6d220300", @ANYRES32=0x0, @ANYBLOB="0c009900050000003a000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')

08:16:52 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x2}, 0x8)

08:16:52 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)

08:16:52 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x400}, 0x8)
socketpair(0x2a, 0x3, 0x800, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r1, 0xd29, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1d067117a64a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x1f}, 0xfffffe37)

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000026bd7000ffdbf16a45bd302a6d220300", @ANYRES32=0x0, @ANYBLOB="0c009900050000003a000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80)

08:16:52 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0xc400, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x2e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2a0426bd7000fbdbdf25740000000c0099000000000073000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040894)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x5}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r4, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x20000040)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="341e7a397ca9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a78a2de7c713"}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x4040894)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x0)

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1f}}}}, [""]}, 0x20}}, 0x4040041)

08:16:52 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:52 executing program 4:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
pselect6(0x40, &(0x7f0000000000)={0x5, 0x2, 0x2, 0x3, 0x74c, 0xffff, 0x4468, 0x4}, &(0x7f0000000080)={0x2, 0x8, 0x9, 0x6, 0x5, 0x8001, 0x5, 0x1}, &(0x7f00000000c0)={0x41, 0x10001, 0xffff, 0x3, 0x3, 0x8, 0x10000, 0x3f}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40, 0x6, 0x0, 0x3, 0xfffffffffffffff9, 0x4, 0x6b}, &(0x7f0000000200)={0x80000001, 0x1f, 0x5, 0x6, 0xf6, 0x80000003, 0x1208, 0x4}, &(0x7f0000000240)={0x0, 0xff, 0x9, 0x1, 0x1f, 0x1, 0xbb2, 0x9}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0xc400, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x2e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2a0426bd7000fbdbdf25740000000c0099000000000073000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040894)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x5}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r4, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x20000040)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="341e7a397ca9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a78a2de7c713"}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x4040894)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x0)

08:16:52 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x7f}, 0x8)
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x7fffffff)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x6}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x7}, 0x8)

08:16:52 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:52 executing program 3:
socket(0x2, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:16:52 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
prctl$PR_GET_TSC(0x19, &(0x7f0000000000))

08:16:52 executing program 4:
r0 = socket(0x2, 0xa, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)

08:16:52 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:52 executing program 1:
pipe(&(0x7f0000000580)={<r0=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @empty}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x4c}}, 0x80)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3ff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x6880)

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xfffffff9}, 0x8)

08:16:52 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:52 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="14000800687372300000000000000000000000000600"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 4:
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x0, 0x8701, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}})

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839f", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000200)={0x0, 0x6, 0x80000000, 0x7, 0x1, 0x7})
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
keyctl$session_to_parent(0x12)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe0d, 0x36}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "833193fd77e05eea91e5aaa4b8"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "08d515fcf5"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xc, 0x4, "6f6f9586fa82a9e6"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5b6be368b33fd1adb08cb0de96"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a1e733dcd5c116038727d56a45"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x48000}, 0x80)
r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1, 0x420002)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r3, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001)

08:16:52 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x9, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)

08:16:52 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:52 executing program 3:
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="dd3726bd7000fbdbdf275100009d35000301000000000000000211000000000005008a000200000005008a000000000005208a00020000000a00060008021100000000000a00060008021100000000000a0006000802110000010000"], 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x801)
socketpair(0x29, 0xa, 0x12c6, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40e1}, 0x24088804)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1d8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

08:16:52 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x0, 0x3}, {0x9, 0x1}, {0x6, 0x5}, {0x9, 0x2}, {0x80, 0x4}, {0xfa, 0x6}, {0x20, 0x6}, {0x30, 0x7}, {0x5, 0x6}, {0xe5, 0x21}], "61eee928c17400fd"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x0, 0x2}, {0x47, 0x3}, {0x20, 0x6}, {0x1, 0x7}, {0x3f, 0x7}, {0x6, 0x2}, {0x1f, 0x7}, {0x8, 0x1}, {0x7, 0x1}, {0xdc, 0x4}, {0x2, 0x3}, {0xf7, 0x6}, {0x3f, 0x7}, {0xc0, 0x2}, {0x69, 0x2}, {0x0, 0x7}, {0x4}, {0x40, 0x1}, {0x3}, {0x1, 0x6}], "8e5995ae4fc43c64"}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

08:16:52 executing program 1:
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5}, @NL80211_ATTR_PMK={0x14, 0xfe, "cd462f3d7205c6596c784ff7ace4751d"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="79e55d9c5c04"}, @NL80211_ATTR_PMK={0x14, 0xfe, "39c57d96f91e3352c500c5cd2e40aa49"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000ba8005b1b9f34300"/39, @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf25010000000800110001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'ipvlan1\x00', @ifru_flags})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839f", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:52 executing program 1:
rt_sigprocmask(0x0, &(0x7f0000000000)={[0x4]}, &(0x7f0000000040), 0xffffff2a)

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839f", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:16:52 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0x8)

08:16:52 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0x5f)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x88040)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c0, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x1a3, 0xf, [@measure_req={0x26, 0xcd, {0xff, 0x1, 0x0, "d29486bed2b620bd8f0a65dba6ff0f384b0eb9e50d0be14aafc457d6f23cc7a926905124ae7eb2c68cd97cbca9d4b39ead4f71b0618a5f0a24607c4a13282150c841ffba0f0b741941e468dc0212859f780f002940de13608f3171905cd3d361f3c86c05f9ece3835e2ea9d44758ab3cac15d6b35b315db46d5fdca3b14f72e824b84b357351210088d11a59812e1481f94d10605e213c838c6349d7dd01370a3e27544494c7f792b31651226c997d8e8ae46d10e10c91863566579bd55cc09caa9e5e07f82ba6c9069a"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0xb1, 0xff}}, @cf={0x4, 0x6, {0x4, 0x4, 0x3, 0x8000}}, @ibss={0x6, 0x2, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xb4, {0x40, 0xa, [@ext={{}, @broadcast, 0x75, @device_a, 0x22}, @ext={{}, @broadcast, 0xfffffffb, @device_a, 0x7}, @ext={{}, @device_b, 0xfffffffb, @broadcast, 0x33}, @ext={{}, @broadcast, 0x1b52, @broadcast, 0x28}, @not_ext={{}, @device_a, 0x8, "", 0x3a}, @not_ext={{}, @broadcast, 0x20, "", 0xc}, @ext={{}, @device_a, 0x0, @broadcast, 0x3d}, @ext={{}, @device_b, 0x887, @device_b, 0x7}, @ext={{}, @device_b, 0x6, @device_a, 0x19}, @ext={{}, @device_a, 0x2, @device_a, 0x3e}]}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10}, 0x8002)

08:16:52 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:52 executing program 0:
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8)

08:16:52 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)

08:16:52 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 4:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:52 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:52 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x3}, 0xfffffffffffffe3d)
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f00000000c0)=0x200)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x1f, 0xf, 0x7fff, 0xc, 0xa, 0xfff, &(0x7f0000000000)="f9de55dbe29b2caa5b27"})

08:16:52 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x6}, 0x8)

08:16:52 executing program 3:
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

08:16:53 executing program 4:
r0 = socket(0x2, 0xa, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x0, 0x8701, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}})

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0xfffffffffffffe08)

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, 0x0, 0x0)

08:16:53 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x2}, 0x8)

08:16:53 executing program 4:
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:16:53 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, 0x0, 0x0)

08:16:53 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x1, 0x0, 0x1, 0x5, 0xfd, "8b0121adcb60ca9e6b6e73781f9142dfde5e87388dfb40dab4413d11de97f9453131cd64ba0562ffb93578290ed7186b68cd0746494d0d461f4237f2ae958b", 0x33}, 0x60)

08:16:53 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x62, <r0=>0x0}, 0x8)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000000c0)=0x8, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd00000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 4:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 3:
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, 0x0, 0x0)

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd00000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 4:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd00000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x4, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8a1}, 0x5)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x741d}, 0x8)

08:16:53 executing program 3:
r0 = socket(0x2, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x0, 0x8701, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}})

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd00000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 1:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00ffdbdf2500000000000000000000080000000053442c47646660fa048618c37302b5c71918654eb61ec558fad8d44d8116a5ddd5b066a2d9e602399a24ee8aeafdd02ae232a2a89010290fe7d2982b8d094ac6", @ANYRES32=0x0, @ANYBLOB="0a00e0fff3ffeaff0800f3ff08000b00476c457908000b000200000008000b000500000008000b000800000008000b008700000008000b00f5630000"], 0x54}}, 0x10000001)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

08:16:53 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
socketpair(0x3, 0x2, 0x9, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x40}, 0x1, 0x0, 0x0, 0x39d1dfe86fb3fa55}, 0x2000d804)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000003ca2e6337fa0effd78b496cda95c7f42ac8a6117fcf237c3492bd9d6665003e719d3404f398c408cbb4e8d4859dd6df40f953019bd572dd03c28073a414bad548ac72d5243056df61fcb9197df765b01a2bdba29b4b7ec715d07582a0ca260958f16472d4342513f7bd267a72bd8e18b69720da525fcdd4b4c6f095fbc0faa99292d1faa1143c0307dc10cde886a20a16117ea3c774d7dfe1dedab7a002f15331e33edc10918e2ad55d3b61dc6bcbce8a7ea8c9f7b944edb1fec4fd5d792ba79b1c26ead9a9aab63fa68bba0dffb27f9de2e16b286168e97988881c491861615180e8488608c", @ANYRES16=r1, @ANYBLOB="000029bd7000fddbdf25440000000c009900000000000b00000004000801080022014e0100000800270001000000050019010f000000080027000300000048005a804400018023000100050c016c09300b306c6c481b0c126c04120b246c0c1206180b0904021202060005000400000000001400030000000100940d00020700be00ffff010008000d00b5000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x2040)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 4:
r0 = socket(0x2, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x0, 0x8701, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}})

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0xfffffffffffffdc0)

08:16:53 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
accept$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000100)=0x60)

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

08:16:53 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x40}, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

08:16:53 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8}, 0xfffffffffffffec9)
getuid()
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7}, 0x8)

08:16:53 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0x5f)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)
syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2)

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, 0x0}, 0x0)

08:16:53 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8}, 0xfffffffffffffec9)
getuid()
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7}, 0x8)

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x3}, 0x8)
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x5}, 0x8)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0x4)

08:16:53 executing program 0:
socketpair(0x1e, 0x6, 0x800, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0x5, 0x4)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x448, 0x3f3, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x4, [0x44a3d238, 0x5, 0x9, 0x54bd, 0x3, 0x3, 0xff, 0xb16, 0x22, 0x8001, 0x4, 0x3, 0x10000, 0xd0, 0x401, 0x4, 0x1, 0xa56, 0x800, 0x7, 0x1, 0xcf8c, 0x40, 0x8, 0x9, 0x80000000, 0x3f, 0x1, 0xda2, 0xbc, 0x38000, 0x8000, 0xffff, 0x1, 0xffffffff, 0x1ff, 0x85, 0x3, 0x4, 0x0, 0x3ff, 0x80000001, 0x74, 0x80000001, 0x1, 0x8, 0x20, 0x0, 0x3, 0x0, 0x7ff, 0xc4, 0x354, 0x10001, 0xf0, 0x3, 0xad, 0x9, 0xff, 0x20, 0xe, 0x20, 0x6, 0xff], [0x200, 0x79, 0x1, 0x7d0, 0xfff, 0x4, 0x0, 0x7, 0x8, 0x73, 0x4, 0x5, 0x9, 0x4, 0x4, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x1ff, 0x0, 0x1, 0xf780, 0x1200, 0x0, 0x1, 0x0, 0x1, 0x40, 0x1, 0x0, 0x16, 0x5, 0x0, 0x0, 0xffffff7f, 0x1000, 0x6, 0x5, 0xffffff8f, 0x3, 0x5, 0x3a6, 0x5, 0x4, 0x2, 0x7, 0xffff0000, 0xfffffffb, 0x6, 0xff, 0x5, 0x8, 0x332db59e, 0x10, 0x3, 0x1ff, 0xf1d, 0x6, 0x7ff, 0x5, 0x2, 0x9], [0x800, 0x7, 0x3, 0x3, 0x7, 0x6, 0x8, 0x4, 0x5f0a, 0x20, 0xdf9a, 0x0, 0x800, 0x4e, 0x48, 0x7, 0x6, 0x0, 0x10001, 0xda, 0x4, 0x0, 0x0, 0x1bd, 0xffffffff, 0x0, 0x6a, 0x1, 0x5, 0x2, 0x8, 0x195, 0x0, 0x2, 0x3, 0x5, 0xa16, 0x8001, 0x80, 0x401, 0x0, 0xffffffff, 0x4, 0x100, 0x4, 0xfff, 0x3, 0xfb, 0xfffff57e, 0x2, 0x5, 0x1f, 0x200, 0x5, 0x0, 0x8, 0x2, 0x4d3, 0x3, 0x6, 0x40, 0xdb2, 0x3000, 0x800], [0x974, 0x8, 0x5, 0x1, 0x1d8, 0x4, 0x2, 0x6, 0x80000000, 0x20, 0x747d4e67, 0x7fff, 0x100, 0x4c9, 0xffffffff, 0x2bed, 0x7, 0x10001, 0x1, 0x8, 0x3, 0x9, 0x241, 0x8001, 0x6, 0x2, 0x80000001, 0x5, 0xffff, 0xad, 0x3, 0x2, 0x8, 0x8, 0x0, 0x8, 0x0, 0x3ff, 0x2, 0x7fffffff, 0x7fff, 0x1f, 0x80000001, 0x1b, 0x2, 0x9, 0x0, 0xfe00000, 0x3, 0xfffffc00, 0x4, 0x8b76, 0x8, 0x6, 0x2, 0x6, 0x7, 0x9, 0x46e, 0x1, 0x2, 0x80000001, 0x2, 0x10001], 0x28, ['^{&]\\,\xff,{\x00', '/dev/vcsa#\x00', '\xfd\x00', 'wlan0\x00', '/dev/vcsa#\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x6c, 0x1}, {0x12}, {0x60, 0x1}, {0x18}, {0x24}, {0x3}, {0x24}, {0x18, 0x1}, {0x48, 0x1}, {0x9, 0x1}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_MESH_SETUP={0x48, 0x70, [@NL80211_MESH_SETUP_IE={0x44, 0x3, "a32fbdddbed034887d9cfd1fa327d4517124d65d1cdfd54f7025757a01366dfd21fa4ba5f3bbf0a9878d23bd5727a89cb897b43eed1ecd12d6902ca57862cad4"}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3f}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xa10f}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x68}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffff7f}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x24004000)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000140)={r6})

08:16:53 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8}, 0xfffffffffffffec9)
getuid()
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7}, 0x8)

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, 0x0}, 0x0)

08:16:53 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0x5f)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)

08:16:53 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8}, 0xfffffffffffffec9)
getuid()

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd00000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, 0x0}, 0x0)

08:16:53 executing program 1:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd00000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x401, 0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8}, 0xfffffffffffffec9)

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={0x0}}, 0x0)

08:16:53 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd00000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 1 (fault-call:2 fault-nth:0):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:53 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x400004}, 0x92)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x7, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)

08:16:53 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={0x0}}, 0x0)

08:16:53 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:53 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:53 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0xfffffffffffffd2d)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000b43c0800"/18], 0x14}}, 0x0)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x66}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40041)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3f7, 0x800, 0x70bd29, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}}, 0x8000)

[  948.489752] FAULT_INJECTION: forcing a failure.
[  948.489752] name failslab, interval 1, probability 0, space 0, times 0
[  948.520400] CPU: 0 PID: 3636 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  948.528239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  948.537591] Call Trace:
[  948.540186]  dump_stack+0x1b2/0x283
[  948.544357]  should_fail.cold+0x10a/0x154
[  948.548518]  should_failslab+0xd6/0x130
[  948.552505]  kmem_cache_alloc_trace+0x29a/0x3d0
[  948.557176]  loop_add+0x83/0x830
[  948.560721]  ? loop_queue_rq+0x280/0x280
[  948.564782]  ? trace_hardirqs_on+0x10/0x10
[  948.569020]  loop_control_ioctl+0x161/0x3f0
[  948.573518]  ? loop_lookup+0x190/0x190
[  948.577405]  ? SyS_write+0x1b7/0x210
[  948.581121]  ? loop_lookup+0x190/0x190
[  948.585900]  do_vfs_ioctl+0x75a/0xff0
[  948.589700]  ? ioctl_preallocate+0x1a0/0x1a0
[  948.594198]  ? lock_downgrade+0x740/0x740
[  948.598352]  ? __fget+0x225/0x360
[  948.601809]  ? do_vfs_ioctl+0xff0/0xff0
[  948.605815] FAULT_INJECTION: forcing a failure.
[  948.605815] name failslab, interval 1, probability 0, space 0, times 0
[  948.605894]  ? security_file_ioctl+0x83/0xb0
[  948.621570]  SyS_ioctl+0x7f/0xb0
[  948.624933]  ? do_vfs_ioctl+0xff0/0xff0
[  948.628910]  do_syscall_64+0x1d5/0x640
[  948.632806]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={0x0}}, 0x0)

08:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:54 executing program 2 (fault-call:1 fault-nth:0):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:54 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x101, <r0=>0x0}, 0x3)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4)

08:16:54 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)

[  948.638199] RIP: 0033:0x45e219
[  948.641383] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  948.649175] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  948.656443] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  948.663706] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  948.670976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  948.678243] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  948.693009] CPU: 1 PID: 3655 Comm: syz-executor.2 Not tainted 4.14.215-syzkaller #0
[  948.701031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  948.710384] Call Trace:
[  948.712975]  dump_stack+0x1b2/0x283
[  948.716641]  should_fail.cold+0x10a/0x154
[  948.716656]  should_failslab+0xd6/0x130
[  948.716669]  kmem_cache_alloc_node+0x263/0x410
[  948.716683]  __alloc_skb+0x5c/0x510
[  948.716697]  netlink_sendmsg+0x901/0xb80
[  948.716710]  ? nlmsg_notify+0x170/0x170
[  948.716721]  ? kernel_recvmsg+0x210/0x210
[  948.716733]  ? security_socket_sendmsg+0x83/0xb0
[  948.716743]  ? nlmsg_notify+0x170/0x170
[  948.754258]  sock_sendmsg+0xb5/0x100
[  948.758001]  ___sys_sendmsg+0x6c8/0x800
[  948.761973]  ? get_pid_task+0x91/0x130
[  948.765845]  ? copy_msghdr_from_user+0x3b0/0x3b0
[  948.770578]  ? lock_downgrade+0x740/0x740
[  948.774745]  ? __fget+0x1fe/0x360
[  948.778177]  ? lock_acquire+0x170/0x3f0
[  948.782141]  ? lock_downgrade+0x740/0x740
[  948.786330]  ? __fget+0x225/0x360
[  948.790345]  ? __fdget+0x196/0x1f0
[  948.793870]  ? sockfd_lookup_light+0xb2/0x160
[  948.798363]  __sys_sendmsg+0xa3/0x120
[  948.802182]  ? SyS_shutdown+0x160/0x160
[  948.806150]  ? wait_for_completion_io+0x10/0x10
[  948.810826]  ? SyS_read+0x210/0x210
[  948.814456]  ? SyS_clock_settime+0x1a0/0x1a0
[  948.818847]  SyS_sendmsg+0x27/0x40
[  948.822367]  ? __sys_sendmsg+0x120/0x120
[  948.826757]  do_syscall_64+0x1d5/0x640
[  948.830626]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  948.835794] RIP: 0033:0x45e219
08:16:54 executing program 1 (fault-call:2 fault-nth:1):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:54 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)

08:16:54 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:54 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

[  948.839046] RSP: 002b:00007fe9f0d66c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  948.846730] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  948.853980] RDX: 0000000000000000 RSI: 0000000020000dc0 RDI: 0000000000000003
[  948.861230] RBP: 00007fe9f0d66ca0 R08: 0000000000000000 R09: 0000000000000000
[  948.868476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  948.875722] R13: 00007ffc1385054f R14: 00007fe9f0d679c0 R15: 000000000119bf8c
08:16:54 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:54 executing program 0:
socketpair(0x1f, 0x5, 0x1ff, &(0x7f0000001340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}}, 0x50)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

[  948.950911] FAULT_INJECTION: forcing a failure.
[  948.950911] name failslab, interval 1, probability 0, space 0, times 0
[  948.975207] CPU: 0 PID: 3672 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  948.983035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  948.992390] Call Trace:
[  948.995003]  dump_stack+0x1b2/0x283
[  948.998638]  should_fail.cold+0x10a/0x154
[  949.002797]  should_failslab+0xd6/0x130
[  949.006771]  kmem_cache_alloc_node_trace+0x25a/0x400
[  949.011875]  __kmalloc_node+0x38/0x70
[  949.015752] FAULT_INJECTION: forcing a failure.
[  949.015752] name failslab, interval 1, probability 0, space 0, times 0
[  949.015847]  blk_mq_alloc_tag_set+0x27c/0x910
[  949.031796]  loop_add+0x2a0/0x830
[  949.035251]  ? loop_queue_rq+0x280/0x280
[  949.039309]  ? trace_hardirqs_on+0x10/0x10
[  949.043543]  loop_control_ioctl+0x161/0x3f0
[  949.047861]  ? loop_lookup+0x190/0x190
[  949.051748]  ? SyS_write+0x1b7/0x210
[  949.055477]  ? loop_lookup+0x190/0x190
[  949.059358]  do_vfs_ioctl+0x75a/0xff0
[  949.063148]  ? ioctl_preallocate+0x1a0/0x1a0
[  949.067550]  ? lock_downgrade+0x740/0x740
[  949.071692]  ? __fget+0x225/0x360
[  949.075143]  ? do_vfs_ioctl+0xff0/0xff0
[  949.079111]  ? security_file_ioctl+0x83/0xb0
[  949.083518]  SyS_ioctl+0x7f/0xb0
[  949.086876]  ? do_vfs_ioctl+0xff0/0xff0
[  949.090848]  do_syscall_64+0x1d5/0x640
[  949.094912]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
08:16:54 executing program 2 (fault-call:1 fault-nth:1):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:54 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:54 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:54 executing program 0:
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000040))
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000000)=0x2f, 0x80800)

08:16:54 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

[  949.100096] RIP: 0033:0x45e219
[  949.103279] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  949.110978] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  949.118239] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  949.125500] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  949.132769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
08:16:54 executing program 4:
socketpair(0x1f, 0x5, 0x1ff, &(0x7f0000001340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}}, 0x50)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:54 executing program 1 (fault-call:2 fault-nth:2):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:54 executing program 2 (fault-call:1 fault-nth:2):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

[  949.132775] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  949.149352] CPU: 1 PID: 3681 Comm: syz-executor.2 Not tainted 4.14.215-syzkaller #0
[  949.149358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  949.149361] Call Trace:
[  949.149375]  dump_stack+0x1b2/0x283
08:16:54 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x0)

[  949.149388]  should_fail.cold+0x10a/0x154
[  949.149401]  should_failslab+0xd6/0x130
[  949.149413]  kmem_cache_alloc_node_trace+0x25a/0x400
[  949.149425]  __kmalloc_node_track_caller+0x38/0x70
[  949.149437]  __alloc_skb+0x96/0x510
[  949.149450]  netlink_sendmsg+0x901/0xb80
[  949.149462]  ? nlmsg_notify+0x170/0x170
[  949.149472]  ? kernel_recvmsg+0x210/0x210
[  949.149485]  ? security_socket_sendmsg+0x83/0xb0
[  949.149493]  ? nlmsg_notify+0x170/0x170
[  949.149502]  sock_sendmsg+0xb5/0x100
[  949.149512]  ___sys_sendmsg+0x6c8/0x800
08:16:54 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x1}, 0x8)

[  949.149522]  ? get_pid_task+0x91/0x130
[  949.149531]  ? copy_msghdr_from_user+0x3b0/0x3b0
[  949.149542]  ? lock_downgrade+0x740/0x740
[  949.149556]  ? __fget+0x1fe/0x360
[  949.149565]  ? lock_acquire+0x170/0x3f0
[  949.149574]  ? lock_downgrade+0x740/0x740
[  949.149586]  ? __fget+0x225/0x360
[  949.149597]  ? __fdget+0x196/0x1f0
[  949.149606]  ? sockfd_lookup_light+0xb2/0x160
[  949.149616]  __sys_sendmsg+0xa3/0x120
[  949.149626]  ? SyS_shutdown+0x160/0x160
[  949.149636]  ? wait_for_completion_io+0x10/0x10
[  949.149652]  ? SyS_read+0x210/0x210
[  949.149661]  ? SyS_clock_settime+0x1a0/0x1a0
[  949.149672]  SyS_sendmsg+0x27/0x40
[  949.149679]  ? __sys_sendmsg+0x120/0x120
[  949.149695]  do_syscall_64+0x1d5/0x640
[  949.149709]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  949.149717] RIP: 0033:0x45e219
[  949.149721] RSP: 002b:00007fe9f0d66c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  949.149730] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  949.149736] RDX: 0000000000000000 RSI: 0000000020000dc0 RDI: 0000000000000003
[  949.149745] RBP: 00007fe9f0d66ca0 R08: 0000000000000000 R09: 0000000000000000
[  949.149750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  949.149755] R13: 00007ffc1385054f R14: 00007fe9f0d679c0 R15: 000000000119bf8c
[  949.207503] FAULT_INJECTION: forcing a failure.
[  949.207503] name failslab, interval 1, probability 0, space 0, times 0
[  949.281705] FAULT_INJECTION: forcing a failure.
[  949.281705] name failslab, interval 1, probability 0, space 0, times 0
[  949.290727] CPU: 1 PID: 3697 Comm: syz-executor.2 Not tainted 4.14.215-syzkaller #0
[  949.418743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  949.418750] Call Trace:
[  949.430895]  dump_stack+0x1b2/0x283
[  949.430907]  should_fail.cold+0x10a/0x154
[  949.430917]  should_failslab+0xd6/0x130
[  949.430926]  kmem_cache_alloc+0x40/0x3c0
[  949.430936]  skb_clone+0x126/0x9a0
[  949.430946]  netlink_deliver_tap+0x655/0x7d0
[  949.430958]  netlink_unicast+0x485/0x610
[  949.430966]  ? netlink_sendskb+0xd0/0xd0
[  949.430974]  ? __check_object_size+0x179/0x22c
[  949.430982]  netlink_sendmsg+0x62e/0xb80
[  949.430991]  ? nlmsg_notify+0x170/0x170
[  949.430999]  ? kernel_recvmsg+0x210/0x210
[  949.431010]  ? security_socket_sendmsg+0x83/0xb0
[  949.431017]  ? nlmsg_notify+0x170/0x170
[  949.431023]  sock_sendmsg+0xb5/0x100
[  949.431031]  ___sys_sendmsg+0x6c8/0x800
[  949.431038]  ? get_pid_task+0x91/0x130
[  949.431045]  ? copy_msghdr_from_user+0x3b0/0x3b0
[  949.431054]  ? lock_downgrade+0x740/0x740
[  949.431065]  ? __fget+0x1fe/0x360
[  949.431073]  ? lock_acquire+0x170/0x3f0
[  949.431078]  ? lock_downgrade+0x740/0x740
[  949.431087]  ? __fget+0x225/0x360
[  949.431096]  ? __fdget+0x196/0x1f0
[  949.431103]  ? sockfd_lookup_light+0xb2/0x160
[  949.431112]  __sys_sendmsg+0xa3/0x120
[  949.431119]  ? SyS_shutdown+0x160/0x160
[  949.431127]  ? wait_for_completion_io+0x10/0x10
[  949.431139]  ? SyS_read+0x210/0x210
[  949.431146]  ? SyS_clock_settime+0x1a0/0x1a0
[  949.431154]  SyS_sendmsg+0x27/0x40
[  949.431160]  ? __sys_sendmsg+0x120/0x120
[  949.431167]  do_syscall_64+0x1d5/0x640
[  949.431178]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  949.431185] RIP: 0033:0x45e219
[  949.431189] RSP: 002b:00007fe9f0d66c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  949.431196] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  949.431199] RDX: 0000000000000000 RSI: 0000000020000dc0 RDI: 0000000000000003
[  949.431203] RBP: 00007fe9f0d66ca0 R08: 0000000000000000 R09: 0000000000000000
[  949.431207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  949.431210] R13: 00007ffc1385054f R14: 00007fe9f0d679c0 R15: 000000000119bf8c
[  949.431229] CPU: 0 PID: 3701 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  949.431235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  949.431238] Call Trace:
[  949.431247]  dump_stack+0x1b2/0x283
[  949.431258]  should_fail.cold+0x10a/0x154
[  949.431267]  should_failslab+0xd6/0x130
[  949.431277]  kmem_cache_alloc_node_trace+0x25a/0x400
[  949.431289]  __kmalloc_node+0x38/0x70
[  949.431301]  blk_mq_alloc_tag_set+0x30f/0x910
[  949.431315]  loop_add+0x2a0/0x830
[  949.431324]  ? loop_queue_rq+0x280/0x280
[  949.431333]  ? trace_hardirqs_on+0x10/0x10
[  949.431343]  loop_control_ioctl+0x161/0x3f0
[  949.431352]  ? loop_lookup+0x190/0x190
[  949.431360]  ? SyS_write+0x1b7/0x210
[  949.431371]  ? loop_lookup+0x190/0x190
[  949.431380]  do_vfs_ioctl+0x75a/0xff0
[  949.431390]  ? ioctl_preallocate+0x1a0/0x1a0
[  949.431398]  ? lock_downgrade+0x740/0x740
[  949.431410]  ? __fget+0x225/0x360
[  949.431419]  ? do_vfs_ioctl+0xff0/0xff0
[  949.431428]  ? security_file_ioctl+0x83/0xb0
[  949.431437]  SyS_ioctl+0x7f/0xb0
[  949.431444]  ? do_vfs_ioctl+0xff0/0xff0
[  949.431452]  do_syscall_64+0x1d5/0x640
[  949.431466]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  949.431475] RIP: 0033:0x45e219
[  949.733783] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  949.741483] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  949.748737] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  949.755991] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
08:16:55 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:55 executing program 4 (fault-call:0 fault-nth:0):
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

08:16:55 executing program 3:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:55 executing program 0:
getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:55 executing program 2 (fault-call:1 fault-nth:3):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

[  949.763246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  949.770521] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:16:55 executing program 1 (fault-call:2 fault-nth:3):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:55 executing program 3:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:55 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x6c, r0, 0x100, 0x10003, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x17, 0x34, @random="fb5bfd3be06a7ba439c0ab7d99b38fca3c0c14"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
socketpair(0x28, 0xa, 0x3, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xf3c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000032)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:55 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x3ffff9}, 0x8)

08:16:55 executing program 0:
prctl$PR_SET_TSC(0x1a, 0x3)
r0 = socket(0x6, 0x1, 0x7fffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:55 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  949.870599] FAULT_INJECTION: forcing a failure.
[  949.870599] name failslab, interval 1, probability 0, space 0, times 0
08:16:55 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="584a000079fac82893a774253afad988df48e5302985b4a705ed68e4ce0007bf56536921b9c1ac77ce2253e613c23998cef38e5b773ee3a205729d49f5f0d2a5a02d222175807ca1bd", @ANYRES16=r0, @ANYBLOB="0003dbdf257300000008000ae10000000000", @ANYRES32=0x0, @ANYBLOB="0c0099002c0000003f0000000500ee00070000000500ee00010000000800ef00030000000800ef00000000000500ee00000000000800ef0003000000"], 0x58}, 0x1, 0x0, 0x0, 0x40090}, 0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0x8)

[  949.912185] CPU: 1 PID: 3716 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  949.920058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  949.929461] Call Trace:
[  949.929480]  dump_stack+0x1b2/0x283
[  949.935706]  should_fail.cold+0x10a/0x154
[  949.935721]  should_failslab+0xd6/0x130
[  949.943834]  kmem_cache_alloc_node_trace+0x25a/0x400
[  949.949079]  blk_mq_init_tags+0x5e/0x280
[  949.953154]  blk_mq_alloc_rq_map+0x90/0x220
[  949.957483]  __blk_mq_alloc_rq_map+0xa3/0x3a0
08:16:55 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r6, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r4}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:55 executing program 3:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00000000000000000000740000000c0099000500000019000000"], 0x20}}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x51, 0x8000)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffc}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3f}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x4040)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00')
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xabd}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x600002, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x0)

[  949.961991]  blk_mq_alloc_tag_set+0x4ac/0x910
[  949.966506]  loop_add+0x2a0/0x830
[  949.969966]  ? loop_queue_rq+0x280/0x280
[  949.974041]  ? trace_hardirqs_on+0x10/0x10
[  949.978278]  loop_control_ioctl+0x161/0x3f0
[  949.982602]  ? loop_lookup+0x190/0x190
[  949.986516]  ? SyS_write+0x1b7/0x210
[  949.986529]  ? loop_lookup+0x190/0x190
[  949.994396]  do_vfs_ioctl+0x75a/0xff0
08:16:55 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:55 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = accept4$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000080)=0x10, 0x800)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300))
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xfffffeaa, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x100, 0x70bd25, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)
syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x0, 0x800)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000000c0)={0x2c, 0x0, "da34ede5f121b71ec672c69ef67303739e2cf0067446940ca683c439aed3c76023f480dfa1fdad5431759b9e6c64099bcac09cd8f56aec6819f7e81fd53ceca183e870e6c65dc9805ab017caaeca0e00156eeef55bb7af12bc6ef32e8eefeb0222095e93ae3e6428e80446fb0e1301b7c8403902e4aa60aa0bd1c2ea7d006dbdc8a39b426406991f84c3b656c47044977c49c0f0f4969eb9a5b55bc16698ce0e1ce9d4275b8db2ff3d047d7a2ae3f5db94c970ac8badc0b384f5c9223e4edc59101ec6aa75d45d09e9264ab7b6834b943bfc98a2f0a710bd2a9f2ee934d84e3ac6ec000000a0090004170000000000000200"})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x5a}, 0x7)

[  949.994409]  ? ioctl_preallocate+0x1a0/0x1a0
[  949.994418]  ? lock_downgrade+0x740/0x740
[  949.994431]  ? __fget+0x225/0x360
[  949.994441]  ? do_vfs_ioctl+0xff0/0xff0
[  949.994451]  ? security_file_ioctl+0x83/0xb0
[  949.994462]  SyS_ioctl+0x7f/0xb0
[  949.994470]  ? do_vfs_ioctl+0xff0/0xff0
[  949.994482]  do_syscall_64+0x1d5/0x640
[  949.994499]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  949.994508] RIP: 0033:0x45e219
08:16:55 executing program 1 (fault-call:2 fault-nth:4):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:55 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8)

08:16:55 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

[  949.994513] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  949.994523] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  949.994529] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  949.994534] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
08:16:55 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:55 executing program 0:
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x829, 0x0, 0x1, 0x7, 0x4, 0x6})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r0 = getpid()
ioprio_set$pid(0x3, r0, 0x2004)
syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/pid\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)={0x4c8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x9}}}}, [@NL80211_ATTR_BEACON_TAIL={0x1aa, 0xf, [@ssid={0x0, 0x1e, @random="926f57f78fba051590b2cb2be3a45c0fae929ad0334c26c259aecf20525c"}, @ht={0x2d, 0x1a, {0x20, 0x1, 0x7, 0x0, {0x1c000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xf6, 0x2}}, @chsw_timing={0x68, 0x4, {0x4, 0x401}}, @random={0x0, 0xfc, "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"}, @tim={0x5, 0x53, {0x7f, 0x83, 0xff, "ff7c5dc014d89c2f160771d685f4beb30a038fa8605516a0b3bb5ccf31d39ae28ba70952a764c2c133c6419eba1f008019575642b6f86dded521be8ba9b15a430e8bc4ade1c11c2c152be51c64afe6ea"}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x21}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_HEAD={0x2f2, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x81}}, 0x7a0e, @default, 0x14, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xb8}, @val={0x4, 0x6, {0x20, 0x13, 0x100, 0x8}}, @val={0x6, 0x2, 0xcd48}, @val={0x5, 0x3d, {0x80, 0x30, 0x7, "1ab715f6d41f16d54116ee6f71cd4ff22d7635b282f844e7c0c0ded486a092abfe5fac1467967f4351fa78be4ea53ffe7fe47a55aacf51bb2fdc"}}, @val={0x25, 0x3, {0x0, 0x9d, 0x40}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x77, "486f9c330358f311296173e66336a1f523433aec73d44a0bed9e2767ec7983f0d6aea3ef7af7fefd374bb6a6540cf1bdb620a77ca9585d9244a5026599218eafd5f536d4cd9908f092dc5e8d311a9c017e89e832fb942bc524f4d4e4a074d2e51488133a2b139481f289bff8d26955a2d74a7e7d93a0ae"}, {0xdd, 0xae, "b38d2ee191ab6f3892b139416b0635a0e2c8714fdafea9a3f065541a296bf62a9623d86e9d4cabe786b7f380e23561ca64c07f4fc407cdea0cd714083f2db0f43da0b56c92d191baf6f258581f1efc26b2d4771cf0f495f2e1b0ad89829502878d90e77d1f8171c7addea1e4b65db47efd595a18f492a7f8f9ce254a0282e57494fa5df34098cc4e7b401f58833be83033a9ada91ae6d8e729bc3384724b686b186c53420bc2b3afeceb46b7e3d5"}, {0xdd, 0x1b, "e883188eafd5f31353d5645e49f9efb396efe667cff74410aecb52"}, {0xdd, 0xb8, "363adb621a1f5793ff06c61a61e7c3940a1b27450785b5c208e52bca137c866aee3dd6902980c18b3076b2a08bb7fd7484f2d295c574512763b90b0412f81d5b65b87848ad99c1aec448b49812b29e7c908312ce7e523272989ccc3b6a69a2dfd885479fea96eb81824d67e1c17a0132e7c907fe78226088819816516b69dced131813ba4cf1fc9287daef5f89fbc0fda83065b0ac29e036bdad9658fd2fae3e39b013b30a062d7cf5c65ba289dbd115c975d27971ed35a9"}, {0xdd, 0x65, "9c753c2ff81b2717f2a1da0058aa2301e0b204819a94449b402ded6ce050a577627383f12fe3c1c23ca5fd3b9f4ca4a0a2270ea1be515968c50e4eb023af5aaa4b54ba2a7d9d360624cc56e71964c985a75f31aa7da12122c281b268c630320a1e0d721125"}]}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xfffffff7}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0xffff0001, <r3=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r3}, 0x4)

[  949.994539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
08:16:55 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:55 executing program 1 (fault-call:2 fault-nth:5):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

[  949.994545] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  950.045430] blk-mq: reduced tag depth (128 -> 64)
[  950.150740] FAULT_INJECTION: forcing a failure.
[  950.150740] name failslab, interval 1, probability 0, space 0, times 0
[  950.150753] CPU: 1 PID: 3765 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  950.150759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
08:16:55 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:55 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)

[  950.150763] Call Trace:
[  950.150777]  dump_stack+0x1b2/0x283
[  950.150792]  should_fail.cold+0x10a/0x154
[  950.150807]  should_failslab+0xd6/0x130
[  950.150820]  kmem_cache_alloc_node_trace+0x25a/0x400
[  950.150833]  __kmalloc_node+0x38/0x70
[  950.150844]  sbitmap_init_node+0x10c/0x3d0
[  950.150858]  sbitmap_queue_init_node+0x37/0x5d0
[  950.150870]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  950.150882]  ? kmem_cache_alloc_node_trace+0x383/0x400
[  950.150896]  blk_mq_init_tags+0xf4/0x280
[  950.150908]  blk_mq_alloc_rq_map+0x90/0x220
[  950.150918]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[  950.150931]  blk_mq_alloc_tag_set+0x4ac/0x910
[  950.150946]  loop_add+0x2a0/0x830
[  950.150956]  ? loop_queue_rq+0x280/0x280
[  950.150966]  ? trace_hardirqs_on+0x10/0x10
[  950.150978]  loop_control_ioctl+0x161/0x3f0
[  950.150988]  ? loop_lookup+0x190/0x190
[  950.150998]  ? SyS_write+0x1b7/0x210
[  950.151010]  ? loop_lookup+0x190/0x190
[  950.151021]  do_vfs_ioctl+0x75a/0xff0
[  950.151034]  ? ioctl_preallocate+0x1a0/0x1a0
[  950.151043]  ? lock_downgrade+0x740/0x740
[  950.151057]  ? __fget+0x225/0x360
[  950.151067]  ? do_vfs_ioctl+0xff0/0xff0
[  950.151078]  ? security_file_ioctl+0x83/0xb0
[  950.151089]  SyS_ioctl+0x7f/0xb0
[  950.151098]  ? do_vfs_ioctl+0xff0/0xff0
[  950.151110]  do_syscall_64+0x1d5/0x640
[  950.151127]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  950.151135] RIP: 0033:0x45e219
[  950.151141] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  950.151151] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  950.151156] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  950.151162] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  950.151168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  950.151174] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  950.151309] blk-mq: reduced tag depth (128 -> 64)
[  950.276911] FAULT_INJECTION: forcing a failure.
[  950.276911] name failslab, interval 1, probability 0, space 0, times 0
[  950.452706] CPU: 1 PID: 3785 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  950.452711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  950.452714] Call Trace:
[  950.452728]  dump_stack+0x1b2/0x283
[  950.452742]  should_fail.cold+0x10a/0x154
[  950.452757]  should_failslab+0xd6/0x130
[  950.452772]  kmem_cache_alloc_node_trace+0x25a/0x400
[  950.452785]  sbitmap_queue_init_node+0x27f/0x5d0
[  950.452797]  ? kmem_cache_alloc_node_trace+0x383/0x400
[  950.452812]  blk_mq_init_tags+0xf4/0x280
[  950.503322]  blk_mq_alloc_rq_map+0x90/0x220
[  950.503333]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[  950.503345]  blk_mq_alloc_tag_set+0x4ac/0x910
[  950.516645]  loop_add+0x2a0/0x830
[  950.516656]  ? loop_queue_rq+0x280/0x280
[  950.516666]  ? trace_hardirqs_on+0x10/0x10
[  950.516678]  loop_control_ioctl+0x161/0x3f0
[  950.516687]  ? loop_lookup+0x190/0x190
[  950.516697]  ? SyS_write+0x1b7/0x210
[  950.516709]  ? loop_lookup+0x190/0x190
[  950.516719]  do_vfs_ioctl+0x75a/0xff0
[  950.516732]  ? ioctl_preallocate+0x1a0/0x1a0
[  950.516740]  ? lock_downgrade+0x740/0x740
[  950.516753]  ? __fget+0x225/0x360
[  950.516763]  ? do_vfs_ioctl+0xff0/0xff0
[  950.516774]  ? security_file_ioctl+0x83/0xb0
[  950.516784]  SyS_ioctl+0x7f/0xb0
[  950.516792]  ? do_vfs_ioctl+0xff0/0xff0
[  950.516803]  do_syscall_64+0x1d5/0x640
[  950.516821]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  950.516829] RIP: 0033:0x45e219
[  950.516833] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  950.516844] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  950.516849] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  950.516854] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  950.516860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
08:16:56 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)=@ax25={{}, [@bcast, @netrom, @remote, @null, @default, @rose, @rose, @bcast]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000340)=""/101, 0x65}, {&(0x7f00000003c0)=""/94, 0x5e}], 0x6, &(0x7f00000004c0)=""/167, 0xa7}, 0x102)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4004c040)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010)

08:16:56 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)

08:16:56 executing program 4:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f0000000000)=""/31, 0x1f}], 0x2, &(0x7f0000000200)=""/45, 0x2d}, 0x40000021)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

08:16:56 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:56 executing program 1 (fault-call:2 fault-nth:6):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:56 executing program 0:
r0 = socket(0x2a, 0x80000, 0x9)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x1840)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0xfe26)

[  950.516865] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  950.517197] blk-mq: reduced tag depth (128 -> 64)
08:16:56 executing program 2:
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000))
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080), 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x40)

08:16:56 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  950.737153] FAULT_INJECTION: forcing a failure.
[  950.737153] name failslab, interval 1, probability 0, space 0, times 0
[  950.762525] CPU: 0 PID: 3826 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  950.770357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  950.779714] Call Trace:
[  950.782307]  dump_stack+0x1b2/0x283
[  950.785946]  should_fail.cold+0x10a/0x154
[  950.790111]  should_failslab+0xd6/0x130
[  950.790124]  kmem_cache_alloc_node_trace+0x25a/0x400
[  950.799189]  sbitmap_queue_init_node+0x27f/0x5d0
[  950.803951]  ? kmem_cache_alloc_node_trace+0x383/0x400
[  950.809229]  blk_mq_init_tags+0x14b/0x280
[  950.813381]  blk_mq_alloc_rq_map+0x90/0x220
[  950.817703]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[  950.822200]  blk_mq_alloc_tag_set+0x4ac/0x910
[  950.826872]  loop_add+0x2a0/0x830
[  950.830323]  ? loop_queue_rq+0x280/0x280
[  950.834383]  ? trace_hardirqs_on+0x10/0x10
[  950.838623]  loop_control_ioctl+0x161/0x3f0
[  950.842945]  ? loop_lookup+0x190/0x190
[  950.846833]  ? SyS_write+0x1b7/0x210
[  950.850548]  ? loop_lookup+0x190/0x190
[  950.854434]  do_vfs_ioctl+0x75a/0xff0
[  950.858239]  ? ioctl_preallocate+0x1a0/0x1a0
[  950.862649]  ? lock_downgrade+0x740/0x740
[  950.866799]  ? __fget+0x225/0x360
[  950.870254]  ? do_vfs_ioctl+0xff0/0xff0
[  950.874226]  ? security_file_ioctl+0x83/0xb0
[  950.878637]  SyS_ioctl+0x7f/0xb0
[  950.882003]  ? do_vfs_ioctl+0xff0/0xff0
08:16:56 executing program 4:
socketpair(0x28, 0xa, 0xffa2, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000080)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

08:16:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x6}, 0x46, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB=' \x00%\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x8095}, 0x40004)

08:16:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000400e56de0592c1fe6faf1fd764baa7e3fb5a82cfbeb89", @ANYRES16=0x0, @ANYBLOB="00000000000000000000740000000c0099000800000061000000"], 0x20}}, 0x0)

08:16:56 executing program 4:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
connect$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

08:16:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xef}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44441)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5a050000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)

[  950.885979]  do_syscall_64+0x1d5/0x640
[  950.889877]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  950.895064] RIP: 0033:0x45e219
[  950.898246] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  950.905956] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
08:16:56 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)

08:16:56 executing program 2:
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000002c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000280)={0x1c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x20000000)
r3 = accept(r0, 0x0, &(0x7f0000000140))
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x1c}}, 0x20048010)

08:16:56 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x7b5}, 0xfffffffffffffe28)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x6, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)
r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x20000)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000055)

[  950.913328] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  950.913334] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  950.913339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  950.913345] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  950.976479] blk-mq: reduced tag depth (128 -> 64)
08:16:56 executing program 1 (fault-call:2 fault-nth:7):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:56 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8}, @val={0xc, 0x99, {0x4800, 0xa}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20020805}, 0x20000000)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7c}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004015}, 0x1)

08:16:56 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffff8}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8)

08:16:56 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x1000, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180))
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000000c0)=""/170, 0xaa)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x7}, 0x8)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0xe2042, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff8000, 0x45}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="71139c5b4cbc"}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x88c0)

08:16:56 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:56 executing program 3:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x7b5}, 0xfffffffffffffe28)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x6, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)
r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x20000)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000055)

08:16:56 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0x8)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x10)
keyctl$session_to_parent(0x12)
socket(0x1d, 0x2, 0x11)

[  951.089495] FAULT_INJECTION: forcing a failure.
[  951.089495] name failslab, interval 1, probability 0, space 0, times 0
[  951.123524] CPU: 0 PID: 3893 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
08:16:56 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:56 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x300, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4895}, 0x30040031)

[  951.131348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  951.140703] Call Trace:
[  951.143295]  dump_stack+0x1b2/0x283
[  951.146931]  should_fail.cold+0x10a/0x154
[  951.151098]  should_failslab+0xd6/0x130
[  951.151112]  kmem_cache_alloc_node_trace+0x25a/0x400
[  951.151126]  __kmalloc_node+0x38/0x70
08:16:56 executing program 3:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
connect$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

[  951.151138]  blk_mq_alloc_rq_map+0xd2/0x220
[  951.151150]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[  951.151163]  blk_mq_alloc_tag_set+0x4ac/0x910
[  951.151178]  loop_add+0x2a0/0x830
[  951.151188]  ? loop_queue_rq+0x280/0x280
[  951.151198]  ? trace_hardirqs_on+0x10/0x10
[  951.151208]  loop_control_ioctl+0x161/0x3f0
08:16:56 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r0, 0x408, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xbfd6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9eed}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x48004}, 0x4048001)

[  951.151217]  ? loop_lookup+0x190/0x190
[  951.151227]  ? SyS_write+0x1b7/0x210
[  951.151238]  ? loop_lookup+0x190/0x190
[  951.151248]  do_vfs_ioctl+0x75a/0xff0
[  951.151259]  ? ioctl_preallocate+0x1a0/0x1a0
[  951.151266]  ? lock_downgrade+0x740/0x740
[  951.151280]  ? __fget+0x225/0x360
08:16:56 executing program 1 (fault-call:2 fault-nth:8):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:56 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x3e80002, <r0=>0x0}, 0x9fe7d2f4b2fd19bd)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r0}, 0x4)
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000080)={0x1, "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"})
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe0, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x93183ea448677f41}, 0x20008000)
syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x400000)

[  951.151289]  ? do_vfs_ioctl+0xff0/0xff0
[  951.151299]  ? security_file_ioctl+0x83/0xb0
[  951.151309]  SyS_ioctl+0x7f/0xb0
[  951.151326]  ? do_vfs_ioctl+0xff0/0xff0
[  951.151337]  do_syscall_64+0x1d5/0x640
[  951.151354]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  951.151361] RIP: 0033:0x45e219
[  951.151365] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  951.151375] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  951.151380] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  951.151385] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  951.151390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  951.151395] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  951.213935] blk-mq: reduced tag depth (128 -> 64)
[  951.346385] FAULT_INJECTION: forcing a failure.
[  951.346385] name failslab, interval 1, probability 0, space 0, times 0
[  951.346397] CPU: 1 PID: 3936 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  951.346403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  951.346406] Call Trace:
[  951.346420]  dump_stack+0x1b2/0x283
[  951.346435]  should_fail.cold+0x10a/0x154
[  951.346448]  should_failslab+0xd6/0x130
[  951.346462]  kmem_cache_alloc_node_trace+0x25a/0x400
[  951.346477]  __kmalloc_node+0x38/0x70
[  951.346490]  blk_mq_alloc_rq_map+0x113/0x220
[  951.346502]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[  951.346515]  blk_mq_alloc_tag_set+0x4ac/0x910
[  951.346531]  loop_add+0x2a0/0x830
[  951.346541]  ? loop_queue_rq+0x280/0x280
[  951.346551]  ? trace_hardirqs_on+0x10/0x10
[  951.346563]  loop_control_ioctl+0x161/0x3f0
[  951.346572]  ? loop_lookup+0x190/0x190
[  951.346581]  ? SyS_write+0x1b7/0x210
[  951.346592]  ? loop_lookup+0x190/0x190
[  951.346602]  do_vfs_ioctl+0x75a/0xff0
[  951.346614]  ? ioctl_preallocate+0x1a0/0x1a0
[  951.346622]  ? lock_downgrade+0x740/0x740
[  951.346637]  ? __fget+0x225/0x360
[  951.346647]  ? do_vfs_ioctl+0xff0/0xff0
[  951.346657]  ? security_file_ioctl+0x83/0xb0
[  951.346667]  SyS_ioctl+0x7f/0xb0
[  951.346675]  ? do_vfs_ioctl+0xff0/0xff0
[  951.346686]  do_syscall_64+0x1d5/0x640
[  951.346702]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  951.346710] RIP: 0033:0x45e219
[  951.346715] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  951.346725] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
08:16:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf253d00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000100002600000008005d000000000008005d0000000000"], 0x38}}, 0x80)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e59233335b6da885500700000000"], 0x71}}, 0x0)

08:16:57 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0x5f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5cfffd00", @ANYRES16=r1, @ANYBLOB="200027bd7000fcdbdf25430000000c0058005f000000000000000c00580019000000000000000c0058005b000000000000000c0058001e000000000000000c00580006000000000000000c0058003500000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000041)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYBLOB="00032bbd7000fedbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x730}, 0x1, 0x0, 0x0, 0x810}, 0x2000c000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000680)={&(0x7f0000000d40)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x40}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "16a329113a3df131263abeb5bc379aed"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x400}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xbb9c}]}, 0x58}, 0x1, 0x0, 0x0, 0x48080}, 0x8000)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

08:16:57 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
r0 = socket(0x18, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x8, <r1=>0x0}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4)

08:16:57 executing program 1 (fault-call:2 fault-nth:9):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:57 executing program 3:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:57 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  951.346731] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  951.346736] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  951.346742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  951.346748] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  951.347093] blk-mq: reduced tag depth (128 -> 64)
08:16:57 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
r0 = socket(0x1f, 0x4, 0xfffffffd)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="4286b07a42fe"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x69}, @NL80211_ATTR_IE={0x1a4, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x1, 0x1, 0x1}, 0x1, 0x0, 0x7, @device_b, 0x4, "", 0x5, 0x8, 0x2, [{{0x1}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x2}]}}, @random_vendor={0xdd, 0x28, "a20e7dc19c791ab67594ac11e9033dc6a7145cd4ab574ee3937e6d478c9c0836ce070d7c77447e4a"}, @fast_bss_trans={0x37, 0x13c, {0x1, 0x9, "aa3e010f4e69ea278f9203b3d3e295bb", "5abea4e508859ee1fdd2c8f4aee1cc9cd044d9a12455c09dbbc39e866daaddad", "6c948867635df988d05c2288bf3148b637027e0c73fb66ef54b36b599902435f", [{0x3, 0x22, "f70e2b6ddcfbfe37641954a1dc8bec8c5451e7b3d914b966ac89c4b8704b0b276706"}, {0x1, 0xe, "68f3f7232957c232479b5065f5c7"}, {0x2, 0x13, "aca89d49399e60b1fb4adc289b994def1def6a"}, {0x1, 0x15, "8e27d074d246292a808b6da9d0a2294a939ac5f9f2"}, {0x4, 0x26, "52ec508ec261a9acff51ef36f890005de587954ebb21fed0d44d90230ce5d058b0194065ec57"}, {0x4, 0x28, "d4e0e63612f91c2334cf2991d1de39b4af4ae7b7628de1401968972acda7be12f6889fe1110d3283"}, {0x2, 0x28, "10980127034a181af8c99ba6c8077f6c113d8bca3f6b64a956f5924ca95bdab2dd51247c78b5fa48"}, {0x1, 0x5, "5b391139a6"}, {0x4, 0x5, "50446b96ac"}]}}, @chsw_timing={0x68, 0x4, {0x6, 0x9}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x200c0001)

[  951.657158] FAULT_INJECTION: forcing a failure.
[  951.657158] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  951.687347] CPU: 0 PID: 3957 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  951.695176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  951.704531] Call Trace:
[  951.707124]  dump_stack+0x1b2/0x283
[  951.710763]  should_fail.cold+0x10a/0x154
[  951.714919]  __alloc_pages_nodemask+0x22c/0x2720
[  951.719674]  ? kasan_kmalloc+0xeb/0x160
[  951.723647]  ? blk_mq_alloc_rq_map+0x113/0x220
[  951.728225]  ? __blk_mq_alloc_rq_map+0xa3/0x3a0
[  951.732892]  ? loop_add+0x2a0/0x830
[  951.736516]  ? loop_control_ioctl+0x161/0x3f0
[  951.741040]  ? do_vfs_ioctl+0x75a/0xff0
[  951.745040]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  951.750413]  ? __mutex_unlock_slowpath+0x75/0x770
08:16:57 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:57 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000e00)={0xcd4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffb6, 0x6f}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x10, 0x80, [@ibss={0x6, 0x2, 0xc06e}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x2a, 0x80, [@ht={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x8001, 0x1fc1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x8, 0x45}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x4, 0x80}}, @supported_rates={0x1, 0x2, [{0x36, 0x1}, {0x48, 0x1}]}]}, @NL80211_ATTR_FTM_RESPONDER={0x290, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5a, 0x3, "17b724b55b44e20125cddb02236a1de2a8b0a7ac406cab0a775b219db6848526ca3c720864bf4c50980774bfe0a0ab9f43263af2ca67be6b4198a1c9e364010bac5d6cb1cce95be6b7a28f4702b71b45a84e687a5a1c"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7c, 0x3, "191acc25d91cf83bc67cad123b82ab7a98b54be6b2494f08387e845d53e9be45f0ac37f9384f1e93d321d9e71b141a01262a480d6762bc322026e0400d69e807cbf0f3ea82c0b501241b01ff7f50f4420c090b8a5425b7911c615e8c293fe0d09e550176c9cc0416e11ca85da7caea49985d15d9f182034a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb5, 0x3, "27ac24b510f93b1719bc4087877b19af2cb6a1896bd90962e525e38d2ffdc23ab8d44f6f27aca7936363afbeb76aad11eda22211ccd0ecaf3ced10dab40f755bb653ca0a3829f8187a15fa74871a4fef9748c887a2d3984a339533f0960914e23532ffb3ff0c41eeb95e74b767654c7c9457e561faa450605d7d3588014bb86c0b43a2fbc91f54c134af7be497331395e846d2d8cacaba6ffcbf8d6ed6df6180a5fe0807063bd517aa0a3a96ca5a6ca4fb"}, @NL80211_FTM_RESP_ATTR_LCI={0xed, 0x2, "5335fab504c3abd5f165d63a5ec548cb14c0115141b4c62bed0de9da5748179e31d06cec1978ea7ee3c53cde90d7f3ce8e7a99c1650b6d544fa1c49d7dabc8176b207d8ce4d02c4f66990e7c234dde3b01c0d87fccc2ebe6d5cbd2803b011e971679058c13bda8d165f252a16615d80b62ad843ceaaaf4fb8bdc5f1ff876f3173a709fe50f8d9d905152c9c29f825e6a2dd5cc116cfac2b715c18e3a0870d729383470d49a27ced356db4168f0bd966c934d7c5a4b22b408500f7aa10de9fe036f29cd31a62fed6396ac684346b8125b7416b8c117892618936e2eaebfdd71d0fb6e741c27ee0f8e35"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x29d, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x747, 0x91, "2c74fbf25060deb76611ce6f4301bdaad339420277fc2603c2c2dc3e29f8aca9824558b506882fc6d573b647c947e6d907680f9af2fead4f6fad5cd44aab981d70bd909389b31fcd46d565c6a27cee1c53c346564ef01dc93d40d3e76f50ef4b74d9bd0da2acbdd62aa06b4255ac550333b2431950ef16a15732b9b6aafcebe35dc1a74059b8ad48c0827206b42e2c2a3b74893539c6111d046abab29d999fccf8230a79138f421d8dc23e84175490060628a3752bd442a9ec51c9bc9341b325b5e2eab796807d69b2d264dbf57be4ca288874279a771ba4c6730a49c336428876d9f92087c2b9b1f073286dbc9d7114631cfe6cfb9757145b878ad1a0bfefb11c4b63187081f7e2e480ec16515cc4056176569b2254b357509031c0cf7a4eed5ecc9b54a554a467a5e1c0eb3bf3fab62ea4f97eedc4eae87ec27f420b7ef59fdebf02872b12bcafd6fee0fc944325f4d29faf985eac88c0c73f354e4d4e5b89f98a4f0112eaf2a6e14bb48a9be5f236431c10f06d8cec6e194be5d4db17159e85bb674800f75f69503a13668bd3a3c2d879752684cb83ce8d17e42ed8803133e1238d11d768182b1873662934703104418bb1435728d39f3ece6cfc9726124bed0938158bbfaea98ed834cd54bd6d6b41ac57b4a3bae11512fef600a04cddcd6a4de43ce97fac0b4e616ce1502d07d21dc8ed0694bd1842098bb5f2b3b13bb215960ad38926888270eb84ec4a03c98186f00e9179d2f590a8ff8c2fdead0620a02ac2452e61c6e59bef5fab2b84b79d0123b077b3ad69b4379ea42e916c4c17ef0ea9d34871e672a4dd2cac0266a03b437ca24f6de691d8a386049bd972d35169cd9200f83d64efd196ae78500af82fc23c8cc7fe39edb469be8ade83478e747c9bd117789d52c1e2d093af1bc1f11c0694555a47ae47ce17ac0f5e1224f1137f680cfed9a498caa3f2de86aac79c84f72879db01f431556cec5ad67a24bba5ddfe9954f015fefd40a910c2a9ed2a46fd30238904a26006dc488edeca3fa0cb2ce9ecb16c5102a1988405ab2fcc771841f3821d03fb9db07608140a7beff900f528420195d7daa5044810cd4644b742dab80b35a7cbcf74d33aa7182dfe287f6470a8a511f73ca7630ddb81aac3772ea915525dbd4a068d59a63823e26d0d2d77fb43373a6d5e59275f0c60cb0280b034ed7aa46ba08541fa2faecc6cf117bd86a69513d064c875588f9d55f79e7834c8c069b554ab94b47f02567df39ef756fc5d90321ca3a193952aa9c5d17dfebd197519bfdb6385d08461129f2d1161cfdc091c816d045d1dcdf7a9a4a13719c3b32e006bab62646009d8412cd50650950e472a8cc6f39b13a12177f5bb6c5afec2edee06e0dc831749267eebd9be8baf0165792481630bb141efaf1ab16d017845a20f717cf01f90b97db3de2b6000593ccf045a851c26b523dc32487aadf33a8ca66b9a29687619747044a8f4598fa44b13ce97f456755e4c0808fcd69b696a2bbb244b5ff30d4fa6590e7bce8890e17c8d513bdd695654eec6878850ea402af66501d8f552af68e4dc51bf1107b496463ec003caf322f62d7f1bf9d035739dae95380ee6c6f57175e5bf7c02febf185f8a0698161b9130a3dfae8202aa3cf97aacd444df8557d93139583a321d95edcbc2496130c2d62aaeb00e1406ce4da44b7f588967fedc01a3d193821674898291452ff9a80f5136f6b7519136cd3512d29b0e28c6b3a704d22bfffa3d49e1d799940567a3329e65e7ddd59aadcbdb924457bfc0d2c832235d504dc13ea28081e151a1e91615bac28298035da6c7e5f781b6ab054eb77193a27db2ac6c3652d13925fa5caf2766b7c28532ed951e9f8cd46f9dd339555c52a7dbe6d23b76669654186c909c6294a5d4ac043d4845a1d1d4ffab55367a19cc5d02d003774aea3552386696b0d0f8b3b0f4aa9804c9498f4f527468cf9a67f631d49749f7f9b4d70e563a4905236d587f51666a3f792d682eb1e7c3e21ca8ebd6dc0290f010d8b4f4bde30eb13edf7f393d9a233db2cdc9db4666b401b604d0595d7d7a061d8cd44be09229ee3074359141278a218ea85143fbfa83a53dc4d1394d3544302e24317062cd2bcb68473d2e7cf1d0783c07fb4cb253e0cb290322c7fa7c03ac0e9ab79b60d82cc530e5001a07f4eff9586633b0e2bd4c4b7a75c39bc4c4d863f65df43eab4371f8e9cb13b419736e19c73415bf272cdb38323fb0dd41710cac21cea0f24e931f3745069d4156f6983f3defab38648ae881bcf24e22878a2f9d499edea1d95931715d303da88f4b4bb06b8477dcbed290ff27e96c24f59c9ef1936d95a31dea68be45f8b4fe39d06de46164e09332a2993d127214b18dcd34f2cf5aa9f67fedc52c387197b15e65537a303ace19f696d96160a7c45c8bfdac2bf24914079b4a31a724ad314f75564eaf79bb3a6983ef79efe3a2e91a50be2989e0a707db4993119f376e67b0e7cf37ef6d289ede44a7adb02342797687b723ed0d2ad2bd951484a2a153b2d3d50e82d2f9b2e637f4ea3f2ba23189d1ad8a0b6382dbf879dfdb665c9db16c7aec56faa699092f8f4dd40a25a0ee9d3fb314b1b8fb9ecea9c48f"}]}, 0xcd4}, 0x1, 0x0, 0x0, 0x1}, 0x4040)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

[  951.755257]  ? fs_reclaim_release+0xd0/0x110
[  951.759668]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  951.764518]  ? __lockdep_init_map+0x100/0x560
[  951.769013]  ? _find_next_bit+0xdb/0x100
[  951.773075]  ? __cpu_to_node+0x7b/0xa0
[  951.776965]  ? blk_mq_hw_queue_to_node+0x9f/0xf0
[  951.781724]  blk_mq_alloc_rqs+0x227/0x6d0
[  951.785879]  ? blk_mq_alloc_rq_map+0x9d/0x220
[  951.790386]  __blk_mq_alloc_rq_map+0x15b/0x3a0
[  951.790400]  blk_mq_alloc_tag_set+0x4ac/0x910
[  951.790418]  loop_add+0x2a0/0x830
08:16:57 executing program 4:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000100)={0x7, 0x3})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xc889}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

08:16:57 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x2, 0x191})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

[  951.802928]  ? loop_queue_rq+0x280/0x280
[  951.802939]  ? trace_hardirqs_on+0x10/0x10
[  951.802951]  loop_control_ioctl+0x161/0x3f0
[  951.802959]  ? loop_lookup+0x190/0x190
[  951.802969]  ? SyS_write+0x1b7/0x210
[  951.802981]  ? loop_lookup+0x190/0x190
[  951.802991]  do_vfs_ioctl+0x75a/0xff0
[  951.803004]  ? ioctl_preallocate+0x1a0/0x1a0
[  951.803011]  ? lock_downgrade+0x740/0x740
[  951.803025]  ? __fget+0x225/0x360
08:16:57 executing program 4:
pipe(&(0x7f0000000000))
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0x8)

08:16:57 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0xfffffffffffffec9)
socket$packet(0x11, 0x0, 0x300)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x140c}, 0x8)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0xea42406cae4b17d6, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}}, 0x8000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)

[  951.803035]  ? do_vfs_ioctl+0xff0/0xff0
[  951.803045]  ? security_file_ioctl+0x83/0xb0
[  951.803055]  SyS_ioctl+0x7f/0xb0
[  951.803064]  ? do_vfs_ioctl+0xff0/0xff0
[  951.803075]  do_syscall_64+0x1d5/0x640
[  951.803092]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  951.803100] RIP: 0033:0x45e219
[  951.803105] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  951.803116] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
08:16:57 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x36, 0x1}, {0xc}, {0x24, 0x1}, {0x18}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xe059}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff45}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x81}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x7c, 0x2a, [@preq={0x82, 0x5c, @not_ext={{0x1, 0x1, 0x1}, 0x7, 0x2, 0x7fffffff, @broadcast, 0x4, "", 0x825, 0x1f, 0x6, [{{}, @device_b}, {{0x1}, @device_a, 0x5}, {{0x1, 0x0, 0x1}, @device_a, 0xe7a5}, {{0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x800}, {{}, @broadcast, 0x2}]}}, @mesh_chsw={0x76, 0x6, {0x8, 0x89, 0x39, 0x4e8}}, @mic={0x8c, 0x10, {0x574, "fe601eb4fac6", @short="a3e193483a9eeb87"}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc000}, 0x41)

08:16:57 executing program 1 (fault-call:2 fault-nth:10):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:57 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:57 executing program 4:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x5, 0x0, 0x10001})
r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x400)
ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100))

08:16:57 executing program 2:
socketpair(0x29, 0x800, 0x7f, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f6, 0x8, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x40)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_bulk={0x3, {0xf}, 0x5, 0x22, &(0x7f00000002c0)="377ea94d89233469a088ee69868ee2b110c4a3a5b79a293816cf71afab16644641544f569e6b67dc8cce41480a06be64d093d224ab3fae2351aead585a11f8a4739217fb55938be720485a007758ae2f04405a7e949cb001fda430621f05df4cc13b", 0x62, 0x0, 0x1, 0x5, 0x2e8c8991, 0x3, &(0x7f00000004c0)="b6a5c8cdde6697cf5adb7c6e2d0de4d882c3cc046c27fb9a247e89e17c49b4b1360ab4714d370261cd5c2319cec635975c78ca2da7d8d4073863a9414c1554906d883e67dbe7c671deb5fe856494a9c3235c1958b2eedce5e1cb287956c3d7136b75fcadac5428adfb76da3e39b17e5082ba08c64c890e6438522326ad4bfd4ebf0c2fbde8a5c62e1d38bd82d3897f865ed5846ff390313f9cac562a2cc90319ee1667b4c8d62bc4892410580b20dc59694f6f70050935aa423cbb4e26e7d3fc8b9c40abcce096f2"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1fb389020065c1", @ANYRES16=0x0, @ANYBLOB="0000000000000000000074000000968147fb4dc4cd342f8c8881df5877455d0f0a76c6573b30f5eee295689a6e4e8f208236cce079078fa5a6e3318306cda0125c7880513658ffe082511e84c1bf7599c02b4c1ea46ec9813b18099d29c59ffd4991d228a7680ebbb80c08a4f3096a25e60601b47cdceb9f39078ee8a9bb2a72413e099a9c5f1685e07918675cc7f34c3fb890308861a5b5250e67a575a2def66455ff23e339d1a8653fe3c07139dbbf5532a3791d30416f5955109dbaa03a450dceea0d042bb7324a6ab8365aa57c220256c6b4e763df2629db4eabdf6af833c373cc"], 0x71}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x20000040)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc097ea479c93a0d3bf89b", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf252b0000000c009900010000003f0000001e001f000008090800000000000000fa000000060000000f0801000000c2000008006b000100000004003c00040008010800340011abf4d608002700010000000500190108000000050019010b0000000500240096000000040046001e00940000031d07000000000000000400f800080000000003020000000000000400cc00"], 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000)

[  951.803121] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  951.803126] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  951.803131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  951.803137] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:16:57 executing program 3:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0xfffffffffffffec9)
socket$packet(0x11, 0x0, 0x300)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x140c}, 0x8)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0xea42406cae4b17d6, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}}, 0x8000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)

08:16:57 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x808400)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x438}, 0x1, 0x0, 0x0, 0x810}, 0x40080)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

08:16:57 executing program 0:
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000))
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0x5f)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x220f}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x0, <r1=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4)

[  952.021007] FAULT_INJECTION: forcing a failure.
[  952.021007] name failslab, interval 1, probability 0, space 0, times 0
[  952.063916] CPU: 0 PID: 4011 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  952.071784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  952.081139] Call Trace:
[  952.083731]  dump_stack+0x1b2/0x283
[  952.087363]  should_fail.cold+0x10a/0x154
[  952.091517]  should_failslab+0xd6/0x130
[  952.095507]  kmem_cache_alloc_node+0x263/0x410
[  952.100093]  blk_alloc_queue_node+0x2d/0xb40
[  952.104498]  blk_mq_init_queue+0x42/0x90
[  952.108551]  loop_add+0x303/0x830
08:16:57 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:57 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8000}, 0x8)
getpid()
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000100)={0xfffffffe, "047207e9dc47c73f995d5d6853ebaa2c5b1a232007d283ae3db44918623d8cc30719214ab4afcc4a20f89876fb216456be1153528565e860f1210432c15bd86768ea7af736ef55028e891a0b1ae587800747455ab08587bd6c528bb07cd6660f21cf5594b6517e2e8eba35d4dfb68412b8fc0434395774fac064f460f16ecd7d9c7cf8575f242978dbebc4e3b528852fc1ac4f5b14937398c2e0d49368b76d9d27206b7e581b84ad14ef6deea0c0f8175586e0265ccd5a10b993eec05a1845655eb8fa30b415b636751d20efc5f925640e30036fe72623acd1953b260cfb9f5bca3d1ce63482490904999f6b0dbc0c61d3846d45761b2a8d1b86729784198d28"})

08:16:57 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x5}, 0x4)

08:16:57 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r5 = accept(r4, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88010}, 0x40c0)

[  952.112009]  ? loop_queue_rq+0x280/0x280
[  952.116088]  ? trace_hardirqs_on+0x10/0x10
[  952.120339]  loop_control_ioctl+0x161/0x3f0
[  952.120349]  ? loop_lookup+0x190/0x190
08:16:57 executing program 1 (fault-call:2 fault-nth:11):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:57 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x735}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1072}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb00}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x54}}, 0x4000840)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:57 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1ff}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x40}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x200000e0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
ioctl$sock_ifreq(r4, 0x8929, &(0x7f0000000300)={'ip6erspan0\x00', @ifru_ivalue})
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
ioctl$sock_ifreq(r2, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', @ifru_mtu})
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10810}, 0x81)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

[  952.120359]  ? SyS_write+0x1b7/0x210
[  952.120371]  ? loop_lookup+0x190/0x190
[  952.120381]  do_vfs_ioctl+0x75a/0xff0
[  952.120394]  ? ioctl_preallocate+0x1a0/0x1a0
[  952.120403]  ? lock_downgrade+0x740/0x740
[  952.120417]  ? __fget+0x225/0x360
[  952.120426]  ? do_vfs_ioctl+0xff0/0xff0
[  952.120437]  ? security_file_ioctl+0x83/0xb0
[  952.120448]  SyS_ioctl+0x7f/0xb0
[  952.120456]  ? do_vfs_ioctl+0xff0/0xff0
[  952.120467]  do_syscall_64+0x1d5/0x640
[  952.120485]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  952.120492] RIP: 0033:0x45e219
[  952.120497] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  952.120507] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  952.120512] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  952.120517] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
08:16:57 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:57 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:57 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7ff}, 0xfffffffffffffdef)

08:16:57 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x4}, 0x8)

[  952.120522] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a
[  952.120527] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  952.241681] FAULT_INJECTION: forcing a failure.
[  952.241681] name failslab, interval 1, probability 0, space 0, times 0
08:16:57 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:57 executing program 2:
accept(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80)
r0 = socket(0x14, 0x80801, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x2a00c080)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000100)={0x20, 0x0, 0x300, 0x200, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3a}}}}}, 0x20}}, 0x20000004)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r2, 0x8925, &(0x7f0000000240)={'veth0_to_team\x00', @ifru_names})

[  952.351085] CPU: 0 PID: 4040 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  952.358918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  952.368280] Call Trace:
[  952.370882]  dump_stack+0x1b2/0x283
[  952.374519]  should_fail.cold+0x10a/0x154
[  952.378676]  should_failslab+0xd6/0x130
[  952.382665]  kmem_cache_alloc_trace+0x29a/0x3d0
[  952.387339]  bioset_create+0x53/0x750
[  952.391141]  ? kmem_cache_alloc_node+0x38b/0x410
[  952.395919]  blk_alloc_queue_node+0xa8/0xb40
08:16:57 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4}}}}}, 0x20}}, 0x0)

[  952.400345]  blk_mq_init_queue+0x42/0x90
[  952.400357]  loop_add+0x303/0x830
[  952.407857]  ? loop_queue_rq+0x280/0x280
[  952.411919]  ? trace_hardirqs_on+0x10/0x10
[  952.416155]  loop_control_ioctl+0x161/0x3f0
[  952.420473]  ? loop_lookup+0x190/0x190
[  952.424394]  ? SyS_write+0x1b7/0x210
[  952.428112]  ? loop_lookup+0x190/0x190
[  952.431999]  do_vfs_ioctl+0x75a/0xff0
[  952.435815]  ? ioctl_preallocate+0x1a0/0x1a0
[  952.440218]  ? lock_downgrade+0x740/0x740
[  952.444371]  ? __fget+0x225/0x360
08:16:57 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
socket$nl_generic(0x10, 0x3, 0x10)

[  952.447846]  ? do_vfs_ioctl+0xff0/0xff0
[  952.451823]  ? security_file_ioctl+0x83/0xb0
[  952.456235]  SyS_ioctl+0x7f/0xb0
[  952.459641]  ? do_vfs_ioctl+0xff0/0xff0
[  952.463626]  do_syscall_64+0x1d5/0x640
[  952.467522]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  952.472707] RIP: 0033:0x45e219
[  952.475896] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  952.483605] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  952.490884] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
08:16:57 executing program 1 (fault-call:2 fault-nth:12):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:57 executing program 2:
ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'vlan1\x00', @ifru_names})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005cf2e331c4812a03740a448c9140f77f2561c7205b78cdcd20a8e3fb6ce05bcf965301b3b924cdc2d4d98d8475c6f1b877a275fa6c2b6b7702df2fbd3a20f380c4c8f2e039204af3f3fc96fe7b679bdb86707f9bfa63dfa290df5163bb", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)

08:16:57 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffee5)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="0a082abd7000fcdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x40090}, 0x840)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x8c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x955, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x8c}}, 0x1)

08:16:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r5 = accept(r4, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88010}, 0x40c0)

[  952.498149] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  952.505418] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  952.512703] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:16:58 executing program 4:
ptrace$getsig(0x4202, 0x0, 0xfffffffffffffffd, &(0x7f0000000080))
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r3})
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r4})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x400006, <r5=>0x0}, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r5}, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r6=>r1})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000dc314000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf25440000000c009900010000804d0000000a00180003030303030300000a001800030303030303000004000801"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

08:16:58 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:58 executing program 0:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  952.563671] FAULT_INJECTION: forcing a failure.
[  952.563671] name failslab, interval 1, probability 0, space 0, times 0
08:16:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6b0}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x20002040)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r5 = accept(r4, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88010}, 0x40c0)

[  952.607998] CPU: 0 PID: 4085 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  952.615831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  952.625198] Call Trace:
[  952.625215]  dump_stack+0x1b2/0x283
[  952.625230]  should_fail.cold+0x10a/0x154
[  952.625249]  should_failslab+0xd6/0x130
[  952.625262]  kmem_cache_alloc_trace+0x29a/0x3d0
08:16:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0xebbc, 0x4)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:58 executing program 1 (fault-call:2 fault-nth:13):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

[  952.625277]  bioset_create+0x53/0x750
[  952.625287]  ? kmem_cache_alloc_node+0x38b/0x410
[  952.625298]  blk_alloc_queue_node+0xa8/0xb40
[  952.625310]  blk_mq_init_queue+0x42/0x90
[  952.625322]  loop_add+0x303/0x830
[  952.625332]  ? loop_queue_rq+0x280/0x280
[  952.625344]  ? trace_hardirqs_on+0x10/0x10
[  952.625356]  loop_control_ioctl+0x161/0x3f0
08:16:58 executing program 1 (fault-call:2 fault-nth:14):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000e5ff000000740000005b817c0a97d7bc9d"], 0x71}}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x22}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x28}}, 0x4000)

[  952.625365]  ? loop_lookup+0x190/0x190
[  952.625373]  ? SyS_write+0x1b7/0x210
[  952.625384]  ? loop_lookup+0x190/0x190
[  952.625394]  do_vfs_ioctl+0x75a/0xff0
[  952.625405]  ? ioctl_preallocate+0x1a0/0x1a0
[  952.625412]  ? lock_downgrade+0x740/0x740
[  952.625425]  ? __fget+0x225/0x360
[  952.625434]  ? do_vfs_ioctl+0xff0/0xff0
08:16:58 executing program 1 (fault-call:2 fault-nth:15):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:58 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48090)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x100, 0x70bf28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

[  952.625443]  ? security_file_ioctl+0x83/0xb0
[  952.625455]  SyS_ioctl+0x7f/0xb0
[  952.625465]  ? do_vfs_ioctl+0xff0/0xff0
[  952.625478]  do_syscall_64+0x1d5/0x640
[  952.625494]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  952.625501] RIP: 0033:0x45e219
[  952.625506] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  952.625515] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  952.625520] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  952.625526] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  952.625531] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c
[  952.625537] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  952.707566] FAULT_INJECTION: forcing a failure.
08:16:58 executing program 0 (fault-call:1 fault-nth:0):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

[  952.707566] name failslab, interval 1, probability 0, space 0, times 0
[  952.707577] CPU: 0 PID: 4123 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  952.707583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  952.707586] Call Trace:
[  952.707599]  dump_stack+0x1b2/0x283
[  952.707613]  should_fail.cold+0x10a/0x154
[  952.707628]  should_failslab+0xd6/0x130
[  952.707641]  kmem_cache_alloc_node_trace+0x25a/0x400
[  952.707651]  ? mempool_free+0x1d0/0x1d0
[  952.707663]  __kmalloc_node+0x38/0x70
[  952.707673]  mempool_create_node+0xb1/0x3e0
[  952.707682]  ? mempool_kmalloc+0x20/0x20
[  952.707694]  bioset_create+0x31b/0x750
[  952.707704]  ? kmem_cache_alloc_node+0x38b/0x410
[  952.707716]  blk_alloc_queue_node+0xa8/0xb40
[  952.707728]  blk_mq_init_queue+0x42/0x90
[  952.707738]  loop_add+0x303/0x830
[  952.707748]  ? loop_queue_rq+0x280/0x280
[  952.707759]  ? trace_hardirqs_on+0x10/0x10
[  952.707773]  loop_control_ioctl+0x161/0x3f0
[  952.707782]  ? loop_lookup+0x190/0x190
[  952.707790]  ? SyS_write+0x1b7/0x210
[  952.707802]  ? loop_lookup+0x190/0x190
[  952.707811]  do_vfs_ioctl+0x75a/0xff0
[  952.707823]  ? ioctl_preallocate+0x1a0/0x1a0
[  952.707830]  ? lock_downgrade+0x740/0x740
[  952.707842]  ? __fget+0x225/0x360
[  952.707852]  ? do_vfs_ioctl+0xff0/0xff0
[  952.707861]  ? security_file_ioctl+0x83/0xb0
[  952.707880]  SyS_ioctl+0x7f/0xb0
[  952.707888]  ? do_vfs_ioctl+0xff0/0xff0
[  952.707899]  do_syscall_64+0x1d5/0x640
[  952.707915]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  952.707923] RIP: 0033:0x45e219
[  952.707928] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  952.707939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  952.707944] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  952.707950] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  952.707955] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d
[  952.707960] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  952.757166] FAULT_INJECTION: forcing a failure.
[  952.757166] name failslab, interval 1, probability 0, space 0, times 0
[  952.757178] CPU: 0 PID: 4130 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  952.757184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  952.757187] Call Trace:
[  952.757201]  dump_stack+0x1b2/0x283
[  952.757216]  should_fail.cold+0x10a/0x154
[  952.757237]  should_failslab+0xd6/0x130
[  952.757249]  kmem_cache_alloc+0x28e/0x3c0
[  952.757258]  ? mempool_free+0x1d0/0x1d0
[  952.757269]  mempool_create_node+0x2d2/0x3e0
[  952.757283]  bioset_create+0x31b/0x750
[  952.757292]  ? kmem_cache_alloc_node+0x38b/0x410
[  952.757302]  blk_alloc_queue_node+0xa8/0xb40
[  952.757313]  blk_mq_init_queue+0x42/0x90
[  952.757322]  loop_add+0x303/0x830
[  952.757331]  ? loop_queue_rq+0x280/0x280
[  952.757341]  ? trace_hardirqs_on+0x10/0x10
[  952.757352]  loop_control_ioctl+0x161/0x3f0
[  952.757360]  ? loop_lookup+0x190/0x190
[  952.757367]  ? SyS_write+0x1b7/0x210
[  952.757378]  ? loop_lookup+0x190/0x190
[  952.757388]  do_vfs_ioctl+0x75a/0xff0
[  952.757400]  ? ioctl_preallocate+0x1a0/0x1a0
[  952.757408]  ? lock_downgrade+0x740/0x740
[  952.757422]  ? __fget+0x225/0x360
[  952.757430]  ? do_vfs_ioctl+0xff0/0xff0
[  952.757439]  ? security_file_ioctl+0x83/0xb0
[  952.757449]  SyS_ioctl+0x7f/0xb0
[  952.757456]  ? do_vfs_ioctl+0xff0/0xff0
[  952.757467]  do_syscall_64+0x1d5/0x640
[  952.757483]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  952.757490] RIP: 0033:0x45e219
[  952.757494] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  952.757504] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  952.757509] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  952.757513] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  952.757518] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e
[  952.757530] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  952.815499] FAULT_INJECTION: forcing a failure.
[  952.815499] name failslab, interval 1, probability 0, space 0, times 0
[  953.261931] CPU: 1 PID: 4137 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  953.269751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  953.279099] Call Trace:
[  953.281685]  dump_stack+0x1b2/0x283
[  953.285309]  should_fail.cold+0x10a/0x154
[  953.289460]  should_failslab+0xd6/0x130
[  953.289472]  kmem_cache_alloc+0x28e/0x3c0
[  953.289481]  ? mempool_free+0x1d0/0x1d0
[  953.289491]  mempool_create_node+0x2d2/0x3e0
[  953.289505]  bioset_create+0x31b/0x750
[  953.309816]  ? kmem_cache_alloc_node+0x38b/0x410
[  953.314557]  blk_alloc_queue_node+0xa8/0xb40
[  953.318948]  blk_mq_init_queue+0x42/0x90
[  953.323013]  loop_add+0x303/0x830
[  953.326445]  ? loop_queue_rq+0x280/0x280
[  953.330502]  ? trace_hardirqs_on+0x10/0x10
[  953.334724]  loop_control_ioctl+0x161/0x3f0
[  953.339023]  ? loop_lookup+0x190/0x190
[  953.342893]  ? SyS_write+0x1b7/0x210
[  953.346616]  ? loop_lookup+0x190/0x190
[  953.350488]  do_vfs_ioctl+0x75a/0xff0
[  953.354270]  ? ioctl_preallocate+0x1a0/0x1a0
[  953.358657]  ? lock_downgrade+0x740/0x740
[  953.362786]  ? __fget+0x225/0x360
[  953.366575]  ? do_vfs_ioctl+0xff0/0xff0
[  953.370534]  ? security_file_ioctl+0x83/0xb0
[  953.374933]  SyS_ioctl+0x7f/0xb0
[  953.378298]  ? do_vfs_ioctl+0xff0/0xff0
[  953.382267]  do_syscall_64+0x1d5/0x640
[  953.386249]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  953.391428] RIP: 0033:0x45e219
[  953.394598] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  953.402545] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  953.409794] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
08:16:58 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8)

08:16:58 executing program 0:
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x2, 0x14203)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x2, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000850}, 0x4010)
r1 = socket(0x9, 0x4, 0x7fffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)=0x400)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x120, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x1, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:58 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r5 = accept(r4, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88010}, 0x40c0)

08:16:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8000}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x769}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x804)

[  953.417047] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  953.424295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f
[  953.431542] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:16:58 executing program 1 (fault-call:2 fault-nth:16):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:58 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r5 = accept(r4, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
pipe(&(0x7f0000000600))
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'})

08:16:58 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:58 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x1000000}, 0x8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080))
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x6}, 0x8)

[  953.520220] FAULT_INJECTION: forcing a failure.
[  953.520220] name failslab, interval 1, probability 0, space 0, times 0
[  953.553021] CPU: 0 PID: 4159 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  953.560854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  953.570210] Call Trace:
[  953.572800]  dump_stack+0x1b2/0x283
[  953.576477]  should_fail.cold+0x10a/0x154
[  953.580658]  should_failslab+0xd6/0x130
[  953.584633]  kmem_cache_alloc_node_trace+0x25a/0x400
[  953.589736]  ? mempool_free+0x1d0/0x1d0
[  953.593713]  mempool_create_node+0x76/0x3e0
[  953.598045]  ? mempool_kmalloc+0x20/0x20
[  953.602107]  bioset_create+0x506/0x750
[  953.606137]  ? kmem_cache_alloc_node+0x38b/0x410
[  953.610940]  blk_alloc_queue_node+0xa8/0xb40
[  953.610957]  blk_mq_init_queue+0x42/0x90
08:16:59 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250c0000683ab32600923987ff0f000000000000e65b0000000c006e800400d358010004000100110007bc0199dfbfcc93d8dd5e4daaa6635f0000008400280008006e8004d1d8cca66da7e24c0c3a710e41316b19473d707b2df0592211ff1862927e312555552081e65aadd74e3b2acc8ebc69929c8baa8ca9481ae6d572829d2f2f93eb285aac927ce9b1ccec8d14e99e07a8adef8731cc8937488e00862bbe2476944d95ba5e8d1a0db7189bfd0aa2ec79cee7e28ac9272af56709391cd0f9aa0b425a6c98393cc5a3ea17f7d519601c9eef0dae067bf5e98bc154f8fc"], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000084)

[  953.619406]  loop_add+0x303/0x830
[  953.622854]  ? loop_queue_rq+0x280/0x280
[  953.626905]  ? trace_hardirqs_on+0x10/0x10
[  953.631136]  loop_control_ioctl+0x161/0x3f0
[  953.635458]  ? loop_lookup+0x190/0x190
[  953.639354]  ? SyS_write+0x1b7/0x210
[  953.643074]  ? loop_lookup+0x190/0x190
[  953.646961]  do_vfs_ioctl+0x75a/0xff0
[  953.650768]  ? ioctl_preallocate+0x1a0/0x1a0
[  953.655181]  ? lock_downgrade+0x740/0x740
[  953.659331]  ? __fget+0x225/0x360
[  953.662780]  ? do_vfs_ioctl+0xff0/0xff0
08:16:59 executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
socketpair(0x6, 0x5, 0x2c, &(0x7f0000001a80)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x88, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4fdadc724401"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xff22}, @NL80211_ATTR_PMKID={0x14, 0x55, "a3dbb3d9a94adbc848c7a8fd7c4a2e53"}, @NL80211_ATTR_PMKID={0x14, 0x55, "17502e2952f356505249c96df51ae53b"}, @NL80211_ATTR_PMKID={0x14, 0x55, "238731dc09c6e89efc4b8402b6837237"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7fff}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x26}]}, 0x88}, 0x1, 0x0, 0x0, 0x40004}, 0x20040000)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x840)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000300)=ANY=[@ANYBLOB="f6160000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16dc}, 0x1, 0x0, 0x0, 0x40}, 0x4080)

[  953.666749]  ? security_file_ioctl+0x83/0xb0
[  953.671175]  SyS_ioctl+0x7f/0xb0
[  953.674535]  ? do_vfs_ioctl+0xff0/0xff0
[  953.678509]  do_syscall_64+0x1d5/0x640
[  953.682409]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  953.687599] RIP: 0033:0x45e219
[  953.690785] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  953.698490] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  953.705759] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  953.713028] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
08:16:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="94c403ddabab"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="eafaae85cab6"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x51fcf0a6ac2c2cb8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x104, 0x1d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4440)

08:16:59 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r4 = accept(r3, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
pipe(&(0x7f0000000600))
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:59 executing program 1 (fault-call:2 fault-nth:17):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:59 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x401, 0x40180)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000080)=0x9)

[  953.720486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  953.727747] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:16:59 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xff}, 0x8)

08:16:59 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r4 = accept(r3, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:59 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x32}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x48080)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:16:59 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00')
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000600)={&(0x7f0000000380), 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x184, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x70, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @preq={0x82, 0x62, @ext={{0x1}, 0x1, 0x75, 0x401, @broadcast, 0x10001, @device_a, 0x64, 0x1, 0x6, [{{0x1}, @broadcast, 0xc1}, {{0x1}, @broadcast, 0x5}, {{0x0, 0x0, 0x1}, @device_b, 0x20}, {{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @device_a, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x8}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xf5, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ssid={0x0, 0x6, @default_ap_ssid}, @erp={0x2a, 0x1, {0x0, 0x1}}, @perr={0x84, 0xa1, {0x7, 0x9, [@ext={{}, @device_b, 0x2, @broadcast, 0x1c}, @ext={{}, @device_a, 0x81, @device_b, 0xa}, @ext={{}, @device_b, 0x1, @broadcast, 0x15}, @ext={{}, @broadcast, 0x3be, @broadcast, 0xa}, @ext={{}, @device_b, 0xff79, @device_a, 0x13}, @not_ext={{}, @device_b, 0x8, "", 0x34}, @ext={{}, @device_b, 0x6, @broadcast, 0x1d}, @ext={{}, @device_a, 0x9, @device_b, 0x1a}, @not_ext={{}, @device_b, 0xffffffff, "", 0x11}]}}, @peer_mgmt={0x75, 0x6, {0x0, 0x3, @void, @val=0x25, @void}}, @mesh_chsw={0x76, 0x6, {0x8, 0x0, 0xd, 0xffff}}, @preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x2, 0x3b, 0x5, @broadcast, 0x6, @broadcast, 0x7, 0x101, 0x1, [{{0x1, 0x0, 0x1}, @broadcast}]}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000810}, 0x4c001)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x101000, 0x0)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DEBUG={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1c}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)

[  953.811830] FAULT_INJECTION: forcing a failure.
[  953.811830] name failslab, interval 1, probability 0, space 0, times 0
08:16:59 executing program 4:
socketpair(0xf, 0x4, 0x5, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x16c, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x12, 0xe}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x80, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ce968281833e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="2ec502b18698"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x101}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xbe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2400000}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x20}, @NL80211_ATTR_SCAN_SUPP_RATES={0xb4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xaf, 0x2, "ca71fff4799efca040fe8942707929fe0ba0e8ebecc7e77485451ed56fac4dafd54fac650f8e756a9b57038af488026fdd1d8dc0dc3565ff151adc3a15f7cfe9b84b21e57086ede44d0816b5a65fa5849a05e79687e70e7d45db4e07eedfca9c2e4f837d35153e6a841c1c443fa813c46f78487af244a76f441c5285b41a19d8111915e515c7330123f94fbebefccc54477460ce8e48b8a847ccc81793d4a26245b181eb173e98687c0c72"}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4040880}, 0x44010)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00')
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0xa2a, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbaa57419fb655c57}, 0x80)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4)

08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  953.884586] CPU: 0 PID: 4188 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  953.892450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  953.901810] Call Trace:
[  953.904402]  dump_stack+0x1b2/0x283
[  953.908052]  should_fail.cold+0x10a/0x154
[  953.908073]  should_failslab+0xd6/0x130
[  953.908088]  kmem_cache_alloc_node_trace+0x25a/0x400
[  953.908100]  ? mempool_free+0x1d0/0x1d0
[  953.908112]  __kmalloc_node+0x38/0x70
[  953.908124]  mempool_create_node+0xb1/0x3e0
08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(0x0, 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(0x0, 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  953.908133]  ? mempool_kmalloc+0x20/0x20
[  953.908147]  bioset_create+0x506/0x750
[  953.908157]  ? kmem_cache_alloc_node+0x38b/0x410
[  953.908169]  blk_alloc_queue_node+0xa8/0xb40
[  953.908182]  blk_mq_init_queue+0x42/0x90
[  953.908193]  loop_add+0x303/0x830
[  953.908203]  ? loop_queue_rq+0x280/0x280
[  953.908215]  ? trace_hardirqs_on+0x10/0x10
[  953.966381]  loop_control_ioctl+0x161/0x3f0
[  953.970800]  ? loop_lookup+0x190/0x190
[  953.974690]  ? SyS_write+0x1b7/0x210
[  953.978403]  ? loop_lookup+0x190/0x190
08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(0x0, 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  953.982293]  do_vfs_ioctl+0x75a/0xff0
[  953.986096]  ? ioctl_preallocate+0x1a0/0x1a0
[  953.990501]  ? lock_downgrade+0x740/0x740
[  953.994650]  ? __fget+0x225/0x360
[  953.998138]  ? do_vfs_ioctl+0xff0/0xff0
[  954.002108]  ? security_file_ioctl+0x83/0xb0
[  954.006516]  SyS_ioctl+0x7f/0xb0
[  954.009895]  ? do_vfs_ioctl+0xff0/0xff0
[  954.009906]  do_syscall_64+0x1d5/0x640
[  954.009922]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  954.022928] RIP: 0033:0x45e219
[  954.026110] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:59 executing program 1 (fault-call:2 fault-nth:18):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:59 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x2}, 0x8)
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf8, 0x7c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xe7, 0x2a, [@challenge={0x10, 0x1, 0xde}, @cf={0x4, 0x6, {0x9, 0x81, 0xfff, 0x40}}, @supported_rates={0x1, 0x4, [{0x2, 0x1}, {0x3}, {0x9, 0x1}, {0x2f, 0x1}]}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ssid={0x0, 0xc, @random="6feadc47dd6b0f09fff7a5eb"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @fast_bss_trans={0x37, 0x78, {0x3f, 0x1, "6e233e13277d52c1c80c60378e2fad26", "b0396c938411658a2932851b12153fa8eca71f35a8ebc10c45500507a18e1045", "4f1f1ddc13a4d0f4df166926be5f2c0c20439694ddbb7f6b18fcbfa587cef9da", [{0x3, 0x24, "8dcd65790f15eee1a08bf6db64dd6f937f4709cf8567af80ba5184782031f6ec86a28f7d"}]}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x4, @broadcast, 0x7, @device_a, 0x2, 0x9, @device_a, 0x4}}, @ssid={0x0, 0x1b, @random="5b12bb8becb51351139a934e57ed62f0577392029cd7529a828d89"}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@supported_rates={0x1, 0x5, [{0x10}, {0xb, 0x1}, {0x6}, {0x5}, {0x60}]}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x6, 0x0, {0x40, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x400, 0x3, 0x4}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x1}, 0x20008000)

08:16:59 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r4 = accept(r3, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:16:59 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
socketpair(0x3, 0x80000, 0x3, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x8, 0x5}, {0x9, 0x2}, {0x8d, 0x6}, {0x9, 0x3}, {0x4, 0x4}, {0x3}, {0x9d, 0x3}, {0x9}, {0x81, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x8, 0x5}, {0x40, 0x6}], "5eb8d1cadb3257a9"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x20008000)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffd69}}], 0x1, 0x0)

08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000040)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)={0x14, 0x0, 0x100, 0x3, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)

[  954.034081] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  954.041356] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  954.048624] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  954.055896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011
[  954.063175] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:16:59 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r4 = accept(r3, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  954.137646] FAULT_INJECTION: forcing a failure.
[  954.137646] name failslab, interval 1, probability 0, space 0, times 0
[  954.154620] CPU: 1 PID: 4232 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  954.162445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  954.171799] Call Trace:
[  954.174388]  dump_stack+0x1b2/0x283
[  954.178023]  should_fail.cold+0x10a/0x154
[  954.182180]  should_failslab+0xd6/0x130
[  954.186177]  kmem_cache_alloc+0x28e/0x3c0
[  954.186189]  ? mempool_free+0x1d0/0x1d0
[  954.194642]  mempool_create_node+0x2d2/0x3e0
[  954.199103]  bioset_create+0x506/0x750
[  954.202992]  ? kmem_cache_alloc_node+0x38b/0x410
[  954.207758]  blk_alloc_queue_node+0xa8/0xb40
[  954.212183]  blk_mq_init_queue+0x42/0x90
[  954.212196]  loop_add+0x303/0x830
[  954.219696]  ? loop_queue_rq+0x280/0x280
[  954.223758]  ? trace_hardirqs_on+0x10/0x10
[  954.227996]  loop_control_ioctl+0x161/0x3f0
[  954.232316]  ? loop_lookup+0x190/0x190
08:16:59 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0xc2d468cbd11ac2b6, 0x0)
r4 = getpid()
ioprio_set$pid(0x2, r4, 0x2004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
r7 = getpid()
r8 = getpid()
ioprio_set$pid(0x3, r8, 0x2004)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x70}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xe800}, 0x4)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x71010005}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bf770be9c4"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "bf115038ecff"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x200048c1)

08:16:59 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8002}, 0x23)

08:16:59 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'vcan0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xfffb, 0xfff1}, {0x6, 0xb}, {0xc, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)

08:16:59 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect(r0, &(0x7f0000000080)=@generic={0x5, "3cf605f374af67f3ebf61dd077ab9bd3a744c35ff351473bb3db98d8b285e91e4b400dd11d67aaf20b791e75506ce552075df0fac8742ba14be5e514b92aaf6819347df2356f684d372d72446b517249b900781946b343f7bf24f439576cc59f2d35fc74ec97775f5615630b8df32d0060ab30d3aec76aa4a64f1d5b1504"}, 0x80)

08:16:59 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x5c, 0x0, 0x100, 0x1070bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "3baf3de7ccaa16e3450dcc74521c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008881}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1be}, @NL80211_ATTR_PMK={0x14, 0xfe, "af80ba522af6ca7addb34429d59a78e4"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "7eb45bc7a0365b6e1d2b4137c562c780"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x26}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4b}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x48000)

[  954.236203]  ? SyS_write+0x1b7/0x210
[  954.240354]  ? loop_lookup+0x190/0x190
[  954.244511]  do_vfs_ioctl+0x75a/0xff0
[  954.248311]  ? ioctl_preallocate+0x1a0/0x1a0
[  954.252714]  ? lock_downgrade+0x740/0x740
[  954.256895]  ? __fget+0x225/0x360
[  954.260347]  ? do_vfs_ioctl+0xff0/0xff0
[  954.264331]  ? security_file_ioctl+0x83/0xb0
08:16:59 executing program 1 (fault-call:2 fault-nth:19):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:59 executing program 4:
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x2, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

08:16:59 executing program 2:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
accept4$tipc(r0, 0x0, &(0x7f00000001c0), 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
accept4$tipc(r2, 0x0, &(0x7f00000000c0), 0x40800)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:16:59 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
accept(r3, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  954.264343]  SyS_ioctl+0x7f/0xb0
[  954.264351]  ? do_vfs_ioctl+0xff0/0xff0
[  954.264363]  do_syscall_64+0x1d5/0x640
[  954.264380]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  954.264387] RIP: 0033:0x45e219
[  954.264392] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
08:16:59 executing program 1 (fault-call:2 fault-nth:20):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:16:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000000)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000649cef1ac6158e6fd83a4a3800", @ANYRES32=r0, @ANYBLOB="0000d247ef95483738c22a00eeab8a7ffc1f01d404c45a55856ac924af210d2ad2f2ccc28667c8a7808af7bc9e2d0a8c5489c07ed7bb965e6a1f5bc89bb75505c1d89c922478702c6931ac00000000000000084c6720808d1949f0da7a2aa60eec3f54d3582e18c7746a5c25c6af43c4fcd206abe4bcec1a3e1e6f200c9e4de78ba15180adec225c41eec96da06a96986a139bb5b322db8a17decf259c6999d8ba1a418f4b091fe0b9fecca6"], 0x71}}, 0x0)

08:16:59 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:16:59 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x3}, 0xfffffffffffffe7d)

08:16:59 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  954.264401] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  954.264406] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
08:16:59 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x1b}, 0x8)

[  954.264411] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  954.264416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012
[  954.264422] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  954.335120] FAULT_INJECTION: forcing a failure.
[  954.335120] name failslab, interval 1, probability 0, space 0, times 0
[  954.335131] CPU: 0 PID: 4263 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  954.335137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  954.335141] Call Trace:
[  954.335158]  dump_stack+0x1b2/0x283
[  954.335177]  should_fail.cold+0x10a/0x154
[  954.335194]  should_failslab+0xd6/0x130
[  954.335207]  kmem_cache_alloc+0x28e/0x3c0
[  954.335215]  ? mempool_free+0x1d0/0x1d0
[  954.335224]  mempool_create_node+0x2d2/0x3e0
[  954.335240]  bioset_create+0x506/0x750
[  954.335250]  ? kmem_cache_alloc_node+0x38b/0x410
[  954.335262]  blk_alloc_queue_node+0xa8/0xb40
[  954.335274]  blk_mq_init_queue+0x42/0x90
[  954.335283]  loop_add+0x303/0x830
[  954.335293]  ? loop_queue_rq+0x280/0x280
[  954.335304]  ? trace_hardirqs_on+0x10/0x10
[  954.335316]  loop_control_ioctl+0x161/0x3f0
[  954.335326]  ? loop_lookup+0x190/0x190
[  954.335335]  ? SyS_write+0x1b7/0x210
[  954.335355]  ? loop_lookup+0x190/0x190
[  954.335366]  do_vfs_ioctl+0x75a/0xff0
[  954.335379]  ? ioctl_preallocate+0x1a0/0x1a0
[  954.335387]  ? lock_downgrade+0x740/0x740
[  954.335401]  ? __fget+0x225/0x360
[  954.335412]  ? do_vfs_ioctl+0xff0/0xff0
[  954.335422]  ? security_file_ioctl+0x83/0xb0
[  954.335433]  SyS_ioctl+0x7f/0xb0
[  954.335441]  ? do_vfs_ioctl+0xff0/0xff0
[  954.335453]  do_syscall_64+0x1d5/0x640
[  954.335469]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  954.335476] RIP: 0033:0x45e219
[  954.335481] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  954.335491] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  954.335497] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  954.335502] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  954.335508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013
[  954.335513] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  954.392108] FAULT_INJECTION: forcing a failure.
[  954.392108] name failslab, interval 1, probability 0, space 0, times 0
[  954.616412] CPU: 1 PID: 4270 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  954.624225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  954.633560] Call Trace:
[  954.636148]  dump_stack+0x1b2/0x283
[  954.640642]  should_fail.cold+0x10a/0x154
[  954.644773]  should_failslab+0xd6/0x130
[  954.648726]  kmem_cache_alloc_node_trace+0x25a/0x400
[  954.653814]  bdi_alloc_node+0x5d/0x2e0
[  954.657683]  blk_alloc_queue_node+0xe2/0xb40
[  954.662074]  blk_mq_init_queue+0x42/0x90
[  954.666112]  loop_add+0x303/0x830
[  954.669629]  ? loop_queue_rq+0x280/0x280
[  954.673670]  ? trace_hardirqs_on+0x10/0x10
[  954.677885]  loop_control_ioctl+0x161/0x3f0
[  954.682184]  ? loop_lookup+0x190/0x190
[  954.686062]  ? SyS_write+0x1b7/0x210
[  954.689768]  ? loop_lookup+0x190/0x190
[  954.693633]  do_vfs_ioctl+0x75a/0xff0
[  954.697420]  ? ioctl_preallocate+0x1a0/0x1a0
[  954.701820]  ? lock_downgrade+0x740/0x740
[  954.705965]  ? __fget+0x225/0x360
[  954.709525]  ? do_vfs_ioctl+0xff0/0xff0
[  954.713485]  ? security_file_ioctl+0x83/0xb0
[  954.725678]  SyS_ioctl+0x7f/0xb0
[  954.732075]  ? do_vfs_ioctl+0xff0/0xff0
[  954.736044]  do_syscall_64+0x1d5/0x640
08:17:00 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x10600)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x9}, 0x8)

08:17:00 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:00 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0x8)

08:17:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x100, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

[  954.739982]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  954.745272] RIP: 0033:0x45e219
[  954.748442] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  954.756137] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  954.763414] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  954.770702] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  954.777953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014
[  954.785202] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:00 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:00 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

08:17:00 executing program 1 (fault-call:2 fault-nth:21):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xe00000000}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e4f9ffffffff73000000"], 0x71}}, 0x0)

08:17:00 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:00 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:00 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x40000)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x10, 0x70bd26, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x406c880}, 0xc090)

08:17:00 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x60}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x9d8a3313fe9cefd1}, 0x4810)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

[  954.876721] FAULT_INJECTION: forcing a failure.
[  954.876721] name failslab, interval 1, probability 0, space 0, times 0
[  954.908177] CPU: 1 PID: 4293 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  954.916010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
08:17:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x73}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

08:17:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x3, 0x6, 0x0, {0xe90, 0x1ffa, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x4, 0x3}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x4c}}, 0x24004884)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

[  954.925383] Call Trace:
[  954.925399]  dump_stack+0x1b2/0x283
[  954.925415]  should_fail.cold+0x10a/0x154
[  954.925430]  should_failslab+0xd6/0x130
[  954.925444]  kmem_cache_alloc_node_trace+0x25a/0x400
[  954.925460]  bdi_alloc_node+0x5d/0x2e0
[  954.925470]  blk_alloc_queue_node+0xe2/0xb40
[  954.925487]  blk_mq_init_queue+0x42/0x90
[  954.925499]  loop_add+0x303/0x830
[  954.925510]  ? loop_queue_rq+0x280/0x280
[  954.925520]  ? trace_hardirqs_on+0x10/0x10
[  954.925531]  loop_control_ioctl+0x161/0x3f0
08:17:00 executing program 4:
socketpair(0x18, 0x0, 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c010}, 0x0)

08:17:00 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x4}, 0x8)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

08:17:00 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:00 executing program 4:
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000840)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x9}, 0x8)

[  954.925539]  ? loop_lookup+0x190/0x190
[  954.925548]  ? SyS_write+0x1b7/0x210
[  954.925559]  ? loop_lookup+0x190/0x190
[  954.925568]  do_vfs_ioctl+0x75a/0xff0
[  954.925579]  ? ioctl_preallocate+0x1a0/0x1a0
[  954.925587]  ? lock_downgrade+0x740/0x740
[  954.925600]  ? __fget+0x225/0x360
[  954.925609]  ? do_vfs_ioctl+0xff0/0xff0
[  954.925617]  ? security_file_ioctl+0x83/0xb0
[  954.925631]  SyS_ioctl+0x7f/0xb0
[  955.012500]  ? do_vfs_ioctl+0xff0/0xff0
[  955.012514]  do_syscall_64+0x1d5/0x640
08:17:00 executing program 1 (fault-call:2 fault-nth:22):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, 0x0, 0x8, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x26}}}}}, 0x20}}, 0x0)

08:17:00 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  955.012532]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  955.012540] RIP: 0033:0x45e219
[  955.012545] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  955.012555] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  955.012560] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  955.012566] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  955.012571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
[  955.012577] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  955.104340] FAULT_INJECTION: forcing a failure.
[  955.104340] name failslab, interval 1, probability 0, space 0, times 0
[  955.137587] CPU: 1 PID: 4329 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  955.145403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  955.154754] Call Trace:
[  955.157358]  dump_stack+0x1b2/0x283
[  955.160991]  should_fail.cold+0x10a/0x154
[  955.165139]  should_failslab+0xd6/0x130
[  955.169114]  kmem_cache_alloc_trace+0x29a/0x3d0
[  955.173782]  blk_alloc_queue_stats+0x3c/0x100
[  955.178259]  blk_alloc_queue_node+0x125/0xb40
[  955.182753]  blk_mq_init_queue+0x42/0x90
[  955.186799]  loop_add+0x303/0x830
[  955.190231]  ? loop_queue_rq+0x280/0x280
[  955.194273]  ? trace_hardirqs_on+0x10/0x10
[  955.198490]  loop_control_ioctl+0x161/0x3f0
[  955.202791]  ? loop_lookup+0x190/0x190
[  955.206672]  ? SyS_write+0x1b7/0x210
[  955.210374]  ? loop_lookup+0x190/0x190
[  955.214276]  do_vfs_ioctl+0x75a/0xff0
[  955.218065]  ? ioctl_preallocate+0x1a0/0x1a0
[  955.222471]  ? lock_downgrade+0x740/0x740
[  955.226618]  ? __fget+0x225/0x360
[  955.230057]  ? do_vfs_ioctl+0xff0/0xff0
[  955.234025]  ? security_file_ioctl+0x83/0xb0
[  955.238413]  SyS_ioctl+0x7f/0xb0
[  955.241762]  ? do_vfs_ioctl+0xff0/0xff0
[  955.245739]  do_syscall_64+0x1d5/0x640
08:17:00 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:00 executing program 4:
openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x402c02)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x4}, 0xfffffd1c)

08:17:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40885}, 0x4800)

08:17:00 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x7}, 0x8)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$kcm(r0, &(0x7f0000001640)={&(0x7f00000000c0)=@l2tp, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/234, 0xea}, {&(0x7f0000001240)=""/112, 0x70}, {&(0x7f00000012c0)=""/253, 0xfd}, {&(0x7f00000013c0)=""/85, 0x55}, {&(0x7f0000001440)=""/157, 0x9d}, {&(0x7f0000001500)=""/49, 0x31}, {&(0x7f0000001540)=""/46, 0x2e}], 0x8, &(0x7f0000001600)=""/39, 0x27}, 0x20)

08:17:00 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  955.249703]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  955.254875] RIP: 0033:0x45e219
[  955.258044] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  955.265730] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  955.273005] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  955.280255] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  955.287517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016
[  955.294765] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:00 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:00 executing program 1 (fault-call:2 fault-nth:23):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:00 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x4}, 0x8)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f00000000c0)=""/195, 0xc3)

08:17:00 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x318, 0x200000)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000140)={0x4, 0x2, 0x7fffffff, 0x7, &(0x7f0000000100)=[{0xfffe, 0xe6e, 0x200, 0xf343}, {0x9, 0x1, 0x101, 0x8001}, {0x1000, 0x3f, 0x8001, 0x5}, {0x1, 0xdede, 0x9, 0x8}, {0x8, 0x2, 0x20, 0x100}, {0x2, 0x1f, 0x7ff, 0xf0}, {0xf800, 0x200, 0x3, 0x9}]})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x0, <r1=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0x4)

08:17:00 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:00 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:00 executing program 2:
socket$inet_icmp(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

[  955.366344] FAULT_INJECTION: forcing a failure.
[  955.366344] name failslab, interval 1, probability 0, space 0, times 0
08:17:00 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)

[  955.429205] CPU: 1 PID: 4344 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  955.437052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  955.446417] Call Trace:
[  955.449015]  dump_stack+0x1b2/0x283
[  955.452657]  should_fail.cold+0x10a/0x154
[  955.456811]  should_failslab+0xd6/0x130
[  955.460790]  kmem_cache_alloc_node_trace+0x25a/0x400
[  955.465910]  blkg_alloc+0x92/0x5c0
[  955.465926]  blkcg_init_queue+0x23/0x410
[  955.465936]  blk_alloc_queue_node+0x826/0xb40
08:17:00 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffffd}, 0x8)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

08:17:00 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:00 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00e000fd994c933acaea84cfe71cd8583005916d6b76ee3dafe6ab9b500d2b77d16296a2b822553a2e6b682c79f89257e886a8d215827b5a5e5eda81000000e12a704f66603c285aaeb912065b696ac44d1b7c89b069458564608c62efb5b8a83543e35c1e0319bb1d9e740ef42dc2564fbdf0c9eb6c726b540a8d37c360aba928634a61bd8c318b2c3cfdbb03e1770f9a0baafe35c111d225a080865b56e25835a9adf2717c501d816da9b464be95b869a32a955e9700378d651662776704b5c8b6befb4ff3b9620836c0b529ee253fd1d466c1d321c04694102878ca8db2249f0de1c9e590978a62506bff7b"], 0x71}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x20}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000094}, 0xc000)

[  955.465950]  blk_mq_init_queue+0x42/0x90
[  955.465960]  loop_add+0x303/0x830
[  955.465970]  ? loop_queue_rq+0x280/0x280
[  955.489621]  ? trace_hardirqs_on+0x10/0x10
[  955.489633]  loop_control_ioctl+0x161/0x3f0
[  955.489643]  ? loop_lookup+0x190/0x190
08:17:00 executing program 1 (fault-call:2 fault-nth:24):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:00 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
connect(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8ef}, 0x8)

08:17:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000080)=ANY=[@ANYBLOB="6adc860dcb5180b51dc3557581583cf7a7", @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1a, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x54}, 0x44000)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000))

[  955.502137]  ? SyS_write+0x1b7/0x210
[  955.502151]  ? loop_lookup+0x190/0x190
[  955.502162]  do_vfs_ioctl+0x75a/0xff0
[  955.502175]  ? ioctl_preallocate+0x1a0/0x1a0
08:17:01 executing program 3:
syz_open_procfs$namespace(0x0, 0x0)

08:17:01 executing program 1 (fault-call:2 fault-nth:25):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:01 executing program 3:
syz_open_procfs$namespace(0x0, 0x0)

08:17:01 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x400000}, 0x8)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x800)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0xc})

[  955.502184]  ? lock_downgrade+0x740/0x740
[  955.502198]  ? __fget+0x225/0x360
[  955.502208]  ? do_vfs_ioctl+0xff0/0xff0
[  955.502219]  ? security_file_ioctl+0x83/0xb0
[  955.502229]  SyS_ioctl+0x7f/0xb0
[  955.502238]  ? do_vfs_ioctl+0xff0/0xff0
[  955.502249]  do_syscall_64+0x1d5/0x640
[  955.502267]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  955.502274] RIP: 0033:0x45e219
[  955.502280] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  955.502290] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  955.502295] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  955.502301] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  955.502306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017
[  955.502311] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  955.573508] FAULT_INJECTION: forcing a failure.
[  955.573508] name failslab, interval 1, probability 0, space 0, times 0
[  955.573521] CPU: 1 PID: 4374 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  955.573527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  955.573531] Call Trace:
[  955.573546]  dump_stack+0x1b2/0x283
[  955.573567]  should_fail.cold+0x10a/0x154
[  955.573582]  should_failslab+0xd6/0x130
[  955.573596]  kmem_cache_alloc_node_trace+0x25a/0x400
[  955.573612]  blk_throtl_init+0x7a/0x590
[  955.573629]  blkcg_init_queue+0x18f/0x410
[  955.573642]  blk_alloc_queue_node+0x826/0xb40
[  955.573656]  blk_mq_init_queue+0x42/0x90
[  955.573667]  loop_add+0x303/0x830
[  955.573678]  ? loop_queue_rq+0x280/0x280
[  955.573688]  ? trace_hardirqs_on+0x10/0x10
[  955.573700]  loop_control_ioctl+0x161/0x3f0
[  955.573709]  ? loop_lookup+0x190/0x190
[  955.573718]  ? SyS_write+0x1b7/0x210
[  955.573731]  ? loop_lookup+0x190/0x190
[  955.573741]  do_vfs_ioctl+0x75a/0xff0
[  955.573753]  ? ioctl_preallocate+0x1a0/0x1a0
[  955.573761]  ? lock_downgrade+0x740/0x740
[  955.573775]  ? __fget+0x225/0x360
[  955.573785]  ? do_vfs_ioctl+0xff0/0xff0
[  955.573795]  ? security_file_ioctl+0x83/0xb0
[  955.573806]  SyS_ioctl+0x7f/0xb0
[  955.573814]  ? do_vfs_ioctl+0xff0/0xff0
[  955.573825]  do_syscall_64+0x1d5/0x640
[  955.573841]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  955.573849] RIP: 0033:0x45e219
[  955.573854] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  955.573864] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  955.573870] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  955.573875] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  955.573881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018
[  955.573886] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  955.616455] FAULT_INJECTION: forcing a failure.
[  955.616455] name failslab, interval 1, probability 0, space 0, times 0
[  955.616467] CPU: 1 PID: 4384 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  955.616473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  955.616477] Call Trace:
[  955.616490]  dump_stack+0x1b2/0x283
[  955.616506]  should_fail.cold+0x10a/0x154
[  955.616521]  should_failslab+0xd6/0x130
[  955.616535]  kmem_cache_alloc_node_trace+0x25a/0x400
[  955.616549]  blk_throtl_init+0x7a/0x590
[  955.616569]  blkcg_init_queue+0x18f/0x410
[  955.616582]  blk_alloc_queue_node+0x826/0xb40
[  955.616599]  blk_mq_init_queue+0x42/0x90
[  955.616611]  loop_add+0x303/0x830
[  955.616632]  ? loop_queue_rq+0x280/0x280
[  955.616643]  ? trace_hardirqs_on+0x10/0x10
[  955.616656]  loop_control_ioctl+0x161/0x3f0
[  955.616666]  ? loop_lookup+0x190/0x190
[  955.616675]  ? SyS_write+0x1b7/0x210
[  955.616688]  ? loop_lookup+0x190/0x190
[  955.616698]  do_vfs_ioctl+0x75a/0xff0
[  955.616709]  ? ioctl_preallocate+0x1a0/0x1a0
[  955.616717]  ? lock_downgrade+0x740/0x740
[  955.616732]  ? __fget+0x225/0x360
[  955.616742]  ? do_vfs_ioctl+0xff0/0xff0
[  955.616752]  ? security_file_ioctl+0x83/0xb0
[  955.616763]  SyS_ioctl+0x7f/0xb0
[  955.616771]  ? do_vfs_ioctl+0xff0/0xff0
[  955.616782]  do_syscall_64+0x1d5/0x640
[  955.616799]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  955.616807] RIP: 0033:0x45e219
[  955.616812] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
08:17:01 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:17:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2a, 0x8, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x22}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x44000)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:17:01 executing program 1 (fault-call:2 fault-nth:26):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:01 executing program 3:
syz_open_procfs$namespace(0x0, 0x0)

08:17:01 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x56b}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x75400000}, 0x8)
socket(0x25, 0x1, 0x0)

08:17:01 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, 0x0, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  955.616822] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  955.616828] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  955.616833] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  955.616839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019
[  955.616844] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:01 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:01 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, 0x0, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  956.123441] FAULT_INJECTION: forcing a failure.
[  956.123441] name failslab, interval 1, probability 0, space 0, times 0
[  956.154895] CPU: 1 PID: 4396 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  956.162712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  956.172670] Call Trace:
[  956.175256]  dump_stack+0x1b2/0x283
[  956.175272]  should_fail.cold+0x10a/0x154
[  956.175286]  should_failslab+0xd6/0x130
[  956.175300]  kmem_cache_alloc_node_trace+0x25a/0x400
[  956.192277]  throtl_pd_alloc+0x59/0x990
[  956.196250]  ? throtl_add_bio_tg+0x1e0/0x1e0
[  956.200673]  blkcg_activate_policy+0x115/0x5c0
[  956.200686]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  956.210383]  blk_throtl_init+0x408/0x590
[  956.210395]  blkcg_init_queue+0x18f/0x410
[  956.219382]  blk_alloc_queue_node+0x826/0xb40
[  956.219396]  blk_mq_init_queue+0x42/0x90
[  956.219406]  loop_add+0x303/0x830
[  956.219416]  ? loop_queue_rq+0x280/0x280
[  956.219427]  ? trace_hardirqs_on+0x10/0x10
[  956.219442]  loop_control_ioctl+0x161/0x3f0
[  956.219450]  ? loop_lookup+0x190/0x190
[  956.219463]  ? SyS_write+0x1b7/0x210
[  956.251882]  ? loop_lookup+0x190/0x190
[  956.251894]  do_vfs_ioctl+0x75a/0xff0
[  956.251907]  ? ioctl_preallocate+0x1a0/0x1a0
[  956.251916]  ? lock_downgrade+0x740/0x740
[  956.251930]  ? __fget+0x225/0x360
[  956.251940]  ? do_vfs_ioctl+0xff0/0xff0
[  956.251951]  ? security_file_ioctl+0x83/0xb0
[  956.251961]  SyS_ioctl+0x7f/0xb0
[  956.251969]  ? do_vfs_ioctl+0xff0/0xff0
[  956.251981]  do_syscall_64+0x1d5/0x640
[  956.251998]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  956.252005] RIP: 0033:0x45e219
[  956.252010] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  956.252021] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  956.252026] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
08:17:01 executing program 0:
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000031c0)=0x9)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r0=>0x0})
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000180)=@ll={0x11, 0xf7, 0x0, 0x1, 0x1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="cc7cdbaf8cf23daa54bf66da3ada1d0436ef217abf26292f0eee6d5c7f2bfdfd902a29d81e0a52bdd10a18d25598d0d8b3d99bb4013be6a94aeadd54a76c081dbcfde0bf618de2e27f38073459257dd5d8f53b57841e71f96101b62a8027", 0x5e}, {&(0x7f0000000040)="b567e9353ae217", 0x7}, {&(0x7f0000000280)="2bb73de916c84271610553427d1d841dee", 0x11}, {&(0x7f0000002280)="64fdf4f178aaa8107797a6a13abdd273a4ce10bd5d33fa0dcfb5331c823e9cdbd7bcbf4be8a7e61c94d3314a295839644b13a93902c4c36c5f4f626c0bde693f79d40301626b083a6e3ee64f0789321c3433a94fe446d10de471ad85d91e7a275f77dd231373749b882785d25c738c54dae80edda66cc895afce52ec8b91c6a5c08d2765aacfc5c48e2f642be4fa3a41122ece9b842e184e8ffd8a6544e10e4a15a972d19490a95b23d0b5ab20465ed28287b1b534b26d150e396f743573b065affa0ddf24fe90bb96e873edaef38dbef02917030553ad24279c287e764f0732eaa587e37bac2608df90126095967ba32b22bb523f2f550b20b0ce52b3", 0xfd}, {&(0x7f00000002c0)="3b6e80fb2f6eb309e92c6856b1588676eecfc786f73702f8e7e68631e902a00768a17aaf5e6834e5237611b1c470e4a286b99dd5b0b856806aa6b3c544760a01e0f2a17252557a9c0a2cb90576114480157dc668a1c1894440c3ed1493810c5864de6fb556645a519f68a64f5121b061f356726aa04368a6d07b9c10e9de681d41dcc01d568d7e9ec70a9ee96b3fe42aa50eaed9ebc9cb0881a7c9", 0x9b}, {&(0x7f0000000480)="aef19311d572dee54306e248575f1fcccd4b7b7755795864141aada5ff3bed5b3e6c8fed7186568b20eedec1dac5907ae5199600bd70ccf6225f34204dd61da28cec8a6d04c68ff7905878e60202b8506c0c68dac702a3a1d65616cdfd6ee0c0937933554c93714a8212dc2bc8a1a74bbac04f150934fc6b545c54d30abdfe1e61a333ebaf87e88519e5781fedba8b0f8076df5dddd2347cda2d47242d3c31ec0621aa3b20860bea9b6e2e39b8de7d816020c922640378a598f7b98f49a840ad0ea87d0a6f3e1349d200dbe76428d266f4b026749bcce851722906d285288deefd", 0xe1}], 0x6, &(0x7f0000000600)=[{0xd8, 0x112, 0x9, "682242b331ea15c3e11afadeed2977aac7d57e5dffa80f1045f304394667f7d0aac2fee3243c60b9b9b0f328788fcd317e99f32dc3589a68eccd009c4233775cae7aaf18559dcb18f31e20cfbd31ae66575620a6a6bd65684091bbb18f984b32d058e39e1a590889f5a7451f55024b47e4c79a82b5daab5c924cfcf926cc781eb43e921601e50b8045de5f914b4c9ffe1558b169ba5df42d328d26eb45c8c1b9b08cdc51cd4aeeb5da96a94081a09d630a92416a1c6741587e5a84babe5985c2d2ad8f3244"}, {0xa0, 0x102, 0x0, "6bc8651d9c8e4a1e94712baf812421e5fb01c624fc77449167751542b9e662184e2a736d5d52a123fa351c3695a018834a9972908341bb8952146806caa32ec70a3c732322a6d35d67195cb6040aa72fedbc0b5594dbc511b1d2ce3745fc337c8b52b61a62c193f1b61e130192901ede1f522efae78335c23aab5574d018de43603a1698f1f515bb21a572bc"}, {0xc8, 0x113, 0x1, "559651310b993c5858badb147e4a77afefcce66f39ae2768ad626b13b21215f90a5404c1a766aa9e26076679f2ab2204726b610b65cd3e5325123079fa71476978cec02455ed5a0b939ede5b3c7867bfd2117ead6aee222784a256b3779eaa44e369e4fa54b09b87bbc765836626c38890f8ffaa3972d3e7e79d33b783256cb1987f1bffc68804552fdfe419626a57e727cb79ec8efabad9d41da35daae94dbb2f735777104a7ebace54b5369f943bbe6242943c"}, {0xa8, 0x108, 0x9, "ed450bd6d50db15470945450709bcab3d39f4a0424fba5ce132c615b4ef1466740d65d60da08903d086516476c0d50b6189a2591d4c10b52eed2dea4ac837ccacadb0bd89d3c9f50aa115106e1ef2499806ec466db443645dfa45029649e12626fb310a98597626126b736dfe00507dfd66e947341d2c143a9de1682b6e0290b00c0cf8b5e802c348a70018b6a8799a01804cf"}, {0x80, 0x101, 0x2, "373fdb93c0c75b0725f38a432473cc871e4ef95484f03ffc31f74ed76700da7ca4157c27a893113ddd09cbbd2087e6b28c68ede0caa6c6b2a925b1cecc16e88f70f5b437a2d6dca60f96cf7c5a773727369e1505b4fc88f1b2fcca08d83f912663c6d1d8a04dc2f9f4336cf63190c7"}, {0x48, 0x110, 0x10000, "799179505137bfc72b1830b1793a3d5eb57545af85c15fa4bae1fa5796f73f26de20e960e1de9ed3f8d32377a53dc8d6f61d9a"}, {0x108, 0x1, 0x7ffffffc, "a45b52413ec2ed45b97446807639a97c7c411220dc7b1bb8742303a5c6c89898f4f2459656320fffee630b31ce1f9646925b872177bccd781a00167bf130d03d140ee78a1b31a5095f556e9a211219eb1b5fd5ad33daee81b68b838caeca40d41bf3f187dee0393164f35fd9f501a397a2edfd6f66546f4f38819a14f51da2aa481ee332b85fadfdb057599867ea079780bc626bf543cce85d7309b4548a11feb8f701fdceeb9ed4485ae91ee08246639752c4a0a4158d89895969984c6c33660654decfc37f59d016eabab6809e0e89c188a8705e69b3a117af52e4a99d0834f7388992e80c30abac5fea5452cea641bde0"}, {0x28, 0x111, 0x0, "b8b45514fdd9522adf747db294e57b730e80a34e62"}, {0xd0, 0xff, 0x0, "4aa471de7890a8a36e6fcec283f94b806380cf59d6a159088d026482c61889889c058f2be934643a2ccdfa399742f60bef182dd021e7255fed6c0b563e8ace1ad47666495ecbbfb0ff12d1ec50f06a9b2d12452ca2fbd22ad067e3e71807d387d21ac7c2e74180038026477e7a50f85025727549d735b91f6f9d3ff94d16b42639a6b9c90e14741428db2c82a87c1d3a65bc7a7d9c41dc6ace84ec3a9829cd4a291b117a953aff529f1c492b09b132ed7bd62a76fe2426dcc48250e846b1"}], 0x5b0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="bf588d9f9000ce5f68d9ba852f8ab933d8b152afc0ba1eab45b0615b724604ca704a95203e9b025c524c79df1d0face7c10a2e6a1a008a1eb6d4cc4a1abc0f3dd7c7f4b200f3e89954cc31886fc4deae3d2d05ee52f4302d663dda45d7f9770e7fb4c242696ee10355beebad0042425701df52ff230ceda1d908e02f7ee0121f757d39669eb059500fb3d04e900d1fe2c5a0dde08c7b2e8a6173f30f62f5abde21954068800277e3d67b130456f2b10d5442c8a17a3df3c0987b6673425643b25de61c43", 0xc4}, {&(0x7f0000000d40)="4959a2844f484bc0a5e56dea214703c9ae383300aae930fd4f988f336448aebd1d9e8b88a6402abea91c82386fb9f38c98638b4c46e29879d5bf1d075994242f4e98", 0x42}, {&(0x7f0000000dc0)="f86b70c1447cbaf994d4ccb6bcdbe36fd9b99bb7ebcfb24f7dac58f3f49f9a803cf58d6762c20f36c554288ce6acb6122c894212ee16e8fe2d9a595b34a08f83cab9ca98fe5f7065106aa78ab1031f15320dcc13a575b698d65f24dcdac5272f98a69fb9cb606136e100ee54dce8190165b5975755db327c", 0x78}], 0x3, &(0x7f0000000e40)=[{0x10, 0x115, 0x10001}, {0x100, 0x117, 0x7, "97726e434c4f5a3db183adf4578f314e817f7b9ece6be4853dfb5f04af0ae61d9a42b97df56f75768a038f87558c6f26659a83460ab046f681d327bc59c5ae941e70a51de93419ef199fa3ce2dbc2f5d9f4a6bb904cc2c96d62571135ac108eca6ea9c86b895017106e85bdc71b958e2510a783c76f6d41d7d644dc4441fb1357ed5b990e2d4c1567533da16492b543738f9c83981d46ae6f01cc1eac39b4e6f22a26115ae520e7f323d189931e856ff413714f2ad817e82a00d143110ecf47d89f08cff0165deca0f636b894fa0ec40a4c5f7257752f50a6a8c3c219a769d7110036180a0d2e45d41a156c8"}, {0x90, 0x10c, 0x3, "69b6407402099e104c3c5b2877602ecf011192c79bf0e1dfd2af2ac4785c96408088a4ef5ef2cc51073fce3641bd073c4de8dbfbe70d04f24d3e1f7994b9a0015c165093e3be06369e8f9ce3d4eae4ba09970634a4764d67e5915abf4e86aa6562a3518d92b23123670d7e358bd43a0743106d5138766a4c721541e8"}], 0x1a0}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001000)="0a824fcf1ec7fd0a403726bb7817391d7620e99c0c8fdf571becbfdad8e59d6f8fa83385007928a3cfc72d2c822f9187857ca4682aed5af88ba5dad1cfa1dea6e2bd895e7cc9622bbe5e3f6e87d1b0cc1b3d178d297c5db6c206ab8593d5329587eb47db63083ca42c737847a324abe8fe0a27bc5e8f0305d3d3139745f4fb7043ed5769f4bf53248b6f4a8273e6d6c5eae10485d458dae53bbb98dc7199778bc396e6b122eeabe655a07b1133f5655c626a168d8b72f1c00b2e97789f072ba2c4", 0xc1}, {&(0x7f0000001100)="72b989a493faac1198388cfc4c0f1737fb05baff124a11b0025cf904016ea6bf694e537c03c8029ad504a31427fe81ea426271e98dfad3593f1f8c810ccc56e880516a0d58fb66a8ae766c13c4990aa45c8eee62a5c37d316cbe0ebaf09edd4262bb24fec7c00aa90ff2d5b70e327761412fd6c8ed3a8131f8afc668acf790ff2933da00e3272b9366d013e58f3e99fb17d4acb336379bb5645bef2e3068025baddbb1db8b7b978d5a542ca7c961019006b73f749ef5adf91b0d0b9c05c0f4ea58acfe26a735e8c1ea53732ead5c8788524bbf945c9f62f703f16976d2ff121472c9d664d5c7ba9a42", 0xe9}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="a9bf062ac4c25c3acc78329e899e6aef41d6668065d60adcfcc1526a621df27898156d29ef8621", 0x27}], 0x4, &(0x7f0000003200)=[{0xb8, 0x15a, 0x1, "6cfc61c88e9fb1c8db556de5aa3317a7eda36ba7209ee0d790fe53ba783d6b5827b390d205f12be9b6065cbef8d70f9dfb9f663aacb13c1a47b4799719b5d953efedbbb4c3ca3598488d20aef0389cd824e95be455e3b753a44c4c3807ad2fe5123678e8fb28f013d5c466dea44be0435a13220c965e417a655eb6ea3bb688a2fcd9cd6783a7d4e3f70a898034c36b79ca1629d891a3fc81a505aea969c2bb12315748e4d2261b"}, {0x68, 0xff, 0x11, "3280299ecfbc72650460cdf4a6c9fa7239a1235a525bd98a26a4e7a9abf5db945d0056d2cabeaf3b5887b0617a782bdb38692d9f399c9138026cacdce2333a36d3fd259a36ac0ca05ca6d41f852d3be60eb17b"}, {0xd0, 0x114, 0x2, "84eebe687ab196e356a4c3c4d90e3ff9ce6a70cdb42b6a4cc6e46b7702735533bf3b66153d21bdc15181b311eaa012c19a6e41a10a2dba77d787ea793abf3ad4220358be51ceb56889504c815141e50398ba59705c776783d385eb33e1ba290171ee9ccf2164bd23217d3b67df0f8f1bccec022686cf8835d946214885c1840d5b16ba614fa01daaf7584cdaf4b146abbe740393730dbc993406a2b149a33e6be4563b30592c92da48c005d9dc26ed03bf547360385c334a57"}, {0xc0, 0x115, 0x8, "d665b4a8c44fe3571fa08171f9e527bb342ed45073e3eaa74a519f87ddeb0ab52265a5eaba0a27b154086e1a3e866aaba5e985d155829b71a76aa35bcf78aebfa33bfa8fa30491fae4bc3c65bb422359adaa511717492daea0c09b61aa5cec5ce965c998933b4d05791b50d35f1ec1c16806469d15373d9318c8c4275d86265bda120ae0672d985d92e536210263c2b52199a63c9b13bc67f36ef5ac8d24379a31005bca21fc10f1445a954bfb06"}, {0x88, 0x6, 0x8aa9, "c9c77e291c6d3a48204f8e1f7438727c39d0254c53a9ddc0cb9b2ff524ffdd0c2b00a22c5638c059f5a1e13687c37f1c27660c474e061e92717f93a14933ef48fa991d95eec696131d860e41e5fe0cdcc136eaa291cd6f3e29f9134fd0e9b6ab498b88233dd93483fadda6a5ba7ca9e86cb01125c3f5"}, {0xd0, 0x6, 0x401, "b0097a625bead5b54f8f1870651595709c0812fe1485b547eb3ba6d997d0c3bc99f5246b598d709efa8e2919ec779a13898c9685f7019bffe829e8ad5687a65d435cf81512e7fabc0c5c194503ab350f02b995638b4ab005d78821c502efa5f1222a30d22f8a923fd7804102aeef7bf795054e5c6aa791066788f3b8b0c80b376d7857a843e911fdcf0a777975401038091f334928b220a839075a3472479f3d28e39e215f464a1be7b04665e4e1a5e5591288cea0442c7b8d141742ed818d"}, {0xd0, 0x6, 0x8, "fb8058c30b15e69b431cbd4fcbec64a757c7a6821938d8f14bf232ea1a358145ed4382306169bd8e1c964a96ceb7017f57ef5dba15ccc3eb427eef873411bc65064c7d7c2d81a1321041d796a6428ef850c227cb1858631e726ec7a7d9d4999f0adb274a91b5ea78ce24f9bccc705b4644dfc9a1c962a4c8acf23b6fb10cc2b13d3257c7950d1109e9457de66869952eb4c7bca0d223e4cea6f490f22e4e4200bb445d2abe32c94bcfd481ea47d4bfed7840dc63584b68547e6a"}, {0x108, 0x103, 0xd3, "ccf8d57e9d4559214e90e8d33ca0d2c73693e4323e2a8fe0b905cbec915575ab62f2497c445dfa590683db1f3c127205dd808a13e398c2403c6cd16fac8ee888ef2e8a6290733e5ead7b935dffce8cd3930fb8b156066f1b7b831c8f3923bbe95d2544f5d0f3b6b565766aec218f5b620ce9e55456a48c709837061a6f79e17cd90a39489c82f8966c2c2a16323b69be4f6de9a0dcd67eb4a45daf3a3cc676c79f3720d7d7eab42d50d0dd4fce038d4f4206b03fdd05d1d3e7e86ff492d2931c3e0db5a8587cb7a9160000c089b10e7974c98ce14c046b11393208cb5b191554bd1a844ca167bc1db82446242cd23543bfede1a40915"}, {0x80, 0x326, 0x3f, "d4f4ea03611a90fecb08f48efacb316d2a29f0eb918440152daba92dd7e8d6e1c9f02947bd89da95b7412691ef81fb66cd8d221caccff03a3186c5ddcd2b8d6a9ae2cfe77e8b29c8a7c560891f75991ff5678633a579853b2db8f30cd33fdec4ddb34301d90927175483dd51"}, {0x28, 0x116, 0x5, "3dd19c16bdcfd1023441bb1e72b3f49ad007fdad4f49"}], 0x688}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002900)="73ec0bde36e66ea0dd08fd47db5c63e353dd26a3d718d5a89784d2e83b66418df8e22af83b5318d42bf224f43c51ab5aa4003e2733b8286ef05e7b9e7ed164b7477b2881152777407e8547889ab686ce5b5be247aa4b1609e66df0452a9962325ba84ce3e94114455acede6de4d8f39ae369f7fa80b62b132ddf33f6b7a13581e62672132653b0083a4b568fd84277136e6dd1f9eed543e17366ceaa0cbbb06fe5b93aebd71d95728583bbadb3c4b29c62a407f4a3af", 0xb6}], 0x1, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x538}}], 0x4, 0x4000000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000003040)='/dev/zero\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x78}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x25}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x49}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ed}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xdf5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c6}, 0x4000001)

08:17:01 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x46}, @val={0x8}, @val={0xc, 0x99, {0x401, 0xa}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x39}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x88880)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000000), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x14}}, 0x0)

08:17:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x2, 0x70bd27, 0x25dfdbfb, {0x22, 0x0, 0x2, 0x0, 0x0, 0x3, 0x7, 0xffff, 0x0, 0x8001}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x800)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="1500974137625f3804580e9e86d4b2aa520500000071aa61e679d08a8b01a248a029c0ba3173b71246d3c2ed3546a5ea10d35a10157339d2d0d445ec9c0ada97930f4f8a3ee8fa8a38bc257e9abd64d2b57440aa49b06cfc3accd9b8a44174e4c0fc51", @ANYRES16=0x0, @ANYBLOB="000300000007000000009d000000"], 0x14}}, 0x0)

08:17:01 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, 0x0, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:01 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:01 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000140)=0x6)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x10000, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xc34a, <r1=>0x0}, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00')
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r1}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00'})
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x24}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x8000)

[  956.252031] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  956.252035] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a
[  956.252043] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:01 executing program 1 (fault-call:2 fault-nth:27):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:01 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000000)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

08:17:01 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:01 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0x2}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0xfffffffffffffec9)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010600505050505050000008001f01f143000014005500f20014bb7ce9890a74fdfe7d567b69090a00060072a2cb4d4b56000008001f0100040000f5eeead9556dde3aeb8e1567150541885ec9b6773605d81d67146f96b6e155e12844abf24988bc06235a79a46eb7608591e4375442f95f0c613f6d7c3529b371"], 0x50}, 0x1, 0x0, 0x0, 0x40850}, 0x4)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x3f5, 0x4, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x40)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r0}, 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00')
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x2000850}, 0x40001)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x10000, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x995}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdb3}]}, 0x24}}, 0x4881)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000004c0)={0x89}, 0x8)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000005c0)={0x9e27, 0x3, 0x4, 0xe000, 0xffffffff, {0x0, 0x2710}, {0x1, 0x8, 0x4, 0x5, 0x1, 0x80, "573e816d"}, 0x1f, 0x3, @fd=r3, 0x1, 0x0, r5})
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000400), 0x4)

08:17:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x88, 0x2c}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000040)
socketpair(0xb, 0x800, 0x100, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200080c0}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x33c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x2ec, 0x2a, [@chsw_timing={0x68, 0x4, {0x3, 0x101}}, @measure_req={0x26, 0xec, {0x4, 0x0, 0xff, "f316c65d1ceafa7645725f81214caf0afc86d0159e52cd95b322c0a7a42d2b3267d6884a404795d76e3e8f46d8d6c670e54b6d02a684e8a6ddf3060fc8266576cdcd472669e9970ca288d7d9e40e51c7e1d4c4e6a1b8113ba45d79ee62c96fa139ff71fe2bd4eaaf7f114d3d6e7167022370102ea55eb753ca86011a6848037cf5605e57e9b245f7a44be4ed9e0c900a7a5dc81f8076f1b41d5f751d3e5aba61596ac9e41d618d6cc1193d1d062411d4f0c9d8f3c25ca18b519bacf3f8a035902a6cbd8fd77eaa36cd16f380ae2b9ea8ea88a1c36666b67503157256d1b9d910654eb0bca503cd2c77"}}, @fast_bss_trans={0x37, 0xe6, {0x3f, 0x6, "72cac7520488373019f1c394170e32a7", "e82adeff90ee6b790185b6528dce11217341fc0200974ecc04478757ec38d9a5", "20f3df1c3dbb135e8ebf41b337de4f7b90bc187896cdd7474e11dd3cf4e05c43", [{0x2, 0x15, "56c83927ff40c0ba9507df90aeade5c66e9974fe36"}, {0x2, 0x20, "4b7f30e8e367b91863849847b3d67a02ad99391b9b9a420b7970f69cee67b1a5"}, {0x4, 0x4, "f0d1483f"}, {0x2, 0x1e, "12a62cda718ddd5335e03fd912bddf749afaba1e1e8a67a30e471f9022ad"}, {0x2, 0x13, "b653338b53208ac745766467ed5b3a947933b7"}, {0x1, 0x1e, "bfddc99b3f0b3d73882293d4f90ae28ad1ee1b76297f18ca5af873d0f1a6"}]}}, @tim={0x5, 0xed, {0x2, 0xcb, 0x20, "f5ac23fb10d54139b2a97dfae3613d0c1636ffa2f65a0f2fd4edf3489ea55e280531999ad9c9984f2d0024660a2c160e370a48a818296c59080c287d8c003341c3b06d729f42dce2b6e98d357dfa64c06709b159a5688e793325d7717ca1249215075622f700f1394a092dff437ca93282e0f88fa152d4a0d66d69bcaed80f92ea42fe683747a9d65a50e7c5952fe0f4ca1534bc7574da496aec4ca59dd89c61c703b5f18c17812f4776bd6bcb4cc3e81ff7d8ce20ab8af5962714b26050ec0736c9e40238212a5fb09541a33f84e8644defb2d8a9d458744ef69955b009a3206b365c59485a79ad3468"}}, @mic={0x8c, 0x10, {0xe22, "c2fa2e04fb5d", @short="0de3036633e473b9"}}, @challenge={0x10, 0x1, 0x2c}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}, @NL80211_ATTR_IE={0x13, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @erp={0x2a, 0x1}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x2, 0x21}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4044080}, 0x40)
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r8, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2418ea6326cf82fc}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r8, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9e777486ba"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "21e7562dea54228ce05fc0ccbe5411"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "3a4e4430c5f2"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r6})
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1410009e0700000000000800bd", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)

08:17:01 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:01 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, 0x0, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  956.463664] FAULT_INJECTION: forcing a failure.
[  956.463664] name failslab, interval 1, probability 0, space 0, times 0
08:17:01 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xa8}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xdc}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x200}, 0x8)

[  956.543983] CPU: 1 PID: 4439 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  956.551813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  956.561181] Call Trace:
[  956.561199]  dump_stack+0x1b2/0x283
[  956.561212]  should_fail.cold+0x10a/0x154
[  956.561226]  should_failslab+0xd6/0x130
[  956.575536]  kmem_cache_alloc_trace+0x29a/0x3d0
[  956.580208]  ? blk_mq_can_queue+0x40/0x40
[  956.584349]  ? queue_set_hctx_shared+0x210/0x210
[  956.589104]  blk_stat_alloc_callback+0x54/0x2f0
[  956.593777]  blk_mq_init_allocated_queue+0x80/0xfd0
[  956.598794]  ? blkcg_init_queue+0x19f/0x410
[  956.603215]  ? blk_alloc_queue_node+0x82f/0xb40
[  956.607887]  blk_mq_init_queue+0x5a/0x90
[  956.611941]  loop_add+0x303/0x830
[  956.615375]  ? loop_queue_rq+0x280/0x280
[  956.619416]  ? trace_hardirqs_on+0x10/0x10
[  956.623649]  loop_control_ioctl+0x161/0x3f0
[  956.627951]  ? loop_lookup+0x190/0x190
[  956.631819]  ? SyS_write+0x1b7/0x210
[  956.635529]  ? loop_lookup+0x190/0x190
[  956.639394]  do_vfs_ioctl+0x75a/0xff0
[  956.643175]  ? ioctl_preallocate+0x1a0/0x1a0
[  956.647558]  ? lock_downgrade+0x740/0x740
[  956.651689]  ? __fget+0x225/0x360
[  956.655119]  ? do_vfs_ioctl+0xff0/0xff0
[  956.659078]  ? security_file_ioctl+0x83/0xb0
[  956.663524]  SyS_ioctl+0x7f/0xb0
[  956.666956]  ? do_vfs_ioctl+0xff0/0xff0
[  956.670907]  do_syscall_64+0x1d5/0x640
[  956.674778]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  956.679942] RIP: 0033:0x45e219
[  956.683128] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
08:17:02 executing program 3:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0x2}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0xfffffffffffffec9)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010600505050505050000008001f01f143000014005500f20014bb7ce9890a74fdfe7d567b69090a00060072a2cb4d4b56000008001f0100040000f5eeead9556dde3aeb8e1567150541885ec9b6773605d81d67146f96b6e155e12844abf24988bc06235a79a46eb7608591e4375442f95f0c613f6d7c3529b371"], 0x50}, 0x1, 0x0, 0x0, 0x40850}, 0x4)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x3f5, 0x4, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x40)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r0}, 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00')
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fcdbdf25730000000c0099005d6574605e0000000500ee00020000000800ef00080000000800ef00040000000500ee00e10000000500ee00050000001b7bf73e2e68b3c18527714308248288e7e11e53ac29441fa50c3511024c6262207014b9d1db40c8adc8acadb7bf8a44e30a0d45ec8c28ad8a75835c0d264efa679ee835cb49b4ee28de3a25e3311b1f2a86ecf4b381501bf28594a72307db38d57518aaf2981b83fb9d2536c50588ae1ec1f2aa00aada36819f94b88e06bd16d6296a2d86aa4409219ee4af52c4986d83898403f987eef1c4de94d9f9cdc0ce4714621687abb41f90000daa1aa384e4a51952f57f93547fc75f2b"], 0x48}, 0x1, 0x0, 0x0, 0x2000850}, 0x40001)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x10000, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x995}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdb3}]}, 0x24}}, 0x4881)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000004c0)={0x89}, 0x8)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000005c0)={0x9e27, 0x3, 0x4, 0xe000, 0xffffffff, {0x0, 0x2710}, {0x1, 0x8, 0x4, 0x5, 0x1, 0x80, "573e816d"}, 0x1f, 0x3, @fd=r3, 0x1, 0x0, r5})
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000400), 0x4)

08:17:02 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:02 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x208400)
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @private=0xa010101, 0x1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="262b286461a7ce1523caca6bb6b93502df981f8debffddc983575b94f7ccfb38e9033631df2995ad1eef4269c34dcf919433c78186ffabf2a5f0c50303cb47f73a8795e68219f93adb8def7e0ffec145aa7867a023241363974d09735856b5413c772eb42d9b4b137943200ee76116bdee2af9526522aaac4ab2b257f106cbe5e2482e86892c83998fd5bdeee762e3962af27df1cf793bcd35cc1a01781cfa5b3dd8ba8ec4ff26800c63980759c6751de9", 0xb1}, {&(0x7f0000000200)="873bdb8448a0bb0189fd9113ba85b80038c84627d3c830394d36a83db0456af54e2f87e2aae7da02e2efcfe41e0c69191731276225a6baa2d2489b21f59f7d04e9aafec4c157604ccebc7f2382a1a4bc71c98d04daefbb9be708aca0490b9987d9411f0d6ace5d2f93eb666f4751cf2fd17046d385557636abb4cd139daad3d527f6cebe7b345644784c197578a4f62ddd6ad830858b637621d26eed1af370", 0x9f}, {&(0x7f00000002c0)="ce367129b339e2880ea1c506733941371db7ddd796eb8d1b7ea89e7c2bc0566c68a1cccd1730", 0x26}, {&(0x7f0000000300)="376ee4c9dfc50ab15926e055ecf36f9771b83204fcdcd70e6cced3c4f166480f5d3e5d98403d67afa419db09a2b001d686065c1d80ea0abe0c68fd25ecfd7a142695bb212cdb88d0dfa62f765901715178d06d739bfd49c2b30026a1d81c0c33585cdd867b1c8d5af0574623631faf65c1efba3c6eabb865959114a8175b7074a2ac4f8ea126e09ff6bc12b7ac2ee809c77685cad1aa3719c2265b4672d0cacee04f5e3be3b84d36efd4de3c9a2522cbf70f96db11b6e5773407013011a8349ce7a204", 0xc3}, {&(0x7f0000000400)="67973bf9dfb6fa5f57883021197c2d826822c66c4bfb66ad6a8495184358d165113bf2013b946af3178bee39e4935e381e01a00f396b8db8885368abd4ad0ae9eb1986900f36db7e2c13576a356550df70fc564aebe358b73b66d2f94d198716d612eafabd51d4f0288db9d5a5fdbc6550ca47f1234e61f9664212fd34104b1b351e3750890c0c4d143703518e0d874f85341b925887685fcd5634c1fff3fcc781e35288be15883bffa35d4adace56f4575b90bc71489b801a0aa399a949", 0xbe}], 0x5, &(0x7f0000000540)}}, {{&(0x7f0000000580)=@ax25={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000600)="5fed8a579494a978087e26b9538a124030e1d6afe01e8af407e90379aff343de489ddac2a302594356918720098838bd2b58925a2c84b7df7a0ad2c6d6edf70f6cfcb527e6e36f5a0acda1b2ca3212851ea5c05e6a28555987d33f091465ce7ff286f6856f1742859bf1127eaad501b8aa95bae753af2798a18bfb616243bbb7a082e1ae62042b262881c5690c5bade50d8314aef7345cfeca53c048de3ff48208a71e880edb7d770ee18f28f567b883d6eb0467ba698e104ba5e71b6ed39100df5afbe7447bd7f73f0e66c6fbd0d4d5eeb1254db07cd14a5ce1bbe31a0cbda4fb756cc614f99c56a010ffb72a330c2bde", 0xf1}, {&(0x7f0000000700)="15197cf2f72319bae8ca9eade10a180dd116b2fb38cc31c0c9834b5da4", 0x1d}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="5ed7e027fba12cf3300b6f37d20c4bf3ae3d01c855070c2e439d9c628b449c9ffb969b91cc210a93ad81a02b000c2838dfb3b62179169111cfe1d2d4aba8b77ad9abd41d5a58ee1ff65bc8735dd0ad586cf2a747ed8869a433421f55d7b3129c294f6cb0be93d078e966c587eed281aeb428596b3f347a372f1333ee6166a9e7451a7c9fa5dded7b4b7c664cbcfeaecf0ef5e30ad6ba3cdb94e3364b0c6a4dd9d140b4017468b9eaa35049e6a10919d9c5b1f102d57c3071", 0xb8}, {&(0x7f0000001800)="d5419afb668b8b89718637eccee19323fd37f6802c5f0e033899b8a6c962c6d97910909b6ae86177d90f6c60bfff2d378e6d1798e567e8ea838181120c0f852fd16045979477322d78ac4fab15fb469e16531c1d18cd021ca0b22e0df038cb438b3701a46be37e7e401d537804b735f00b1dd758e0c8884ecf195f3f5994432341fc50bd07b3ac1e685db48b01b564628edb2ed240bd69061c783a804056c5c947ac693516c9f628fb819ef8044d77a0af11b4196f0a9003f6b6d61e4df23a4ddcb1485668383b9e1d901658280b350971196c56616822e4baa82177f685bb1bb4edc09b078ef7", 0xe7}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="4589b780b853a4ab6cd7664d7d37a4d26bb2ddf6", 0x14}, {&(0x7f0000002940)="8fb6dfa37f09410182aacb332526a5da252d84cbb3ca721d3a4bfcee40a1", 0x1e}, {&(0x7f0000002980)="71121be4298e367a2eb31e1c137276ecb7c7c9ce9aefb5db14d44fc3aeb89431a59a7489b19761d3d27f3c2940468044db4741f6020789665e72a175f489c85e0d0db51dc15256c114b9a1b38bd1e4c7fa98fa4dacaa90be08dc0432a01ba2c7550e519c54bf7bac69c36ef17675e2695c87b34f7c330693a7ebba4d38a8600df91afdaf01981c476467d900977c6f1065c820f60448c817a06c6a9ca561b57672e2116c590ca57d5a7e233e5142f0509a026ad7ade255f9b3f4d0c4cd4ce6921d3f80f61a0099", 0xc7}], 0x9, &(0x7f0000002b40)=[{0xa0, 0x10d, 0x4, "1a909da37762a1c9282e557e05a332f0147fda6c314807213f06a4e1e9e04f4929173cd419ff9ee9cab7a36fc33d1dc5b1b9b10396ec88db4a38116621d4d9a04a84f0cd05f73278786057be99368809babf5d5e1360e6cde22ae142548a24fe8a0a63170d6fee7f666fccbc3502830d3feb8279c590b9b820b51ac0d90f1849fb78bbec03947bef76"}, {0x20, 0x105, 0x1, "56f8f6be47a26243d8a2a49b92"}, {0xf8, 0x107, 0x55f, "7749a7327000f6abb26f3e094d5dc02f34874c30304ddbfbf892a4565bf7094d3b842042407c29c1ba018f6b24aba97263abb6eb96931ba969049be7e4c98ab52d3d58d389968af907b7d733bccba395b1de1b2844224c2dea090460d95d21b6e65dabf76909a84a80e1b96d1c50b6a596b0e2e44106a9a281bbc5c276ecebc322a56afa8d7544c79147ac3c6687a14c060e09b41ed61cedb133fe4ad7bd6a733870938f0e983657bd78ebcb1d0cc495008406405f92c910f156acb901ba9722f7092e408b8d0ee3409514254194f94001b64e805c26ce75b3d05ba8647c8cd2f5f341"}, {0x20, 0x112, 0xffffffff, "17aecb8e112b24212b48ba6d"}, {0x1010, 0x88, 0x7fffffff, "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"}, {0x58, 0x118, 0x8, "d33fed9e33f2946599d0f3bd4cfe4bb1d071fdbcef38b3512d0578d11a3d5dd9e4e505c9d57a0f7b22da8e041b40b506b3340aec000149ec63d9f3bead9bc2ee4374"}, {0x68, 0xecf3738ec4c3ea9e, 0x1, "b0da5cd3c9477d009f0f93777263eaf11856101797be842c76c3b6d5ed8281982f36adfbe90f5e140f05d9bf85e98a4e4c50d23b5b4ffa7fd2a55cfca1e9d0b4ef9ee6194964cca0e984755fd1a2d80c1e"}, {0x80, 0x111, 0x5440, "c8bd7acd0d1bb1d2ffc3a84805c1637a4dc0ecb4f86f63ac5b16d01de1879d2673c6600dbea79193714573377c42f484db9fd18f599e86ca003bae742cb4443d5fc51f8c868140ea4df2e5f5f1a100c93f5d182162ff189a0ad9fb190466458e44194e8405ae4d18974f284705b5"}], 0x1328}}], 0x2, 0xc081)

08:17:02 executing program 1 (fault-call:2 fault-nth:28):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="ccef20f89630075d8d09e5be1d8e72c10058f03051e65f12d366171b96634408f7b2fa0adedca2628bad954c4b497d9715a9ae220301dc41613a6e453b", @ANYRES16=0x0, @ANYRES32=r1], 0x71}}, 0x0)

08:17:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="94c403ddabab"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="eafaae85cab6"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x51fcf0a6ac2c2cb8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x104, 0x1d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4440)

[  956.690813] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  956.698061] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  956.705307] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  956.722194] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b
[  956.729443] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:02 executing program 4:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000006900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005b80)={0x224, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x54}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x209}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_KEYS={0x134, 0x51, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "701d4c308caa2d49b22f92da6f"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cfba48823c17619974e2a4e2ee"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7e9728d45a"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "099841499e"}, @NL80211_KEY_MODE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "145fc5bb02"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x14, 0x4, "4f9917c11455c50763a5d968cf2cb176"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "aed829668ff26d2da4045911af"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "da84336644"}]}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x6c, 0x1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x3, 0x0, {0x8, 0x1, 0x0, 0x40, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x100, 0x8}}, @NL80211_ATTR_KEYS={0x48, 0x51, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "aa42c055096cc68c21f30f07c4"}, @NL80211_KEY_SEQ={0x13, 0x4, "2c99a0969a38d89a39830bf9e724cc"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xd, 0x24, [{0x2}, {0x12, 0x1}, {0x18}, {0x12, 0x1}, {0x2, 0x1}, {0x24, 0x1}, {0x3}, {0x9, 0x1}, {0x6c, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x22, 0x24, [{0x16, 0x1}, {0x5}, {0x0, 0x1}, {0x30}, {0x36, 0x1}, {0xb, 0x1}, {0x5}, {0x1b, 0x1}, {0x4}, {0x24, 0x1}, {0x36}, {0x24}, {0x5, 0x1}, {0xb}, {0x1b, 0x1}, {0x1b, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0x16}, {0x3}, {0xc, 0x1}, {0x16, 0x1}, {0x5, 0x1}, {0xc}, {0x3}, {0x60, 0x1}, {0xb}, {0xb}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4008014}, 0x40)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000006440)=ANY=[@ANYBLOB="6bca0001412b6dd62fa1bba759186506cbe5c62f2f9b3fdb0390fa77ef96", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf253b00000008000300", @ANYRES32=r0, @ANYBLOB="0c0099001d000000260000000800220100000000080027000300000008009f000100000004006c000800a000223e000008009f0002000000080022014103000008009f0003000000080027000200000005001801110000000500180134000000050019010600000004008700"], 0x88}}, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r3, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000039c0)={'syztnl2\x00', &(0x7f00000063c0)={'ip_vti0\x00', r5, 0x7800, 0x700, 0x3, 0xa, {{0xc, 0x4, 0x1, 0x4, 0x30, 0x65, 0x0, 0x5, 0x8, 0x0, @rand_addr=0x64010102, @loopback, {[@cipso={0x86, 0x19, 0x3, [{0x2, 0x11, "10047a41b7e6f16e07f168cab2b8a9"}, {0x1, 0x2}]}]}}}}})
sendmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x2, @multicast, 'veth1_to_batadv\x00'}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="042e636eb5684e48e77616b16cc6fed6d923244302b80a9f9f4cd036a59b17694d1f038f6995482cd28b9cab25f4d17d11b33b455d96d57cbcbf2ba9eee9a228beb2d07b9d200bb3f4492d563a9f7fc582018e3b331cb6d4e93dc3c03da58e876d5050d066368fdd67b6bf8ffbc94c352705bed123cf0b94b463a76f24d57fa0efa148caa9c43ff383b052d1e00bee80ed161fc66c15da3cc4f66c2bbcd298e03f3bacd88392d8dd63ca2ae2d24e368d4c30696f45c384cc5cb21619ae9edfadaba972409c43672fba27e074ccb1de9554e6e482ff9f389431def06662", 0xdd}, {&(0x7f0000000000)="cafeb315786d83f7d6ed863bd27605a6034f62d5", 0x14}, {&(0x7f0000000200)="3058d3f2af6432006c3aa6cf30f90a8144178a12bcbe0cce9c189143001d325a1dda69adba349c7a", 0x28}], 0x3, &(0x7f0000006500)=[{0x40, 0x11, 0x8001, "b81bc2d49ff2a8b38f9fd7fbbc4e45d30b2d8ff384c727b6f12e4b9e50c8a447eb075100842dbab52c96c5c957"}, {0x70, 0x118, 0x3, "e25a4d7ee9d67df3a1cbd3f45b022eb18d4fb5767d81a05e920a8dcef6427f2493f2d9b9e2921a6726bc61e547253de01c99ed291fc33ff67cd3398efb5dcc2b14b770e3b3bdcc348d3edf38b5d39842dd71cb72766e7a972d"}, {0x50, 0x29, 0x6, "4f22650c08333e916c9dc3353f9cef9afdfa384c112ff181c2d2f5885b35644e2fcbcc7c2c5da4ce8ea1d4a5314abdccee7afec1825ece89fe"}, {0xa8, 0x111, 0x3, "58a2c1141515afd2957ebf91895c47308dbffd60d9a56fedaea3795a621e80f64de6335b7755ff5bafc902e6a933f7e332bc6921e8236e88095fb65742b54c0b95e4b41a9d174c29f5d7b08edf45cc9424f035b46e399609fd140cdc7ac48b8bbf55591c3ddf3e6381fa9a4e207c180a0b19f3f7ea6bc3fab921401229a69430101b400a3c9f15fa0fae98e58b8004094e"}, {0x48, 0x100, 0x5, "5775fedf7541553b1d3690e8e2e9a0aea774fb71c214ab2f888639ced1bbd98132066a43e36214040cd1c5386684cd7cffe15d24a105fc"}, {0xd8, 0x29, 0x7, "1deb242510b08a07d2cf01a66f2fe84f6c14af6b8325a331308559353915d9e679bcfd7eb12468fb392c49f97b0a09398965d9bf01ef4bf0745f1d679267456dbc57027954971cf556526ad4b9c65ee3bbfd1b971c4cf65c52303fc09cb3674b6e0a2827268d385520ca4f6222c3ef552a5016347e527319565fe4bd63513096a6b4eeaf3bf70885bb9a41b712a8b84e12f393044afc157a5c245667f8dbef971339a6340d03b501ffd8f7d83218e51d598155f27079226cc72bfc75afe3639b64"}, {0xc8, 0x84, 0x0, "a3af6b9a216e3caa003adbc4360ab6861dd6350a9668d425572e9758c4ab6a310048083cda783b03e03b7b9125fb0c8beddbe409ec6bd6940f703881e513fac3c6300c455c5d2c5cc344ff9ed2f874067676c6cd0d72931f475eed1e429e127df986b9ba3ca14f355024d17a8bf50275d10dd84a5be0f20411e1d3a8f93d530e53a9f4386abce658fef9c190cdb45efec7fc1c5a64b88e2f4f9078aae44749b88dc8966c6c5fbd26ae0a60de7ab220fdb001f6b9"}, {0x68, 0x104, 0x20287b09, "1eed2a18245da7bbf841c1f0fbb572d86aa4f0820ae60885292249b0f0529c60b4bc0b3b8e4f546be9cb9f0ee5ef8bcc465e56a6623d4db30e9c7bafeccccc8cb36d3a0048d80f98e1404072e75054b3b4e5dc"}], 0x3f8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000480)="b7b8efefc17a08e9b939284eb7edd7ac314c52a28f0b0164acbb670a7d522179b109fc759f9f3db18b0db3c73dcfc2b9e5dbbcf51366d29a3e034b3354b158160250a6a005560e25c5e1a5e1e3d945a881e0816ac1c4f9580a18e4e671f0c3835386b789227ba9fd89350bccf7b46796b86233a807a7e74d77cf8b834a9621ce6d0c62c24b9d519a303d8279b48b6cf027d87eba97af6106852b580ba4ab7b55822e4725a52eaad026ceee92ea921e5399901dfd616e79a05da00fc4d2635607285a4de8ae30c8f010a07b98e27e788b8395578f1d03e75aab394f18a3", 0xdd}, {0xfffffffffffffffe}, {&(0x7f0000000580)="898524679c3d96080732b637c71e87315603d264fd4e70310b478bf5582a403eaf0f1a4884e002ea44cebaea57cacbe1d8b32eb8f7dc234734851be3028f1d15ff106fc3983f43e4703aa3bf2f934523806bef36cc2bb0d90c553098bfdbd23d4df54535cbdfa2", 0x67}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="61a0519b30f69d0902c9e73d11eb4850caca93ba7472f9dae5d7c952db95108c1ec1329fa8f6069ac21c76306669cca1725f21ca29a61c5ea378ecfc", 0x3c}, {&(0x7f0000001640)="01dfc7cb7c8d436686be5e8807c9b5eb24a00d65826b35079f01", 0x1a}, {&(0x7f0000001680)="f8534542f367e395a3a4c7ade9e85997557a5d8c3c878c92b46aa917e08e54fd7bcc94633de9fcde983e761b834c8669c2a94ba3bb23", 0x36}, {&(0x7f00000016c0)="d7d5f8596c9370322181b93ac7f7f89f1df54e5254a512d3e6120db6766b786195bd058666245d73b278718312e4539e037f5730aab57ec1e9f8c70aafa6473890ebf949dfa6e24c95ff5b3f58", 0x4d}, {&(0x7f0000001740)="4180cf3785bf015184e3861cc840b8991977d1725e06a106f49fea0f4c1b2674e050495df36f8f88d9b42f4106a8964a7400888d2c9b5648ba1b37bd18495a12620f6b74c4825bde4714783025b4a423f3bf114ef8dbca698f7b4fb97d7d31cc7ad93050be154770a37e4cfb543a8ef30ff6de408292b503cee1003f92490d6aa64160c5d31935", 0x87}, {&(0x7f0000001800)="16ddbdc23b22cd3569e25200e2b1db5577fb0863ced9935c43856a14eca6c43d640c3719230cd028ca09b1f4424b7990ed49672c06ab4c5bb92d5bf692f9d9fb7c4de7add827361c3b64cccd838b4f800621be11bb426168ede1ae1ecb38b5c2e3ba203f84b7968b363e353eb8c18516515a9c357e616231c6ba2cad046cfa035eea9268151cb44c8ab349b8e8a2902dc1369ac440b9e638437389a5b1583ba0b927bdac263d65a374a8981acfe29886445c8819587d760b24570d3cb880fb071b", 0xc1}], 0xa}}, {{&(0x7f00000019c0)=@ll={0x11, 0x7, r3, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001a40)="adb094ea18b7ccac1397b478665e1926c4224252f9e6e4e48e537055a30bbe7bedc4a5d237f7b6d37591f29ab07053757d3d3d30bda58c874818dc7122cb87b48e052959d1213c5b8bb8bf8a7290033c9a3f42c881b45faf628c4337843f468c42bd2bef8f051fe664c26494449fcf973bde9637c1d75af5e83add78777e816c3f143e0fbf6c29d0bbf69f4043e8f9e8ae96c5e4cb302f8fd23beb1d69067000386f266bc0d01d0e5d68f84d", 0xac}, {&(0x7f0000001b00)="4e85ecc794d76ae0fbdb413efa7b8a58988b8c57b34b49b438b3dadc162329ab36054d9a6df157e597241bddc7f0f791275e46232da732f4834fc2b59561581d6019754ff0215de48264db68aa05f0f94bbf5e71016c9b5d9a8528f1e93631dc57d837e80623b751aa0c567c6be69833414c83cbb2c2e1d1fda1c3cbdffcde059a7cd19a8238deb59a7d747f534a9a19c429de383b33237c46f49c9cc0b3eda7e778d0ac087eb8b62f127d248deffb3c2e68b8f3f7bb67b962f07598c8c19763043846d5aa1e41951af4c5934fce13f7c957643e7e406d5b5ea5fa3d1a303622ccab94a880bda7f256dac5093e09c9", 0xef}, {&(0x7f0000001c00)="8a22b277454c67", 0x7}, {&(0x7f0000001c40)="dd3db4895b71502d7b7ee4c37a0c4af63acb8a11119cfe21c6b6ef8ed61cff7a3f693699cd6103a51d882158036b55ff12b7457e1d5bd51b753da9642f06172a6108f17d702b78a81e1a905875a192a4098cf41c9321c2d3c7d5aaff84fba387411215965bc4ddf0994ba42a63bdea0ccb4705cc7d145e4df02ffa39232b7ebe36983f89b1015a5bd7f2deec88226e436e0a61ee1ed395912839ff156681f6c5561d6bd9c733cdc883ba8dd0c8909107d1daa69a54970dba", 0xb8}, {&(0x7f0000001d00)="64c9c6c7f58beb08210050ab0aecdd9f4c47b560cb3bd3801351c8de190ca1d5150aace65f43bf218974069594fc23cdf5a476826b5fe6b7ebb0d1d5ee7aa1f9027d0f9a4f7cce0c052d18", 0x4b}, {&(0x7f0000001d80)="66d7f5aff4c7a23d1d8440cc189c40bd809eca273d70de3bd99a224cf03336e39d11e57710fa77f2bdeaa2d8e19f136489b2f114fa0a9642fbb12d2db320bae6a56d39366af234946878f1b5e051e469ee389eb6de99e02f477b42a17fe956aa32b5a6dbc63a9e03cb6bad21e81c903be2ffddde3d990130f4f33bd2caaecc3f4814925e3f0846ae2e2966e8f82487030ae6623c4ad804a4c628c207942385b3851d8279", 0xa4}, {&(0x7f0000001e40)="cb4717b69925a5ce351e172856f0827a3e02b6fd728c8013de7b12f6701f4233dc241e496e831c5dcdceaf9ced0a8140c719d81a9022626051ea576f927f2c3aaaded9e6b2523fd1c71fa013e94013421e4d8d9f64817dde6c32572815fa34273e780a3a6ee60b410d0b1f39e5258c8f64d480887913ed475fff16b9bfedd1c0ad4fd16379b12eb17650f9708a714e14a828e0b64e6c8a20d10b7b08ccd904499f", 0xa1}, {&(0x7f0000001f00)="35b7d5d3312cf2d4bda123cf7248f2d462060dcd634db1b2ab00d4d3abb9598cdfa0a1af0d9ac18bc2da4179073964390e258d39195d3b0248333cacb875731096a7e62409e9ad4398756a6a4fa0ac999161a142a294635b03ceefe19098e3bbe4ca67eb5b5d85a27d1dca2bb4e0dd737b76163e1ad9497ae540fd4dc243cf3412d1da7143d8b53621", 0x89}, {&(0x7f0000001fc0)="cb1caed04ac8dff44fabba37bf5c4eef4a2907f7ee25b48b9a51ffbef18944825715b8a01a801bc28b55f068a47a48e41cc4e7e237713b429eb89720efddf0bf13479a0b8b19f1f81fac5866ef46f0c763e4e8d251572cfae835142065a64c1580ced845690e452ad544459de60dddaefa60149087245b04c1", 0x79}, {&(0x7f0000002040)="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", 0x1000}], 0xa, &(0x7f0000003100)=[{0x48, 0x29, 0x2, "b75384c62e4be06ce410dec5737c01ffa6b556cf62fea3c766b8814ef2a0c2713d3060dce891ba97aec8d61d07b2a051269178dbdca0"}, {0x110, 0x115, 0x4, "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"}], 0x158}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003280)="b7bf4949c0f7ba1a039b768ba55c359f368855a54bd2850d6e096286107b42a2673167ffe3efaa870efe738afeac00d75b0568c234fd8cc72b2ccfe4df9ef56af34d37c8f5ea9f9a31e0016fafc76aec322e610be024b7c4aa501fcd8e4205550d68b60a230dc644660063e7ceedd396a5965ce4d9c260c46b0dbda1aafb20", 0x7f}, {&(0x7f0000003300)="a9ae5e8ca389be008d5039e6ea2b71e0cd7987d9fb16913f3d149d3a3d8aa626f7d544b868339204339c5df7b4e83b9897f18f8cf70d5130e1df65a1130d4e2de96a65266ef0084ba7c42f3e2cf8f18b586f77808a6b979b714f1032e7d89b557040798565044045e10666583440f595d04e0ce9a089a7c426e85f8853f3ae34cd1235a9c5a5d568ee7f9cb6fe6a4c8016055b951ffcaaa6d0d0c25dafb96564d436122fe264d3e1856486b6309871ca2f0bc64aa82bd6019f35fb3cdd60b44396225ae3c663e432de6f3505306e45d0ed9f", 0xd2}, {&(0x7f0000003400)="3e9b32c5486b69742e512338c76a8e2577e5196686b1a1c1135f023be6d584b5928365559b631fc350992e55770021976614e5a7897e96161499009e14e6067de9dd77255f4d3d90bf86bb8f8a46773aef3389ca92a828d7b9b5d6cd9301306e824cde06a0b8de7ea4ecd4a4e1ff39ae11ee8a04ff86573048720fc44514aeee1de26c5ed52f3ea9ddd99e62e7a61f9530a9005323f2fe75f3b69052a06b1d5a7177cfef3d9d88d8dfca8ee79b09183748e44debc516d57d0906c45a7e2e587810e3e7af98cc5d70b533dbe7744931a40d205a632d5dc64017fecf0fb74522c6d1e5015f80aff21f33e97ab7dab0f1840e43", 0xf2}, {&(0x7f0000003500)="9103ac94957ac5de1397789d8555cf39317685e82e8f19ae96e7eff5d912bd6aa5a009aab7a7c88499f09c938147a07702f4432944c7011fd6800bc491f6ef534863f61f5602f08a748de8c292e3c9862874000a62d0c993fe86a1afc9dfe6d427b829c2ede8c76faffe3be53f525758d5ae7de4216be1f1a1c775d583b0c6d58d8b74233a49b97da45ffe191eac", 0x8e}, {&(0x7f00000035c0)="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", 0xfa}, {&(0x7f00000036c0)="4b29f451dc0d5290c0ba9e3bc513ffc635aa4510bb0dbdb930a42950a0162343cf0ad44cd9f1d74d325e60fb9169b03a79be1834e93df3e74267c7c7579ecb7c4b242bb3f65de81c437eb0d51114137dc5b3a8977254dafb35436e93ba2cedba60db1d81d63000a273f17e8a04463bfcb59c71d538556dc00f7ca6961c9fd50505a54eb1c3fda3af55d2dcfb985f79be2f60a593effc1f23e1bc5400e92035b60da0c960e514ac50b9dea7e8c304f4fed74045096b583e1e4222fd7a4d3a70d5875a194d66772fab4d83b9ee8def4336bebeee3cba592528", 0xd8}, {&(0x7f00000037c0)="e6d97622c4ab8575114112d5f4fe06dd58e69e4f9ff9cdf147469e23aeaa48229b69f7689f1ddbfd3dc006a4e87c2937811bebef2a2b938ceb703210421b354787fd57f7c94d5d1f461a1ddd874c2f2bca006af60917f7c3fe0fc7d99ebde25d9ce1d0bb07924e6d96190aa9d4d8e32e3c9cda4e9151d8b09fd631a6a199e7ddafef30c03f2dbf591c548c70981d08faa63fd89caa511cf6889c94d7188c3493b4b1752d51ec12ccfaf15203d3566851f783924a42523af7bfc53b5f23267cd302831225a60f9589875f26ec4ee386599d8145aae195e4981fc225a0f6afaeb244236c", 0xe3}], 0x7}}, {{&(0x7f0000003940)=@l2tp={0x2, 0x0, @multicast2, 0x3}, 0x80, &(0x7f00000039c0), 0x0, &(0x7f0000003a00)=[{0x10, 0x10c, 0x7297}, {0x98, 0x113, 0x8, "bcb22354102034dfeaf62f9bb557e3aa576a6943bdc1f38149321ec1214cb65529008a5ec4770adefd14c64a0e8af1b47977b1e6a8e363e11c1b15bbb85095d21f348e88703754f2c94ac8d9b6028df56d4d7db520ef07e2f81e5b5593aa7af5ed88d0bcb7d3bde17695108ce52e730067fc8b4d3a8935d7b299ba46298cad28c1675c"}, {0x28, 0x84, 0x8af, "45a03c47589bbd631b6cb52668cf7973e20a"}, {0x1010, 0x10e, 0x10000, "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"}, {0x1010, 0x29, 0x80000001, "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"}], 0x20f0}}, {{&(0x7f0000005b00)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000005dc0), 0x0, &(0x7f0000005e00)=[{0x18, 0x3a, 0x4, "dae8"}], 0x18}}, {{&(0x7f0000005e40)=@sco, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005ec0)="2c2f6fc933de4a874e5efc5b451623ea98c83ba1820d66acad8c636b0dabdf39e831b2d5cd6f105283c94098c0db719a72ea71ee20b0bc15e02687b21e709c9b2048b1c2d935d2", 0x47}], 0x1, &(0x7f0000005f80)=[{0xd0, 0x29, 0x8000, "9ffa43eb29bd53443201cb178e2b13132bc0a8cdb07d4a8f4d841cdb810a33e375bcb7f82f557a980be49e256a51cdf88484e91b126dc8c64a57c73a4d1a01e8b69481e5a02706c8fda564211e3d104ba20df509ed8abcb5d9d35e91c0f450e186d8cd91509bf54af1b6a9573f96b9d9124b3ae6f648748ce6f8f2d0be32962de33652ed431c8cd50a0febe40f5694327401b67d0897788de359381171b72dd43465a3f2c33e329ea5579b6ea1a2030921194f9f69b590c91e0ba0a507"}, {0x60, 0x109, 0x1, "70ddf6c0e50524e9ebe369cdcee3860997f10b2986463652194a47637836b3e34cef807262928001cae8c34ceda1057cff709e042dca8f92da86115507351381c9203c42f016d048240a8b28eaef2813"}, {0x88, 0x117, 0x2, "ca96c7cdbf5a8ab0443b124b90f2df15e0c5ee04e78b5a025b986e2bf171832fc8c1169485aa11846e4dc36ab8c8e97bbd76d3e4aa250af9d63b3e8e00a2cf3b0363c9752dcb815519be33f98bfb11fc5a9c273083d8184dd53f53893c41a291b65289a44a173c170bc00add9c8aa7a78153"}, {0xb0, 0x112, 0x7, "1f7cd59d70771396a45173ac729e1627d859231a7f05afd0a91f813eac8af7eeca23b672a01bf6af42fd719006e2161aba1b67ad6aee0a1c6da632c858b15236f16b3886d8bf80bba3b0732c25db459185e4a250a44c21ff732784f6617420656d689c4e9876a80951f58b479ccd74f7fe6ddc61d46f52637a29a4b3b8047e9299deafd0b7188c55fcd4f29fc2cc36fb3fe73f13f693d65f8e9bcb24222f"}], 0x268}}], 0x7, 0x8080)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xcc}, 0x8)

08:17:02 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2, <r2=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r2}, 0x4)

08:17:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x53}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x50040813}, 0x24049004)

08:17:02 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x2000)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x7fffffff}, 0x8)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20088880}, 0x4000041)

08:17:02 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  956.830301] FAULT_INJECTION: forcing a failure.
[  956.830301] name failslab, interval 1, probability 0, space 0, times 0
08:17:02 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x800000}, 0x8)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000000c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000140)=""/247, 0xf7}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/61, 0x3d}, {&(0x7f0000001540)=""/95, 0x5f}, {&(0x7f00000015c0)=""/51, 0x33}], 0x9, &(0x7f00000016c0)=""/218, 0xda}, 0x12080)

08:17:02 executing program 2:
ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:17:02 executing program 1 (fault-call:2 fault-nth:29):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:02 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x34}}, 0x20040084)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1a8, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEYS={0x168, 0x51, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x13, 0x4, "c5101d5ba69bbcc73480f6b51efce5"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2de7eb1d9d7be2e5b3b6dd0b8f"}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7fe91fdff827bae1ca3262dd07"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xc, 0x4, "6ae2c4ec802edd3e"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f8c708008200"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c596ab133086a06d0e3e76eeda"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x3003, 0x2, 0x6, 0x0, {0x0, 0x5, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0xe5ea, 0x80}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20008041}, 0x400e000)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)

[  956.876793] CPU: 1 PID: 4473 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  956.884723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  956.884728] Call Trace:
[  956.884743]  dump_stack+0x1b2/0x283
[  956.884759]  should_fail.cold+0x10a/0x154
08:17:02 executing program 0:
getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x61, 0x1ab000)
ioctl$USBDEVFS_GET_SPEED(r0, 0x551f)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:17:02 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x8)

[  956.884774]  should_failslab+0xd6/0x130
[  956.884787]  kmem_cache_alloc_trace+0x29a/0x3d0
[  956.884798]  ? blk_mq_can_queue+0x40/0x40
[  956.884806]  ? queue_set_hctx_shared+0x210/0x210
[  956.884817]  blk_stat_alloc_callback+0x54/0x2f0
[  956.884830]  blk_mq_init_allocated_queue+0x80/0xfd0
[  956.884840]  ? blkcg_init_queue+0x19f/0x410
[  956.884850]  ? blk_alloc_queue_node+0x82f/0xb40
[  956.884861]  blk_mq_init_queue+0x5a/0x90
[  956.884871]  loop_add+0x303/0x830
[  956.884881]  ? loop_queue_rq+0x280/0x280
[  956.884891]  ? trace_hardirqs_on+0x10/0x10
[  956.884902]  loop_control_ioctl+0x161/0x3f0
[  956.884911]  ? loop_lookup+0x190/0x190
[  956.884919]  ? SyS_write+0x1b7/0x210
[  956.884931]  ? loop_lookup+0x190/0x190
[  956.884941]  do_vfs_ioctl+0x75a/0xff0
[  956.884953]  ? ioctl_preallocate+0x1a0/0x1a0
[  956.884961]  ? lock_downgrade+0x740/0x740
[  956.884974]  ? __fget+0x225/0x360
[  956.884983]  ? do_vfs_ioctl+0xff0/0xff0
[  956.884993]  ? security_file_ioctl+0x83/0xb0
[  956.885003]  SyS_ioctl+0x7f/0xb0
[  956.885010]  ? do_vfs_ioctl+0xff0/0xff0
[  956.885021]  do_syscall_64+0x1d5/0x640
[  956.885036]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  956.885044] RIP: 0033:0x45e219
[  956.885049] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  956.885059] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  956.885065] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  956.885070] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
08:17:02 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r0=>0x0}, 0xfffffffffffffec9)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)

08:17:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010840}, 0x48040)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a0dbdb75350430f0000000f496ab0ff536e3e0fd70dc8f744b0eb164c6be4c3c57a453837795dd16f5284f042be6a11d34c7e85f6f16fa76973f4768f7de1ad5db175c2867dad4c0258814006caffbe376af9fbffffff4550b2c0e8af35106223e1e6f87da82b941129cead7fe91d948f5ace72613ca991487c2300dc32c8f4eae70f03aa544b9fc162f068be9829135c98e1daefa2f416a85199b04a1a4e17e7755330e131a6000292f2e5a1384e2f6e1a98ae62c2ee09908d577035d8d051a300000a9c83f77f6bb483ee8ace9e59000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r5 = accept(r4, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1847024}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x100, 0x4de, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x804)
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
pipe(&(0x7f0000000600))
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'})

08:17:02 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x5}, 0xfe8f)

08:17:02 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x1)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x3d}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048044}, 0x80)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

[  956.885075] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c
[  956.885080] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  956.956107] FAULT_INJECTION: forcing a failure.
[  956.956107] name failslab, interval 1, probability 0, space 0, times 0
08:17:02 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000f78fa509a58f46e4dd0300042cbd7000ffdbdf2507000000070000002e2f66020065302e"], 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x20004880)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10080241}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)

08:17:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x8, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}}, 0x40)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d99e4a36651aa3cb1d4745d26e1400e815", @ANYRES16=0x0, @ANYBLOB="000000000000fedbdf254598a33d0f74007b26281020f4d086690000"], 0x14}, 0x1, 0x0, 0x0, 0x4914}, 0x20000844)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, 0x0, 0x111, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x16}}}}, [@NL80211_ATTR_IE={0x72, 0x2a, [@challenge={0x10, 0x1, 0x9}, @erp={0x2a, 0x1, {0x1, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x26, 0x4, @device_a, 0x800, 0x3f, 0x7f}}, @ht={0x2d, 0x1a, {0x42, 0x0, 0x7, 0x0, {0x4, 0x3, 0x0, 0x3fb, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x300, 0x9, 0x4}}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x5, 0x0, {0xffffffffffffff81, 0x12da, 0x0, 0x3dc, 0x0, 0x0, 0x1, 0x2}, 0x1007, 0x81, 0xc2}}, @channel_switch={0x25, 0x3, {0x1, 0x6, 0x80}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1336}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004010)

08:17:02 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  957.200888] CPU: 0 PID: 4502 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  957.208716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  957.218072] Call Trace:
[  957.220663]  dump_stack+0x1b2/0x283
[  957.224292]  should_fail.cold+0x10a/0x154
[  957.228442]  should_failslab+0xd6/0x130
[  957.232416]  kmem_cache_alloc_node_trace+0x25a/0x400
[  957.237537]  __kmalloc_node+0x38/0x70
08:17:02 executing program 1 (fault-call:2 fault-nth:30):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:02 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xbdb8}]}, 0x4c}}, 0x8090)

08:17:02 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xfffff1e2}, 0x8)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6a}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "72785964e733d79d7044ba7cfa"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x800)

08:17:02 executing program 3 (fault-call:0 fault-nth:0):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  957.237550]  blk_mq_init_allocated_queue+0x17b/0xfd0
[  957.237561]  ? blkcg_init_queue+0x19f/0x410
[  957.237571]  ? blk_alloc_queue_node+0x82f/0xb40
[  957.237583]  blk_mq_init_queue+0x5a/0x90
[  957.237593]  loop_add+0x303/0x830
[  957.237603]  ? loop_queue_rq+0x280/0x280
[  957.237613]  ? trace_hardirqs_on+0x10/0x10
08:17:02 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x400, 0x70bd26, 0x25dfdbfd, {0x1, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40800)
pselect6(0x40, &(0x7f0000000040)={0x6e}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x2b)
r1 = gettid()
sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x402248}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd25, 0x25dfdbff, {0x2, 0x1, 0x2, r1, 0x800, 0x2, 0xffffffff, 0x7eac, 0x0, 0x1}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x4)

08:17:02 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

08:17:02 executing program 1 (fault-call:2 fault-nth:31):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:02 executing program 3 (fault-call:0 fault-nth:1):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  957.237624]  loop_control_ioctl+0x161/0x3f0
[  957.237633]  ? loop_lookup+0x190/0x190
[  957.237643]  ? SyS_write+0x1b7/0x210
[  957.237655]  ? loop_lookup+0x190/0x190
[  957.237665]  do_vfs_ioctl+0x75a/0xff0
[  957.237677]  ? ioctl_preallocate+0x1a0/0x1a0
[  957.237684]  ? lock_downgrade+0x740/0x740
[  957.237697]  ? __fget+0x225/0x360
[  957.237707]  ? do_vfs_ioctl+0xff0/0xff0
[  957.237717]  ? security_file_ioctl+0x83/0xb0
[  957.237728]  SyS_ioctl+0x7f/0xb0
[  957.237735]  ? do_vfs_ioctl+0xff0/0xff0
[  957.237746]  do_syscall_64+0x1d5/0x640
[  957.237763]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  957.237771] RIP: 0033:0x45e219
[  957.237775] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  957.237785] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  957.237791] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  957.237796] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  957.237801] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d
[  957.237807] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  957.305341] FAULT_INJECTION: forcing a failure.
[  957.305341] name failslab, interval 1, probability 0, space 0, times 0
[  957.305353] CPU: 0 PID: 4553 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  957.305359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  957.305363] Call Trace:
[  957.305380]  dump_stack+0x1b2/0x283
[  957.305395]  should_fail.cold+0x10a/0x154
[  957.305409]  should_failslab+0xd6/0x130
[  957.305421]  kmem_cache_alloc+0x28e/0x3c0
[  957.305431]  getname_flags+0xc8/0x550
[  957.305441]  do_sys_open+0x1ce/0x410
[  957.305450]  ? filp_open+0x60/0x60
[  957.305463]  ? __do_page_fault+0x159/0xad0
[  957.305473]  ? do_syscall_64+0x4c/0x640
[  957.305481]  ? do_sys_open+0x410/0x410
[  957.305491]  do_syscall_64+0x1d5/0x640
[  957.305506]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  957.305513] RIP: 0033:0x417d11
[  957.305518] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  957.305528] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  957.305533] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  957.305537] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  957.305542] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000000
[  957.305548] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  957.305993] FAULT_INJECTION: forcing a failure.
[  957.305993] name failslab, interval 1, probability 0, space 0, times 0
[  957.306015] CPU: 1 PID: 4549 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  957.306021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  957.306024] Call Trace:
[  957.306037]  dump_stack+0x1b2/0x283
[  957.306052]  should_fail.cold+0x10a/0x154
[  957.306065]  should_failslab+0xd6/0x130
[  957.306078]  kmem_cache_alloc_node_trace+0x25a/0x400
[  957.306092]  __kmalloc_node+0x38/0x70
[  957.306102]  blk_mq_realloc_hw_ctxs+0x1a5/0xe00
[  957.306112]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  957.306122]  ? kmem_cache_alloc_node_trace+0x383/0x400
[  957.306138]  blk_mq_init_allocated_queue+0x20c/0xfd0
[  957.306150]  ? blkcg_init_queue+0x19f/0x410
[  957.306161]  ? blk_alloc_queue_node+0x82f/0xb40
[  957.306183]  blk_mq_init_queue+0x5a/0x90
[  957.306193]  loop_add+0x303/0x830
[  957.306204]  ? loop_queue_rq+0x280/0x280
[  957.306215]  ? trace_hardirqs_on+0x10/0x10
[  957.306227]  loop_control_ioctl+0x161/0x3f0
[  957.306235]  ? loop_lookup+0x190/0x190
[  957.306244]  ? SyS_write+0x1b7/0x210
[  957.306255]  ? loop_lookup+0x190/0x190
[  957.306266]  do_vfs_ioctl+0x75a/0xff0
[  957.306278]  ? ioctl_preallocate+0x1a0/0x1a0
[  957.306286]  ? lock_downgrade+0x740/0x740
[  957.306299]  ? __fget+0x225/0x360
[  957.306309]  ? do_vfs_ioctl+0xff0/0xff0
[  957.306319]  ? security_file_ioctl+0x83/0xb0
[  957.306329]  SyS_ioctl+0x7f/0xb0
[  957.306336]  ? do_vfs_ioctl+0xff0/0xff0
[  957.306347]  do_syscall_64+0x1d5/0x640
[  957.306363]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  957.306370] RIP: 0033:0x45e219
[  957.306375] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  957.306385] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  957.306391] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  957.306396] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  957.306401] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e
[  957.306407] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  957.354412] FAULT_INJECTION: forcing a failure.
[  957.354412] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  957.359888] FAULT_INJECTION: forcing a failure.
[  957.359888] name failslab, interval 1, probability 0, space 0, times 0
[  957.363131] CPU: 0 PID: 4563 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  957.363139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  957.363143] Call Trace:
[  957.363157]  dump_stack+0x1b2/0x283
[  957.363172]  should_fail.cold+0x10a/0x154
[  957.363186]  __alloc_pages_nodemask+0x22c/0x2720
[  957.363203]  ? __lock_acquire+0x5fc/0x3f20
[  957.363216]  ? get_pid_task+0x91/0x130
[  957.363231]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  957.363240]  ? lock_downgrade+0x740/0x740
[  957.363254]  ? get_pid_task+0xb8/0x130
[  957.363261]  ? proc_fail_nth_write+0x7b/0x180
[  957.363272]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[  957.363287]  cache_grow_begin+0x91/0x630
08:17:03 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'wlan1\x00', @ifru_ivalue}})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

08:17:03 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8)

[  957.851670]  ? check_preemption_disabled+0x35/0x240
[  957.851684]  cache_alloc_refill+0x273/0x350
[  957.851699]  kmem_cache_alloc+0x333/0x3c0
[  957.851711]  getname_flags+0xc8/0x550
[  957.851725]  do_sys_open+0x1ce/0x410
[  957.851736]  ? filp_open+0x60/0x60
[  957.851754]  ? __do_page_fault+0x159/0xad0
[  957.851764]  ? do_syscall_64+0x4c/0x640
[  957.851772]  ? do_sys_open+0x410/0x410
[  957.851782]  do_syscall_64+0x1d5/0x640
[  957.851799]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  957.851807] RIP: 0033:0x417d11
[  957.851812] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  957.851823] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  957.851828] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  957.851833] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  957.851839] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000001
[  957.851844] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  957.858125] CPU: 1 PID: 4562 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  957.858132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  957.858135] Call Trace:
[  957.858150]  dump_stack+0x1b2/0x283
[  957.858163]  should_fail.cold+0x10a/0x154
[  957.858177]  should_failslab+0xd6/0x130
[  957.858190]  kmem_cache_alloc_node_trace+0x25a/0x400
[  957.858201]  __kmalloc_node+0x38/0x70
[  957.858213]  blk_mq_realloc_hw_ctxs+0x528/0xe00
[  957.858233]  blk_mq_init_allocated_queue+0x20c/0xfd0
[  957.858244]  ? blkcg_init_queue+0x19f/0x410
[  957.858254]  ? blk_alloc_queue_node+0x82f/0xb40
[  957.858266]  blk_mq_init_queue+0x5a/0x90
[  957.858277]  loop_add+0x303/0x830
[  957.858287]  ? loop_queue_rq+0x280/0x280
[  957.858298]  ? trace_hardirqs_on+0x10/0x10
[  957.858309]  loop_control_ioctl+0x161/0x3f0
[  957.858318]  ? loop_lookup+0x190/0x190
[  957.858328]  ? SyS_write+0x1b7/0x210
[  957.858339]  ? loop_lookup+0x190/0x190
[  957.858348]  do_vfs_ioctl+0x75a/0xff0
[  957.858361]  ? ioctl_preallocate+0x1a0/0x1a0
[  957.858368]  ? lock_downgrade+0x740/0x740
[  957.858383]  ? __fget+0x225/0x360
[  957.858392]  ? do_vfs_ioctl+0xff0/0xff0
[  957.858402]  ? security_file_ioctl+0x83/0xb0
[  957.858411]  SyS_ioctl+0x7f/0xb0
[  957.858419]  ? do_vfs_ioctl+0xff0/0xff0
[  957.858430]  do_syscall_64+0x1d5/0x640
[  957.858446]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  957.858453] RIP: 0033:0x45e219
[  957.858458] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  957.858467] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  957.858472] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  957.858477] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  957.858482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f
08:17:03 executing program 2:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x20000)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x4, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24008840}, 0x44000)

08:17:03 executing program 1 (fault-call:2 fault-nth:32):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:03 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
socket(0x5, 0x800, 0xffe)

08:17:03 executing program 3 (fault-call:0 fault-nth:2):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:03 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:03 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x800)

[  957.858488] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:03 executing program 3 (fault-call:0 fault-nth:3):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  958.207425] FAULT_INJECTION: forcing a failure.
[  958.207425] name failslab, interval 1, probability 0, space 0, times 0
[  958.210575] FAULT_INJECTION: forcing a failure.
[  958.210575] name failslab, interval 1, probability 0, space 0, times 0
[  958.220146] CPU: 1 PID: 4581 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  958.238141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  958.238145] Call Trace:
08:17:03 executing program 3 (fault-call:0 fault-nth:4):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:03 executing program 1 (fault-call:2 fault-nth:33):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:03 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

[  958.238157]  dump_stack+0x1b2/0x283
[  958.238168]  should_fail.cold+0x10a/0x154
[  958.238179]  should_failslab+0xd6/0x130
[  958.238188]  kmem_cache_alloc_node_trace+0x25a/0x400
[  958.238197]  __kmalloc_node+0x38/0x70
[  958.238205]  sbitmap_init_node+0x10c/0x3d0
[  958.238216]  blk_mq_realloc_hw_ctxs+0x59b/0xe00
[  958.238230]  blk_mq_init_allocated_queue+0x20c/0xfd0
[  958.238238]  ? blkcg_init_queue+0x19f/0x410
[  958.238245]  ? blk_alloc_queue_node+0x82f/0xb40
[  958.238253]  blk_mq_init_queue+0x5a/0x90
[  958.238261]  loop_add+0x303/0x830
[  958.238268]  ? loop_queue_rq+0x280/0x280
[  958.238275]  ? trace_hardirqs_on+0x10/0x10
[  958.238283]  loop_control_ioctl+0x161/0x3f0
[  958.238289]  ? loop_lookup+0x190/0x190
[  958.238296]  ? SyS_write+0x1b7/0x210
[  958.238304]  ? loop_lookup+0x190/0x190
[  958.238311]  do_vfs_ioctl+0x75a/0xff0
[  958.238320]  ? ioctl_preallocate+0x1a0/0x1a0
[  958.238325]  ? lock_downgrade+0x740/0x740
[  958.238334]  ? __fget+0x225/0x360
[  958.238341]  ? do_vfs_ioctl+0xff0/0xff0
[  958.238348]  ? security_file_ioctl+0x83/0xb0
[  958.238355]  SyS_ioctl+0x7f/0xb0
[  958.238361]  ? do_vfs_ioctl+0xff0/0xff0
[  958.238369]  do_syscall_64+0x1d5/0x640
[  958.238381]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  958.238387] RIP: 0033:0x45e219
[  958.238391] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  958.238399] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  958.238402] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  958.238406] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  958.238410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020
[  958.238413] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  958.238431] CPU: 0 PID: 4585 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  958.238437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  958.238440] Call Trace:
[  958.238449]  dump_stack+0x1b2/0x283
[  958.238461]  should_fail.cold+0x10a/0x154
[  958.238471]  should_failslab+0xd6/0x130
[  958.238480]  kmem_cache_alloc+0x28e/0x3c0
[  958.238491]  get_empty_filp+0x86/0x3e0
[  958.238500]  path_openat+0x84/0x2970
[  958.238514]  ? check_preemption_disabled+0x35/0x240
[  958.238523]  ? path_lookupat+0x780/0x780
[  958.238530]  ? trace_hardirqs_on+0x10/0x10
[  958.238543]  do_filp_open+0x179/0x3c0
[  958.238551]  ? may_open_dev+0xe0/0xe0
[  958.238559]  ? __alloc_fd+0x1be/0x490
[  958.238571]  ? lock_downgrade+0x740/0x740
[  958.238583]  ? do_raw_spin_unlock+0x164/0x220
[  958.238590]  ? _raw_spin_unlock+0x29/0x40
[  958.238596]  ? __alloc_fd+0x1be/0x490
[  958.238607]  do_sys_open+0x296/0x410
[  958.238623]  ? filp_open+0x60/0x60
[  958.238633]  ? do_syscall_64+0x7a/0x640
[  958.238644]  ? do_sys_open+0x410/0x410
[  958.238652]  do_syscall_64+0x1d5/0x640
[  958.238664]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  958.238671] RIP: 0033:0x417d11
[  958.238675] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  958.238684] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  958.238689] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  958.238694] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  958.238698] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000002
[  958.238703] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  958.273436] FAULT_INJECTION: forcing a failure.
[  958.273436] name failslab, interval 1, probability 0, space 0, times 0
[  958.273448] CPU: 1 PID: 4590 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  958.273454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  958.273457] Call Trace:
[  958.273472]  dump_stack+0x1b2/0x283
[  958.273488]  should_fail.cold+0x10a/0x154
[  958.273502]  should_failslab+0xd6/0x130
[  958.273516]  kmem_cache_alloc_trace+0x29a/0x3d0
[  958.273531]  apparmor_file_alloc_security+0x129/0x800
[  958.273546]  security_file_alloc+0x66/0xa0
[  958.273558]  ? selinux_is_enabled+0x5/0x50
[  958.273571]  get_empty_filp+0x15c/0x3e0
[  958.273580]  path_openat+0x84/0x2970
[  958.273591]  ? get_pid_task+0x91/0x130
[  958.273605]  ? path_lookupat+0x780/0x780
[  958.273614]  ? trace_hardirqs_on+0x10/0x10
[  958.273630]  do_filp_open+0x179/0x3c0
[  958.273639]  ? may_open_dev+0xe0/0xe0
[  958.273649]  ? __alloc_fd+0x1be/0x490
[  958.273661]  ? lock_downgrade+0x740/0x740
[  958.273675]  ? do_raw_spin_unlock+0x164/0x220
[  958.273685]  ? _raw_spin_unlock+0x29/0x40
[  958.273693]  ? __alloc_fd+0x1be/0x490
[  958.273709]  do_sys_open+0x296/0x410
[  958.273720]  ? filp_open+0x60/0x60
[  958.273732]  ? __do_page_fault+0x159/0xad0
[  958.273742]  ? do_syscall_64+0x4c/0x640
[  958.273750]  ? do_sys_open+0x410/0x410
[  958.273761]  do_syscall_64+0x1d5/0x640
[  958.273776]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  958.273784] RIP: 0033:0x417d11
[  958.273789] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  958.273799] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  958.273805] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  958.273811] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  958.273816] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000003
[  958.273822] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  958.324737] FAULT_INJECTION: forcing a failure.
[  958.324737] name failslab, interval 1, probability 0, space 0, times 0
[  958.332498] FAULT_INJECTION: forcing a failure.
[  958.332498] name failslab, interval 1, probability 0, space 0, times 0
[  958.354111] CPU: 0 PID: 4599 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  958.828397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  958.828400] Call Trace:
[  958.828417]  dump_stack+0x1b2/0x283
[  958.828429]  should_fail.cold+0x10a/0x154
[  958.828439]  should_failslab+0xd6/0x130
[  958.828449]  kmem_cache_alloc_node_trace+0x25a/0x400
08:17:04 executing program 3 (fault-call:0 fault-nth:5):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:04 executing program 3 (fault-call:0 fault-nth:6):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  958.828460]  blk_alloc_flush_queue+0x4f/0x2b0
[  958.828468]  blk_mq_realloc_hw_ctxs+0x6ab/0xe00
[  958.828483]  blk_mq_init_allocated_queue+0x20c/0xfd0
[  958.828490]  ? blkcg_init_queue+0x19f/0x410
[  958.828497]  ? blk_alloc_queue_node+0x82f/0xb40
[  958.828507]  blk_mq_init_queue+0x5a/0x90
[  958.828517]  loop_add+0x303/0x830
[  958.828528]  ? loop_queue_rq+0x280/0x280
[  958.828539]  ? trace_hardirqs_on+0x10/0x10
[  958.828551]  loop_control_ioctl+0x161/0x3f0
[  958.828560]  ? loop_lookup+0x190/0x190
[  958.828571]  ? SyS_write+0x1b7/0x210
[  958.828584]  ? loop_lookup+0x190/0x190
[  958.828600]  do_vfs_ioctl+0x75a/0xff0
[  958.828613]  ? ioctl_preallocate+0x1a0/0x1a0
[  958.828621]  ? lock_downgrade+0x740/0x740
[  958.828637]  ? __fget+0x225/0x360
[  958.828647]  ? do_vfs_ioctl+0xff0/0xff0
[  958.828658]  ? security_file_ioctl+0x83/0xb0
[  958.828670]  SyS_ioctl+0x7f/0xb0
[  958.828678]  ? do_vfs_ioctl+0xff0/0xff0
[  958.828690]  do_syscall_64+0x1d5/0x640
[  958.828709]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  958.828719] RIP: 0033:0x45e219
[  958.828724] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  958.828735] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  958.828741] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  958.828745] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  958.828749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021
[  958.828753] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  958.828770] CPU: 1 PID: 4600 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  958.828775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  958.828778] Call Trace:
[  958.828788]  dump_stack+0x1b2/0x283
[  958.828798]  should_fail.cold+0x10a/0x154
[  958.828807]  should_failslab+0xd6/0x130
[  958.828817]  kmem_cache_alloc_trace+0x47/0x3d0
[  958.828831]  proc_self_get_link+0x1af/0x220
[  958.828840]  ? proc_ns_dir_lookup+0x250/0x250
[  958.828848]  link_path_walk+0xc47/0x10a0
[  958.828860]  ? walk_component+0xbc0/0xbc0
[  958.828871]  path_openat+0x15e/0x2970
[  958.828881]  ? get_pid_task+0x91/0x130
[  958.828891]  ? path_lookupat+0x780/0x780
[  958.828899]  ? trace_hardirqs_on+0x10/0x10
[  958.828914]  do_filp_open+0x179/0x3c0
[  958.828922]  ? may_open_dev+0xe0/0xe0
[  958.828941]  ? do_raw_spin_unlock+0x164/0x220
[  958.828950]  ? __alloc_fd+0x1be/0x490
[  958.828965]  do_sys_open+0x296/0x410
[  958.828975]  ? filp_open+0x60/0x60
[  958.828987]  ? __do_page_fault+0x159/0xad0
[  958.828995]  ? do_syscall_64+0x4c/0x640
[  958.829002]  ? do_sys_open+0x410/0x410
[  958.829010]  do_syscall_64+0x1d5/0x640
[  958.829024]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  958.829031] RIP: 0033:0x417d11
[  958.829035] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  958.829045] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  958.829051] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  958.829056] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  958.829060] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000004
[  958.829066] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  958.895303] FAULT_INJECTION: forcing a failure.
[  958.895303] name failslab, interval 1, probability 0, space 0, times 0
[  958.895315] CPU: 0 PID: 4605 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  958.895321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  958.895327] Call Trace:
[  958.895343]  dump_stack+0x1b2/0x283
[  958.895358]  should_fail.cold+0x10a/0x154
[  958.895373]  should_failslab+0xd6/0x130
[  958.895385]  kmem_cache_alloc+0x28e/0x3c0
[  958.895397]  __d_alloc+0x2a/0xa20
[  958.895411]  d_alloc+0x46/0x240
[  958.895423]  d_alloc_parallel+0xd6/0x16b0
[  958.895435]  ? __lock_acquire+0x5fc/0x3f20
[  958.895448]  ? kfree+0xc9/0x250
[  958.895458]  ? walk_component+0x1bf/0xbc0
[  958.895467]  ? link_path_walk+0x4cb/0x10a0
[  958.895474]  ? path_openat+0x15e/0x2970
[  958.895481]  ? do_filp_open+0x179/0x3c0
[  958.895489]  ? do_sys_open+0x296/0x410
[  958.895499]  ? __d_lookup_rcu+0x640/0x640
[  958.895511]  ? lock_acquire+0x170/0x3f0
[  958.895520]  ? lookup_slow+0x129/0x400
[  958.895537]  lookup_slow+0x175/0x400
[  958.895565]  ? follow_dotdot_rcu+0xf00/0xf00
[  958.895575]  ? lookup_fast+0x430/0xe30
[  958.895595]  walk_component+0x6a1/0xbc0
[  958.895609]  ? lookup_fast+0xe30/0xe30
[  958.895622]  ? proc_pid_permission+0x181/0x240
[  958.895633]  ? security_inode_permission+0xb5/0xf0
[  958.895641]  ? mem_write+0x60/0x60
[  958.895655]  link_path_walk+0x823/0x10a0
[  958.895671]  ? walk_component+0xbc0/0xbc0
[  958.895684]  path_openat+0x15e/0x2970
[  958.895693]  ? get_pid_task+0x91/0x130
[  958.895705]  ? path_lookupat+0x780/0x780
[  958.895714]  ? trace_hardirqs_on+0x10/0x10
[  958.895728]  do_filp_open+0x179/0x3c0
[  958.895736]  ? may_open_dev+0xe0/0xe0
[  958.895752]  ? simple_attr_release+0x40/0x40
[  958.895766]  ? do_raw_spin_unlock+0x164/0x220
[  958.895777]  ? __alloc_fd+0x1be/0x490
[  958.895793]  do_sys_open+0x296/0x410
[  958.895804]  ? filp_open+0x60/0x60
[  958.895816]  ? __do_page_fault+0x159/0xad0
[  958.895825]  ? do_syscall_64+0x4c/0x640
[  958.895834]  ? do_sys_open+0x410/0x410
[  958.895844]  do_syscall_64+0x1d5/0x640
[  958.895861]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  958.895869] RIP: 0033:0x417d11
[  958.895874] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  958.895885] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  958.895891] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  958.895897] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  958.895903] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000005
[  958.895909] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  958.927599] FAULT_INJECTION: forcing a failure.
[  958.927599] name failslab, interval 1, probability 0, space 0, times 0
[  958.927612] CPU: 0 PID: 4607 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  958.927618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  958.927622] Call Trace:
[  958.927637]  dump_stack+0x1b2/0x283
[  958.927653]  should_fail.cold+0x10a/0x154
[  958.927668]  should_failslab+0xd6/0x130
[  958.927681]  kmem_cache_alloc+0x28e/0x3c0
[  958.927693]  ? proc_i_callback+0x20/0x20
[  958.927703]  proc_alloc_inode+0x18/0x1a0
[  958.927712]  ? proc_i_callback+0x20/0x20
[  958.927721]  alloc_inode+0x5d/0x170
[  958.927729]  new_inode+0x1d/0xf0
[  958.927738]  proc_pid_make_inode+0x22/0x230
[  958.927749]  proc_pident_instantiate+0x78/0x280
[  958.927760]  proc_pident_lookup+0x181/0x200
[  958.927776]  lookup_slow+0x20a/0x400
[  958.927793]  ? follow_dotdot_rcu+0xf00/0xf00
[  958.927802]  ? lookup_fast+0x430/0xe30
[  958.927822]  walk_component+0x6a1/0xbc0
[  958.927835]  ? lookup_fast+0xe30/0xe30
[  958.927845]  ? proc_pid_permission+0x181/0x240
[  958.927855]  ? security_inode_permission+0xb5/0xf0
[  958.927863]  ? mem_write+0x60/0x60
[  958.927877]  link_path_walk+0x823/0x10a0
[  958.927893]  ? walk_component+0xbc0/0xbc0
[  958.927906]  path_openat+0x15e/0x2970
[  958.927917]  ? get_pid_task+0x91/0x130
[  958.927931]  ? path_lookupat+0x780/0x780
[  958.927940]  ? trace_hardirqs_on+0x10/0x10
[  958.927956]  do_filp_open+0x179/0x3c0
[  958.927965]  ? may_open_dev+0xe0/0xe0
[  958.927981]  ? simple_attr_release+0x40/0x40
[  958.927994]  ? do_raw_spin_unlock+0x164/0x220
[  958.928004]  ? __alloc_fd+0x1be/0x490
[  958.928021]  do_sys_open+0x296/0x410
[  958.928032]  ? filp_open+0x60/0x60
[  958.928044]  ? __do_page_fault+0x159/0xad0
[  958.928053]  ? do_syscall_64+0x4c/0x640
[  958.928061]  ? do_sys_open+0x410/0x410
[  958.928072]  do_syscall_64+0x1d5/0x640
[  958.928088]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  958.928096] RIP: 0033:0x417d11
[  958.928101] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  958.928111] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  958.928116] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  958.928122] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
08:17:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "475f848ff5070fae0b58006f99f5466c"}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "ea3e02f647d1bcf622d1fafbd0986bad"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x74}, 0x1, 0x0, 0x0, 0xa0}, 0x4040)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="df99d81a7f49d52606a989b17a7912b2877637a69dfe4d7b57f120ad8ae1", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x32}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000900)

08:17:05 executing program 1 (fault-call:2 fault-nth:34):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:05 executing program 3 (fault-call:0 fault-nth:7):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:05 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0xfffffffe}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffffb, <r0=>0x0}, 0x8)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000140)=@buf={0x0, &(0x7f0000000100)})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x1}, 0x8)

08:17:05 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000200)={0xa0ca, 0x8, [{0xd}, {0x5, 0x1}, {0xd, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x8}, {0x8}]})
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x151202)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c595c1d", @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYBLOB="fc65355c06c34a5f9e5dae7ba16757842454fd0257cf489e8ee35c73e1eccf06864fa0b89f4a382c4b9aa33012b82f989f9f5cdc945105c0fca0fdfb1197dcda6dd7dc9297d34a8baba2e61f18c83962334c60b4eb8fe8d8992d1d75011159678a4bd1f871c94212734a0a040a8ed653623cf54fb479c74c5ad6163fa333c9c1cde51fb2198d33ba3735c554a2dda08fecd75e6d4462f4ac8323faa6f2847116fd154b8379a0fb9bfbf64b7b04d9e9750f5cb2ad715cad7294d585644c1f5c7052706f514ef47287831a6dd25ecab9d81aba1dd174cf1d4f36af8312f9c81c4a00e24c83f50999d5cc2d00bf4c5b639553bef7fb145a3e3a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x8)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
getsockopt$nfc_llcp(r3, 0x118, 0x1, &(0x7f00000001c0)=""/11, 0xb)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={r0})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={<r6=>r5})
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000002c0)=0x9ae1, 0x4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x400}, 0xfffffffffffffd34)

08:17:05 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  958.928127] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000006
[  958.928133] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
08:17:05 executing program 4:
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000002c0)=0xfffff32a, 0x4)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
socketpair(0x26, 0x6, 0x81, &(0x7f00000005c0)={<r4=>0xffffffffffffffff})
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/pid\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x968c0e8bdfb83320, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x8}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x2)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x400800, 0x0)
connect$tipc(r7, &(0x7f00000004c0)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x3}}, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x20008010)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140)=0x6, 0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xffffffc0}, 0x8)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x4, 0x0, 0x8})

[  959.747790] FAULT_INJECTION: forcing a failure.
[  959.747790] name failslab, interval 1, probability 0, space 0, times 0
[  959.763136] FAULT_INJECTION: forcing a failure.
[  959.763136] name failslab, interval 1, probability 0, space 0, times 0
[  959.765657] CPU: 0 PID: 4619 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
08:17:05 executing program 1 (fault-call:2 fault-nth:35):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:05 executing program 3 (fault-call:0 fault-nth:8):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:05 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000080", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="0c0099001d000000260000000800220100000000080027000300000008009f000100000004006c000800a000223e000008009f0002000000080022014103000008009f0003000000080027000200000005001801110000000500180134000000050019010600000004008700"], 0x88}}, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8ac73000d617f68baf153b1b505422d269a592292ae22c3044c377aac1378e71cf21c6344844c0f836654d4ad11b09844cb8b32a23e9b6a2a390cbe0da746e103db9fe21a930434267a27b062a55b829275ca7b6d69b41d537306721bec3fc68c9be02ac4a5d23ed3acfe78a", @ANYRES16=r0, @ANYBLOB="02002dbd7000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="05001801110000000800270003000000080057000a1300000c00cd000000ff03dd310600"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000084)
r4 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x3f, 0x20000)
sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, 0x464, 0x200, 0x70bd2c, 0x25dfdbfc, "24c673438a5c86013bdca61dc993d29d873f6e940287c14a82ab670019479ce91cd83ff3b841ca8a45021cfcf2ff10fed607e642c4a8a6ece921d9c7708ce33749b364e3df67d26ee815e622357ac77793aa2a5866e292e10b8e998724fd8775f872c38103de416f395e6c9d391263ef28cf7520ad399cea2c92d85874e0537b8631d67a4098e38fabafa5844a909cd055f186c21cf2ec433678fa5c0fcfd3eb85bd1ca3e9", [""]}, 0xb8}, 0x1, 0x0, 0x0, 0x885}, 0x0)
pipe(&(0x7f0000000840)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=@deltaction={0x224, 0x31, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x94, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff000}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xfffffffffffffe4e, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x71d844fc}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20044040}, 0x4004)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, r0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_IE={0x60, 0x2a, [@gcr_ga={0xbd, 0x6}, @mic={0x8c, 0x18, {0xfcd, "ad8f49ccf540", @long="78c41a55a69acfca40baf019b53064a8"}}, @supported_rates, @mesh_chsw={0x76, 0x6, {0x7, 0x84, 0x16, 0x428}}, @random={0x0, 0x2e, "24c4c9bedda4287ed3e80fb4d68d16fb0e726d3ea4a0239327c773cea3bda81262ea4d627b2140fc2a3b601842fe"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xb7}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x20004041)

[  959.782860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  959.782864] Call Trace:
[  959.782877]  dump_stack+0x1b2/0x283
[  959.782891]  should_fail.cold+0x10a/0x154
[  959.782902]  should_failslab+0xd6/0x130
08:17:05 executing program 1 (fault-call:2 fault-nth:36):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:05 executing program 3 (fault-call:0 fault-nth:9):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  959.782911]  kmem_cache_alloc+0x28e/0x3c0
[  959.782920]  __d_alloc+0x2a/0xa20
[  959.782929]  d_alloc+0x46/0x240
[  959.782937]  d_alloc_parallel+0xd6/0x16b0
[  959.782948]  ? lock_acquire+0x170/0x3f0
[  959.782954]  ? lock_downgrade+0x740/0x740
[  959.782963]  ? __d_lookup_rcu+0x640/0x640
[  959.782970]  ? mark_held_locks+0xa6/0xf0
[  959.782979]  ? d_lookup+0x156/0x220
[  959.782988]  lookup_open+0x462/0x1750
[  959.783003]  ? vfs_mkdir+0x6e0/0x6e0
[  959.783016]  path_openat+0x14bb/0x2970
[  959.783027]  ? path_lookupat+0x780/0x780
[  959.783035]  ? trace_hardirqs_on+0x10/0x10
[  959.783045]  do_filp_open+0x179/0x3c0
[  959.783051]  ? may_open_dev+0xe0/0xe0
[  959.783062]  ? simple_attr_release+0x40/0x40
[  959.783071]  ? do_raw_spin_unlock+0x164/0x220
[  959.783078]  ? __alloc_fd+0x1be/0x490
[  959.783089]  do_sys_open+0x296/0x410
[  959.783097]  ? filp_open+0x60/0x60
[  959.783107]  ? __do_page_fault+0x159/0xad0
[  959.783114]  ? do_syscall_64+0x4c/0x640
[  959.783119]  ? do_sys_open+0x410/0x410
[  959.783126]  do_syscall_64+0x1d5/0x640
[  959.783138]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  959.783144] RIP: 0033:0x417d11
[  959.783147] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  959.783155] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  959.783159] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  959.783163] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  959.783166] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000007
[  959.783170] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  959.783190] CPU: 1 PID: 4624 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  959.783196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  959.783199] Call Trace:
[  959.783210]  dump_stack+0x1b2/0x283
[  959.783222]  should_fail.cold+0x10a/0x154
[  959.783233]  should_failslab+0xd6/0x130
[  959.783244]  kmem_cache_alloc_node_trace+0x25a/0x400
[  959.783256]  __kmalloc_node+0x38/0x70
[  959.783266]  blk_alloc_flush_queue+0xf7/0x2b0
[  959.783277]  blk_mq_realloc_hw_ctxs+0x6ab/0xe00
[  959.783296]  blk_mq_init_allocated_queue+0x20c/0xfd0
[  959.783306]  ? blkcg_init_queue+0x19f/0x410
[  959.783315]  ? blk_alloc_queue_node+0x82f/0xb40
[  959.783327]  blk_mq_init_queue+0x5a/0x90
[  959.783337]  loop_add+0x303/0x830
[  959.783347]  ? loop_queue_rq+0x280/0x280
[  959.783356]  ? trace_hardirqs_on+0x10/0x10
[  959.783367]  loop_control_ioctl+0x161/0x3f0
[  959.783377]  ? loop_lookup+0x190/0x190
[  959.783386]  ? SyS_write+0x1b7/0x210
[  959.783398]  ? loop_lookup+0x190/0x190
[  959.783407]  do_vfs_ioctl+0x75a/0xff0
[  959.783419]  ? ioctl_preallocate+0x1a0/0x1a0
[  959.783427]  ? lock_downgrade+0x740/0x740
[  959.783440]  ? __fget+0x225/0x360
[  959.783449]  ? do_vfs_ioctl+0xff0/0xff0
[  959.783458]  ? security_file_ioctl+0x83/0xb0
[  959.783467]  SyS_ioctl+0x7f/0xb0
[  959.783474]  ? do_vfs_ioctl+0xff0/0xff0
[  959.783483]  do_syscall_64+0x1d5/0x640
[  959.783496]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  959.783502] RIP: 0033:0x45e219
[  959.783507] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  959.783516] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  959.783522] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  959.783527] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  959.783532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022
[  959.783537] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  959.852744] FAULT_INJECTION: forcing a failure.
[  959.852744] name failslab, interval 1, probability 0, space 0, times 0
[  959.852757] CPU: 1 PID: 4635 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  959.852763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  959.852766] Call Trace:
[  959.852781]  dump_stack+0x1b2/0x283
[  959.852797]  should_fail.cold+0x10a/0x154
[  959.852812]  should_failslab+0xd6/0x130
[  959.852825]  kmem_cache_alloc_node_trace+0x25a/0x400
[  959.852840]  __kmalloc_node+0x38/0x70
[  959.852853]  blk_alloc_flush_queue+0xf7/0x2b0
[  959.852872]  blk_mq_realloc_hw_ctxs+0x6ab/0xe00
[  959.852894]  blk_mq_init_allocated_queue+0x20c/0xfd0
[  959.852905]  ? blkcg_init_queue+0x19f/0x410
[  959.852914]  ? blk_alloc_queue_node+0x82f/0xb40
[  959.852925]  blk_mq_init_queue+0x5a/0x90
[  959.852935]  loop_add+0x303/0x830
[  959.852946]  ? loop_queue_rq+0x280/0x280
[  959.852956]  ? trace_hardirqs_on+0x10/0x10
[  959.852968]  loop_control_ioctl+0x161/0x3f0
[  959.852977]  ? loop_lookup+0x190/0x190
[  959.852996]  ? SyS_write+0x1b7/0x210
[  959.853009]  ? loop_lookup+0x190/0x190
[  959.853020]  do_vfs_ioctl+0x75a/0xff0
[  959.853032]  ? ioctl_preallocate+0x1a0/0x1a0
[  959.853041]  ? lock_downgrade+0x740/0x740
[  959.853056]  ? __fget+0x225/0x360
[  959.853066]  ? do_vfs_ioctl+0xff0/0xff0
[  959.853076]  ? security_file_ioctl+0x83/0xb0
[  959.853087]  SyS_ioctl+0x7f/0xb0
[  959.853095]  ? do_vfs_ioctl+0xff0/0xff0
[  959.853106]  do_syscall_64+0x1d5/0x640
[  959.853123]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  959.853131] RIP: 0033:0x45e219
[  959.853136] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  959.853146] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  959.853151] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  959.853157] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  959.853162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023
[  959.853168] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  959.856290] FAULT_INJECTION: forcing a failure.
[  959.856290] name failslab, interval 1, probability 0, space 0, times 0
[  959.856302] CPU: 0 PID: 4636 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  959.856308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  959.856312] Call Trace:
[  959.856324]  dump_stack+0x1b2/0x283
[  959.856338]  should_fail.cold+0x10a/0x154
[  959.856352]  should_failslab+0xd6/0x130
[  959.856365]  kmem_cache_alloc+0x28e/0x3c0
[  959.856379]  alloc_inode+0xa0/0x170
[  959.856389]  new_inode_pseudo+0x14/0xe0
[  959.856405]  __ns_get_path+0xf8/0x6f0
[  959.856418]  ns_get_path+0x55/0xa0
[  959.856433]  proc_ns_get_link+0x12e/0x160
[  959.856444]  ? proc_ns_readlink+0x1c0/0x1c0
[  959.856456]  ? security_inode_follow_link+0xca/0x100
[  959.856470]  trailing_symlink+0x59c/0x750
[  959.856485]  ? proc_ns_readlink+0x1c0/0x1c0
[  959.856497]  path_openat+0x795/0x2970
[  959.856514]  ? path_lookupat+0x780/0x780
[  959.856525]  ? trace_hardirqs_on+0x10/0x10
[  959.856541]  do_filp_open+0x179/0x3c0
[  959.856550]  ? may_open_dev+0xe0/0xe0
[  959.856570]  ? do_raw_spin_unlock+0x164/0x220
[  959.856581]  ? __alloc_fd+0x1be/0x490
[  959.856597]  do_sys_open+0x296/0x410
[  959.856608]  ? filp_open+0x60/0x60
[  959.856620]  ? __do_page_fault+0x159/0xad0
[  959.856628]  ? do_syscall_64+0x4c/0x640
[  959.856636]  ? do_sys_open+0x410/0x410
[  959.856646]  do_syscall_64+0x1d5/0x640
[  959.856662]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  959.856670] RIP: 0033:0x417d11
[  959.856676] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  959.856686] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  959.856693] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  959.856699] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  959.856704] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000008
[  959.856711] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  959.896671] FAULT_INJECTION: forcing a failure.
[  959.896671] name failslab, interval 1, probability 0, space 0, times 0
[  959.926563] FAULT_INJECTION: forcing a failure.
[  959.926563] name failslab, interval 1, probability 0, space 0, times 0
[  959.929331] CPU: 1 PID: 4642 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  960.630021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  960.630024] Call Trace:
[  960.630041]  dump_stack+0x1b2/0x283
[  960.630054]  should_fail.cold+0x10a/0x154
[  960.630068]  should_failslab+0xd6/0x130
[  960.630080]  kmem_cache_alloc+0x28e/0x3c0
[  960.630095]  alloc_inode+0xa0/0x170
[  960.630104]  new_inode_pseudo+0x14/0xe0
[  960.630115]  __ns_get_path+0xf8/0x6f0
[  960.630128]  ns_get_path+0x55/0xa0
[  960.630142]  proc_ns_get_link+0x12e/0x160
[  960.630153]  ? proc_ns_readlink+0x1c0/0x1c0
[  960.630165]  ? security_inode_follow_link+0xca/0x100
[  960.630176]  trailing_symlink+0x59c/0x750
[  960.630183]  ? proc_ns_readlink+0x1c0/0x1c0
[  960.630190]  path_openat+0x795/0x2970
[  960.630200]  ? path_lookupat+0x780/0x780
[  960.630208]  ? trace_hardirqs_on+0x10/0x10
[  960.630218]  do_filp_open+0x179/0x3c0
[  960.630224]  ? may_open_dev+0xe0/0xe0
[  960.630237]  ? do_raw_spin_unlock+0x164/0x220
[  960.630244]  ? __alloc_fd+0x1be/0x490
[  960.630255]  do_sys_open+0x296/0x410
[  960.630262]  ? filp_open+0x60/0x60
[  960.630270]  ? __do_page_fault+0x159/0xad0
[  960.630277]  ? do_syscall_64+0x4c/0x640
[  960.630283]  ? do_sys_open+0x410/0x410
[  960.630290]  do_syscall_64+0x1d5/0x640
[  960.630302]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  960.630308] RIP: 0033:0x417d11
[  960.630312] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  960.630319] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  960.630323] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  960.630327] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  960.630331] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000009
[  960.630334] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  960.630351] CPU: 0 PID: 4640 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  960.630356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  960.630359] Call Trace:
[  960.630367]  dump_stack+0x1b2/0x283
[  960.630378]  should_fail.cold+0x10a/0x154
[  960.630389]  should_failslab+0xd6/0x130
[  960.630399]  kmem_cache_alloc_node_trace+0x25a/0x400
[  960.630412]  __kmalloc_node+0x38/0x70
[  960.630424]  sbitmap_init_node+0x10c/0x3d0
[  960.630436]  sbitmap_queue_init_node+0x37/0x5d0
[  960.630445]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  960.630454]  ? kmem_cache_alloc_node_trace+0x383/0x400
[  960.630467]  blk_mq_init_tags+0xf4/0x280
[  960.630479]  blk_mq_alloc_rq_map+0x90/0x220
[  960.630490]  blk_mq_sched_alloc_tags+0xaa/0x240
[  960.630502]  blk_mq_init_sched+0x18d/0x4a0
[  960.630511]  ? _raw_spin_unlock+0x29/0x40
[  960.630525]  elevator_init+0x2ee/0x410
[  960.630535]  blk_mq_sched_init+0x28/0x40
[  960.630545]  blk_mq_init_allocated_queue+0xca0/0xfd0
[  960.630560]  blk_mq_init_queue+0x5a/0x90
[  960.630570]  loop_add+0x303/0x830
[  960.630579]  ? loop_queue_rq+0x280/0x280
[  960.630588]  ? trace_hardirqs_on+0x10/0x10
[  960.630598]  loop_control_ioctl+0x161/0x3f0
[  960.630606]  ? loop_lookup+0x190/0x190
[  960.630615]  ? SyS_write+0x1b7/0x210
[  960.630625]  ? loop_lookup+0x190/0x190
[  960.630635]  do_vfs_ioctl+0x75a/0xff0
[  960.630646]  ? ioctl_preallocate+0x1a0/0x1a0
[  960.630652]  ? lock_downgrade+0x740/0x740
[  960.630663]  ? __fget+0x225/0x360
[  960.630673]  ? do_vfs_ioctl+0xff0/0xff0
[  960.630681]  ? security_file_ioctl+0x83/0xb0
[  960.630692]  SyS_ioctl+0x7f/0xb0
[  960.630700]  ? do_vfs_ioctl+0xff0/0xff0
[  960.630710]  do_syscall_64+0x1d5/0x640
[  960.630725]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  960.630731] RIP: 0033:0x45e219
[  960.630736] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  960.630745] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  960.630751] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
08:17:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept(r0, &(0x7f0000000640)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f00000006c0)=0x80)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x784, 0x7a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c045}, 0x4)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000305df5fd4eaa0b9600"/22, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)

08:17:06 executing program 1 (fault-call:2 fault-nth:37):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:06 executing program 3 (fault-call:0 fault-nth:10):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:06 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:06 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4}, 0x8)

[  960.630755] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  960.630761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024
[  960.630766] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  961.042399] FAULT_INJECTION: forcing a failure.
08:17:06 executing program 0:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

[  961.042399] name failslab, interval 1, probability 0, space 0, times 0
[  961.054621] FAULT_INJECTION: forcing a failure.
[  961.054621] name failslab, interval 1, probability 0, space 0, times 0
[  961.072317] CPU: 1 PID: 4657 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  961.080239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  961.089641] Call Trace:
[  961.089657]  dump_stack+0x1b2/0x283
[  961.089673]  should_fail.cold+0x10a/0x154
[  961.089687]  should_failslab+0xd6/0x130
[  961.089700]  kmem_cache_alloc_node_trace+0x25a/0x400
[  961.089715]  sbitmap_queue_init_node+0x27f/0x5d0
[  961.089728]  ? kmem_cache_alloc_node_trace+0x383/0x400
[  961.089742]  blk_mq_init_tags+0xf4/0x280
[  961.089754]  blk_mq_alloc_rq_map+0x90/0x220
[  961.089766]  blk_mq_sched_alloc_tags+0xaa/0x240
[  961.089779]  blk_mq_init_sched+0x18d/0x4a0
[  961.089790]  ? _raw_spin_unlock+0x29/0x40
[  961.089803]  elevator_init+0x2ee/0x410
[  961.089814]  blk_mq_sched_init+0x28/0x40
[  961.089825]  blk_mq_init_allocated_queue+0xca0/0xfd0
08:17:06 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000140), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

[  961.089841]  blk_mq_init_queue+0x5a/0x90
[  961.089851]  loop_add+0x303/0x830
[  961.089862]  ? loop_queue_rq+0x280/0x280
[  961.089872]  ? trace_hardirqs_on+0x10/0x10
[  961.089883]  loop_control_ioctl+0x161/0x3f0
[  961.089893]  ? loop_lookup+0x190/0x190
[  961.089902]  ? SyS_write+0x1b7/0x210
[  961.089914]  ? loop_lookup+0x190/0x190
[  961.089926]  do_vfs_ioctl+0x75a/0xff0
[  961.189257]  ? ioctl_preallocate+0x1a0/0x1a0
[  961.189267]  ? lock_downgrade+0x740/0x740
[  961.189282]  ? __fget+0x225/0x360
[  961.189292]  ? do_vfs_ioctl+0xff0/0xff0
[  961.189303]  ? security_file_ioctl+0x83/0xb0
[  961.189313]  SyS_ioctl+0x7f/0xb0
[  961.189320]  ? do_vfs_ioctl+0xff0/0xff0
[  961.189332]  do_syscall_64+0x1d5/0x640
[  961.189349]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  961.189356] RIP: 0033:0x45e219
[  961.189360] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  961.189370] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  961.189375] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
08:17:06 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00ff00000050745dd8bb3c8ef2d0ef37b2200000000074020000"], 0x71}}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'erspan0\x00', <r3=>0x0, 0x10, 0x700, 0x4, 0x8, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x0, [{@private=0xa010102, 0x800}, {@broadcast, 0x3}]}]}}}}})
socketpair(0x29, 0xa, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ae6d40b609a4096}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1f, 0xc}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10b8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008004)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@deltclass={0x44, 0x29, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6, 0x6}, {0x0, 0x9}, {0xe, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x40}}, @tclass_kind_options=@c_taprio={0xb, 0x1, 'taprio\x00'}, @tclass_kind_options=@c_taprio={0xb, 0x1, 'taprio\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000040)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1c}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a6056f978401d1f01135ee6bdc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

08:17:06 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x27, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)

08:17:06 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

08:17:06 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x1f, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="40489c16c18261c708481400008f306d21c8", @ANYRES16=r1, @ANYBLOB="000429bd7000fcdbdf250700000005000700030000000500130003000000140008006970766c616e3000000000000000000006001d0009000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4000010)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

[  961.189380] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  961.189384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025
[  961.189388] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  961.190680] CPU: 1 PID: 4658 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  961.283493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
08:17:06 executing program 1 (fault-call:2 fault-nth:38):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:06 executing program 3 (fault-call:0 fault-nth:11):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  961.283497] Call Trace:
[  961.283513]  dump_stack+0x1b2/0x283
[  961.283527]  should_fail.cold+0x10a/0x154
[  961.283541]  should_failslab+0xd6/0x130
[  961.283552]  kmem_cache_alloc+0x28e/0x3c0
[  961.283565]  __d_alloc+0x2a/0xa20
[  961.283579]  __ns_get_path+0x2df/0x6f0
[  961.283591]  ns_get_path+0x55/0xa0
08:17:06 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

08:17:06 executing program 3 (fault-call:0 fault-nth:12):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:06 executing program 1 (fault-call:2 fault-nth:39):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:06 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8)
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000000040))

08:17:06 executing program 3 (fault-call:0 fault-nth:13):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  961.283604]  proc_ns_get_link+0x12e/0x160
[  961.283614]  ? proc_ns_readlink+0x1c0/0x1c0
[  961.283626]  ? security_inode_follow_link+0xca/0x100
[  961.283638]  trailing_symlink+0x59c/0x750
[  961.283647]  ? proc_ns_readlink+0x1c0/0x1c0
[  961.283657]  path_openat+0x795/0x2970
[  961.283673]  ? path_lookupat+0x780/0x780
[  961.283682]  ? trace_hardirqs_on+0x10/0x10
[  961.283698]  do_filp_open+0x179/0x3c0
[  961.283706]  ? may_open_dev+0xe0/0xe0
[  961.283727]  ? do_raw_spin_unlock+0x164/0x220
[  961.283738]  ? __alloc_fd+0x1be/0x490
[  961.283754]  do_sys_open+0x296/0x410
[  961.283765]  ? filp_open+0x60/0x60
[  961.283778]  ? __do_page_fault+0x159/0xad0
[  961.283787]  ? do_syscall_64+0x4c/0x640
[  961.283795]  ? do_sys_open+0x410/0x410
[  961.283805]  do_syscall_64+0x1d5/0x640
08:17:06 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  961.283822]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  961.283834] RIP: 0033:0x417d11
[  961.283839] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  961.283849] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  961.283855] RDX: 00007f935dde7bd1 RSI: 0000000000000002 RDI: 00007f935dde7bc0
[  961.283860] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  961.283866] R10: 0000000000000006 R11: 0000000000000293 R12: 000000000000000a
[  961.283871] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  961.363442] FAULT_INJECTION: forcing a failure.
[  961.363442] name failslab, interval 1, probability 0, space 0, times 0
[  961.363454] CPU: 1 PID: 4688 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  961.363459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  961.363463] Call Trace:
[  961.363478]  dump_stack+0x1b2/0x283
[  961.363493]  should_fail.cold+0x10a/0x154
[  961.363508]  should_failslab+0xd6/0x130
[  961.363521]  kmem_cache_alloc+0x28e/0x3c0
[  961.363533]  getname_flags+0xc8/0x550
[  961.363546]  do_sys_open+0x1ce/0x410
[  961.363556]  ? filp_open+0x60/0x60
[  961.363569]  ? __do_page_fault+0x159/0xad0
[  961.363578]  ? do_syscall_64+0x4c/0x640
[  961.363587]  ? do_sys_open+0x410/0x410
[  961.363596]  do_syscall_64+0x1d5/0x640
[  961.363611]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  961.363618] RIP: 0033:0x417d11
[  961.363623] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  961.363633] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  961.363640] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007f935dde7bc0
[  961.363645] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  961.363650] R10: 0000000000000006 R11: 0000000000000293 R12: 000000000000000b
[  961.363655] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  961.369434] FAULT_INJECTION: forcing a failure.
[  961.369434] name failslab, interval 1, probability 0, space 0, times 0
[  961.369445] CPU: 1 PID: 4690 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  961.369451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  961.369455] Call Trace:
[  961.369469]  dump_stack+0x1b2/0x283
[  961.369484]  should_fail.cold+0x10a/0x154
[  961.369498]  should_failslab+0xd6/0x130
[  961.369511]  kmem_cache_alloc_node_trace+0x25a/0x400
[  961.369526]  sbitmap_queue_init_node+0x27f/0x5d0
[  961.369538]  ? kmem_cache_alloc_node_trace+0x383/0x400
[  961.369551]  blk_mq_init_tags+0xf4/0x280
[  961.369562]  blk_mq_alloc_rq_map+0x90/0x220
[  961.369574]  blk_mq_sched_alloc_tags+0xaa/0x240
[  961.369595]  blk_mq_init_sched+0x18d/0x4a0
[  961.369607]  ? _raw_spin_unlock+0x29/0x40
[  961.369621]  elevator_init+0x2ee/0x410
[  961.369631]  blk_mq_sched_init+0x28/0x40
[  961.369642]  blk_mq_init_allocated_queue+0xca0/0xfd0
[  961.369657]  blk_mq_init_queue+0x5a/0x90
[  961.369667]  loop_add+0x303/0x830
[  961.369677]  ? loop_queue_rq+0x280/0x280
[  961.369687]  ? trace_hardirqs_on+0x10/0x10
[  961.369698]  loop_control_ioctl+0x161/0x3f0
[  961.369707]  ? loop_lookup+0x190/0x190
[  961.369716]  ? SyS_write+0x1b7/0x210
[  961.369727]  ? loop_lookup+0x190/0x190
[  961.369737]  do_vfs_ioctl+0x75a/0xff0
[  961.369748]  ? ioctl_preallocate+0x1a0/0x1a0
[  961.369756]  ? lock_downgrade+0x740/0x740
[  961.369769]  ? __fget+0x225/0x360
[  961.369778]  ? do_vfs_ioctl+0xff0/0xff0
[  961.369788]  ? security_file_ioctl+0x83/0xb0
[  961.369798]  SyS_ioctl+0x7f/0xb0
[  961.369806]  ? do_vfs_ioctl+0xff0/0xff0
[  961.369817]  do_syscall_64+0x1d5/0x640
[  961.369838]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  961.369845] RIP: 0033:0x45e219
[  961.369851] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  961.369861] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  961.369867] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  961.369872] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  961.369877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026
[  961.369882] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  961.404959] FAULT_INJECTION: forcing a failure.
[  961.404959] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  961.404971] CPU: 1 PID: 4693 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  961.404977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  961.404981] Call Trace:
[  961.404994]  dump_stack+0x1b2/0x283
[  961.405010]  should_fail.cold+0x10a/0x154
[  961.405025]  __alloc_pages_nodemask+0x22c/0x2720
[  961.405039]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  961.405052]  ? __save_stack_trace+0xa0/0x160
[  961.405067]  ? __lock_acquire+0x5fc/0x3f20
[  961.405079]  ? kasan_slab_free+0xc3/0x1a0
[  961.405088]  ? kmem_cache_free+0x7c/0x2b0
[  961.405097]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  961.405106]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  961.405122]  ? lock_acquire+0x170/0x3f0
[  961.405130]  ? lock_downgrade+0x740/0x740
[  961.405146]  cache_grow_begin+0x91/0x630
[  961.405158]  ? check_preemption_disabled+0x35/0x240
[  961.405170]  cache_alloc_refill+0x273/0x350
[  961.405184]  kmem_cache_alloc+0x333/0x3c0
[  961.405195]  getname_flags+0xc8/0x550
[  961.405207]  do_sys_open+0x1ce/0x410
[  961.405218]  ? filp_open+0x60/0x60
[  961.405230]  ? __do_page_fault+0x159/0xad0
[  961.405239]  ? do_syscall_64+0x4c/0x640
[  961.405247]  ? do_sys_open+0x410/0x410
[  961.405257]  do_syscall_64+0x1d5/0x640
[  961.405271]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  961.405278] RIP: 0033:0x417d11
[  961.405282] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  961.405292] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  961.405297] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007f935dde7bc0
[  961.405302] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  961.405307] R10: 0000000000000006 R11: 0000000000000293 R12: 000000000000000c
[  961.405312] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  961.438129] FAULT_INJECTION: forcing a failure.
[  961.438129] name failslab, interval 1, probability 0, space 0, times 0
[  961.516446] FAULT_INJECTION: forcing a failure.
[  961.516446] name failslab, interval 1, probability 0, space 0, times 0
[  961.521973] CPU: 0 PID: 4697 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  962.085720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  962.085723] Call Trace:
[  962.085740]  dump_stack+0x1b2/0x283
[  962.085751]  should_fail.cold+0x10a/0x154
[  962.085761]  should_failslab+0xd6/0x130
[  962.085770]  kmem_cache_alloc_node_trace+0x25a/0x400
[  962.085779]  __kmalloc_node+0x38/0x70
[  962.085789]  blk_mq_alloc_rq_map+0xd2/0x220
[  962.085803]  blk_mq_sched_alloc_tags+0xaa/0x240
[  962.085812]  blk_mq_init_sched+0x18d/0x4a0
[  962.085820]  ? _raw_spin_unlock+0x29/0x40
[  962.085830]  elevator_init+0x2ee/0x410
[  962.085838]  blk_mq_sched_init+0x28/0x40
[  962.085845]  blk_mq_init_allocated_queue+0xca0/0xfd0
[  962.085855]  blk_mq_init_queue+0x5a/0x90
[  962.085863]  loop_add+0x303/0x830
[  962.085870]  ? loop_queue_rq+0x280/0x280
[  962.085877]  ? trace_hardirqs_on+0x10/0x10
[  962.085885]  loop_control_ioctl+0x161/0x3f0
[  962.085891]  ? loop_lookup+0x190/0x190
[  962.085898]  ? SyS_write+0x1b7/0x210
[  962.085906]  ? loop_lookup+0x190/0x190
[  962.085913]  do_vfs_ioctl+0x75a/0xff0
[  962.085922]  ? ioctl_preallocate+0x1a0/0x1a0
[  962.085929]  ? lock_downgrade+0x740/0x740
[  962.085943]  ? __fget+0x225/0x360
[  962.085953]  ? do_vfs_ioctl+0xff0/0xff0
[  962.085964]  ? security_file_ioctl+0x83/0xb0
[  962.085975]  SyS_ioctl+0x7f/0xb0
[  962.085983]  ? do_vfs_ioctl+0xff0/0xff0
[  962.085994]  do_syscall_64+0x1d5/0x640
[  962.086020]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  962.086029] RIP: 0033:0x45e219
[  962.086034] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  962.086041] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  962.086045] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  962.086049] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  962.086052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027
[  962.086056] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  962.086073] CPU: 1 PID: 4700 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  962.086079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  962.086082] Call Trace:
[  962.086091]  dump_stack+0x1b2/0x283
[  962.086100]  should_fail.cold+0x10a/0x154
[  962.086110]  should_failslab+0xd6/0x130
[  962.086119]  kmem_cache_alloc+0x28e/0x3c0
[  962.086131]  get_empty_filp+0x86/0x3e0
[  962.086138]  path_openat+0x84/0x2970
[  962.086146]  ? kasan_slab_free+0xc3/0x1a0
[  962.086152]  ? kmem_cache_free+0x7c/0x2b0
[  962.086162]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  962.086170]  ? path_lookupat+0x780/0x780
[  962.086177]  ? trace_hardirqs_on+0x10/0x10
[  962.086190]  do_filp_open+0x179/0x3c0
[  962.086197]  ? may_open_dev+0xe0/0xe0
[  962.086206]  ? __alloc_fd+0x1be/0x490
[  962.086216]  ? lock_downgrade+0x740/0x740
[  962.086228]  ? do_raw_spin_unlock+0x164/0x220
[  962.086236]  ? _raw_spin_unlock+0x29/0x40
[  962.086243]  ? __alloc_fd+0x1be/0x490
[  962.086258]  do_sys_open+0x296/0x410
[  962.086268]  ? filp_open+0x60/0x60
[  962.086281]  ? __do_page_fault+0x159/0xad0
[  962.086289]  ? do_syscall_64+0x4c/0x640
[  962.086304]  ? do_sys_open+0x410/0x410
[  962.086313]  do_syscall_64+0x1d5/0x640
[  962.086327]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  962.086334] RIP: 0033:0x417d11
[  962.086339] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  962.086348] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
08:17:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)
r1 = socket(0x2a, 0x6, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x64c4bb3d0e97fe5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000002c0), 0x4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24f7790e492bccb1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040c0}, 0xfabd15b745075569)

08:17:07 executing program 4:
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbde, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0x18, 0x34, @random="90f7adaefa107fce831e49fe2a80afc17f0e32df"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="4296c44bb7c1716703183e228b31f50645b7104c5f2b93"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0x2, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x400800, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3f)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0c009900018000006c0000000900070009bebf38be00000004006e800f000a00d819d18954506016431242000800090005ac0f00040028000800090005ac0f001100070039874a7ca004c546b2ace333d60000000a000600ffffffffffff000004000b000500080004000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0xfecc, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x3d}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}}, 0x800)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x39}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x10)

08:17:07 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x3, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4)

08:17:07 executing program 3 (fault-call:0 fault-nth:14):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:07 executing program 1 (fault-call:2 fault-nth:40):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:07 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  962.086353] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007f935dde7bc0
[  962.086358] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  962.086363] R10: 0000000000000006 R11: 0000000000000293 R12: 000000000000000d
[  962.086368] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
08:17:07 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:07 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = accept4$tipc(r0, &(0x7f0000000140)=@name, &(0x7f0000000000)=0x10, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)

08:17:07 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xe7a}, 0x8)

[  962.497294] FAULT_INJECTION: forcing a failure.
[  962.497294] name failslab, interval 1, probability 0, space 0, times 0
[  962.511497] FAULT_INJECTION: forcing a failure.
[  962.511497] name failslab, interval 1, probability 0, space 0, times 0
08:17:08 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:08 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
socketpair(0x23, 0x1, 0x1ff, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000eeffffff73a6f3890e60444b47f423de7e07b60eefe9cf1e14841021bd4f4ae9cc98f0ca5892d68363eab75b254335833196e403b0d3ef27a96a22da932b9f9f28e36687f884"], 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x904}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x18, 0x13, [{0x2}, {0x13}, {0x6d, 0x1}, {0xc, 0x1}, {0x6c, 0x1}, {0x48, 0x1}, {0x18}, {0x30, 0x1}, {0x48}, {0x4, 0x1}, {0x1b, 0x1}, {0x6}, {0x12, 0x1}, {0x30}, {0x6}, {0x5}, {0x16, 0x1}, {0xf288b4a02e4fedd7, 0x1}, {0x18}, {0x30}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x40}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x3}, {0x30}, {0x18}, {0xb, 0x1}, {0x16}, {0x18}, {0x1b, 0x1}, {0x11}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x400081c)

[  962.554196] CPU: 1 PID: 4715 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  962.562044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  962.562048] Call Trace:
[  962.562064]  dump_stack+0x1b2/0x283
08:17:08 executing program 1 (fault-call:2 fault-nth:41):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

[  962.562079]  should_fail.cold+0x10a/0x154
[  962.562095]  should_failslab+0xd6/0x130
[  962.562108]  kmem_cache_alloc_trace+0x47/0x3d0
[  962.562124]  proc_self_get_link+0x1af/0x220
[  962.562136]  ? proc_ns_dir_lookup+0x250/0x250
[  962.562147]  link_path_walk+0xc47/0x10a0
[  962.562164]  ? walk_component+0xbc0/0xbc0
[  962.562177]  path_openat+0x15e/0x2970
[  962.562188]  ? kasan_slab_free+0xc3/0x1a0
[  962.562197]  ? kmem_cache_free+0x7c/0x2b0
[  962.562209]  ? path_lookupat+0x780/0x780
[  962.562218]  ? trace_hardirqs_on+0x10/0x10
[  962.562234]  do_filp_open+0x179/0x3c0
[  962.562243]  ? may_open_dev+0xe0/0xe0
[  962.562263]  ? do_raw_spin_unlock+0x164/0x220
[  962.562274]  ? __alloc_fd+0x1be/0x490
[  962.562290]  do_sys_open+0x296/0x410
[  962.562301]  ? filp_open+0x60/0x60
[  962.562313]  ? __do_page_fault+0x159/0xad0
[  962.562323]  ? do_syscall_64+0x4c/0x640
[  962.562331]  ? do_sys_open+0x410/0x410
[  962.562341]  do_syscall_64+0x1d5/0x640
[  962.562357]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  962.562365] RIP: 0033:0x417d11
[  962.562370] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  962.562380] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  962.562386] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007f935dde7bc0
[  962.562391] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  962.562397] R10: 0000000000000006 R11: 0000000000000293 R12: 000000000000000e
[  962.562403] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  962.574804] CPU: 1 PID: 4717 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  962.574811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  962.574814] Call Trace:
[  962.574831]  dump_stack+0x1b2/0x283
[  962.574846]  should_fail.cold+0x10a/0x154
[  962.574859]  should_failslab+0xd6/0x130
[  962.574873]  kmem_cache_alloc_node_trace+0x25a/0x400
[  962.574887]  __kmalloc_node+0x38/0x70
[  962.574899]  blk_mq_alloc_rq_map+0x113/0x220
[  962.574912]  blk_mq_sched_alloc_tags+0xaa/0x240
[  962.574925]  blk_mq_init_sched+0x18d/0x4a0
[  962.574935]  ? _raw_spin_unlock+0x29/0x40
[  962.574949]  elevator_init+0x2ee/0x410
[  962.574959]  blk_mq_sched_init+0x28/0x40
[  962.574969]  blk_mq_init_allocated_queue+0xca0/0xfd0
[  962.574985]  blk_mq_init_queue+0x5a/0x90
[  962.574995]  loop_add+0x303/0x830
[  962.575006]  ? loop_queue_rq+0x280/0x280
[  962.575016]  ? trace_hardirqs_on+0x10/0x10
[  962.575028]  loop_control_ioctl+0x161/0x3f0
[  962.575037]  ? loop_lookup+0x190/0x190
[  962.575045]  ? SyS_write+0x1b7/0x210
[  962.575057]  ? loop_lookup+0x190/0x190
[  962.575067]  do_vfs_ioctl+0x75a/0xff0
[  962.575079]  ? ioctl_preallocate+0x1a0/0x1a0
[  962.575086]  ? lock_downgrade+0x740/0x740
[  962.575100]  ? __fget+0x225/0x360
[  962.575110]  ? do_vfs_ioctl+0xff0/0xff0
[  962.575120]  ? security_file_ioctl+0x83/0xb0
[  962.575131]  SyS_ioctl+0x7f/0xb0
[  962.575139]  ? do_vfs_ioctl+0xff0/0xff0
[  962.575150]  do_syscall_64+0x1d5/0x640
[  962.575166]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  962.575174] RIP: 0033:0x45e219
[  962.575179] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  962.575189] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  962.575195] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  962.575200] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  962.575206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028
[  962.575211] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  962.636157] FAULT_INJECTION: forcing a failure.
[  962.636157] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  962.972549] CPU: 0 PID: 4741 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  962.972555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  962.972558] Call Trace:
[  962.972571]  dump_stack+0x1b2/0x283
[  962.972583]  should_fail.cold+0x10a/0x154
[  962.972597]  __alloc_pages_nodemask+0x22c/0x2720
[  962.972606]  ? kasan_kmalloc+0xeb/0x160
[  962.972615]  ? blk_mq_alloc_rq_map+0x113/0x220
[  962.972625]  ? blk_mq_sched_alloc_tags+0xaa/0x240
[  962.972635]  ? elevator_init+0x2ee/0x410
[  962.972643]  ? blk_mq_sched_init+0x28/0x40
[  962.972651]  ? blk_mq_init_allocated_queue+0xca0/0xfd0
[  962.972661]  ? loop_control_ioctl+0x161/0x3f0
[  962.972670]  ? do_vfs_ioctl+0x75a/0xff0
[  962.972680]  ? do_syscall_64+0x1d5/0x640
[  962.972691]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  962.972699]  ? __mutex_unlock_slowpath+0x75/0x770
[  962.972711]  ? fs_reclaim_release+0xd0/0x110
[  962.972721]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  962.972738]  ? __lockdep_init_map+0x100/0x560
[  962.972747]  ? _find_next_bit+0xdb/0x100
[  962.972760]  ? __cpu_to_node+0x7b/0xa0
[  962.972768]  ? blk_mq_hw_queue_to_node+0x9f/0xf0
[  962.972779]  blk_mq_alloc_rqs+0x227/0x6d0
[  962.972791]  ? blk_mq_alloc_rq_map+0x9d/0x220
[  962.972802]  blk_mq_sched_alloc_tags+0x112/0x240
[  962.972814]  blk_mq_init_sched+0x18d/0x4a0
[  962.972823]  ? _raw_spin_unlock+0x29/0x40
[  962.972835]  elevator_init+0x2ee/0x410
[  962.972845]  blk_mq_sched_init+0x28/0x40
[  962.972855]  blk_mq_init_allocated_queue+0xca0/0xfd0
[  962.972870]  blk_mq_init_queue+0x5a/0x90
[  962.972879]  loop_add+0x303/0x830
[  962.972894]  ? loop_queue_rq+0x280/0x280
[  962.972903]  ? trace_hardirqs_on+0x10/0x10
[  962.972913]  loop_control_ioctl+0x161/0x3f0
[  962.972921]  ? loop_lookup+0x190/0x190
[  962.972930]  ? SyS_write+0x1b7/0x210
[  962.972940]  ? loop_lookup+0x190/0x190
[  962.972953]  do_vfs_ioctl+0x75a/0xff0
[  962.972964]  ? ioctl_preallocate+0x1a0/0x1a0
[  962.972971]  ? lock_downgrade+0x740/0x740
[  962.972984]  ? __fget+0x225/0x360
[  962.972993]  ? do_vfs_ioctl+0xff0/0xff0
[  962.973004]  ? security_file_ioctl+0x83/0xb0
[  962.973014]  SyS_ioctl+0x7f/0xb0
[  962.973022]  ? do_vfs_ioctl+0xff0/0xff0
[  962.973032]  do_syscall_64+0x1d5/0x640
[  962.973046]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  962.973053] RIP: 0033:0x45e219
[  962.973058] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  962.973068] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  962.973073] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  962.973077] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
08:17:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000040)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

08:17:08 executing program 3 (fault-call:0 fault-nth:15):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:08 executing program 4:
accept(0xffffffffffffffff, &(0x7f0000000080)=@nl=@proc, &(0x7f0000000000)=0x80)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

08:17:08 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:08 executing program 1 (fault-call:2 fault-nth:42):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:08 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x402080)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xc0, 0x0, 0x201, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @random="01813ba6be40"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6476ed3000"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "66afe518793129c6b4a73e11bb"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "51bde452a17f642cb67b7e603275"}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x0)

[  962.973082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029
[  962.973087] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:08 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x769, 0x3, 0x4, 0x1000, 0x1, {0x77359400}, {0x1, 0x1, 0x2, 0x9, 0x1f, 0x8, 'i\x00'}, 0x1, 0x3, @fd, 0x9, 0x0, r0})

08:17:08 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  963.291631] FAULT_INJECTION: forcing a failure.
[  963.291631] name failslab, interval 1, probability 0, space 0, times 0
[  963.305550] FAULT_INJECTION: forcing a failure.
[  963.305550] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  963.325151] CPU: 0 PID: 4767 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  963.332976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  963.342511] Call Trace:
[  963.345129]  dump_stack+0x1b2/0x283
[  963.348746]  should_fail.cold+0x10a/0x154
[  963.352886]  should_failslab+0xd6/0x130
[  963.356843]  kmem_cache_alloc+0x28e/0x3c0
[  963.360979]  __d_alloc+0x2a/0xa20
[  963.364432]  __ns_get_path+0x2df/0x6f0
[  963.368311]  ns_get_path+0x55/0xa0
[  963.371854]  proc_ns_get_link+0x12e/0x160
[  963.375981]  ? proc_ns_readlink+0x1c0/0x1c0
[  963.380295]  ? security_inode_follow_link+0xca/0x100
[  963.385399]  trailing_symlink+0x59c/0x750
[  963.389557]  ? proc_ns_readlink+0x1c0/0x1c0
[  963.389568]  path_openat+0x795/0x2970
[  963.397665]  ? debug_check_no_obj_freed+0x2c0/0x674
[  963.402672]  ? path_lookupat+0x780/0x780
[  963.406728]  ? trace_hardirqs_on+0x10/0x10
[  963.411045]  ? debug_check_no_obj_freed+0x2c0/0x674
[  963.416058]  do_filp_open+0x179/0x3c0
[  963.419840]  ? may_open_dev+0xe0/0xe0
[  963.423632]  ? do_raw_spin_unlock+0x164/0x220
[  963.428111]  ? __alloc_fd+0x1be/0x490
[  963.431896]  do_sys_open+0x296/0x410
[  963.435589]  ? filp_open+0x60/0x60
[  963.439111]  ? __do_page_fault+0x159/0xad0
[  963.443329]  ? do_syscall_64+0x4c/0x640
[  963.447291]  ? do_sys_open+0x410/0x410
[  963.451424]  do_syscall_64+0x1d5/0x640
[  963.455309]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  963.460484] RIP: 0033:0x417d11
[  963.463665] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  963.471370] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  963.478627] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007f935dde7bc0
08:17:08 executing program 3 (fault-call:0 fault-nth:16):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:08 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  963.485889] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  963.493142] R10: 0000000000000006 R11: 0000000000000293 R12: 000000000000000f
[  963.500395] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
[  963.507660] CPU: 1 PID: 4769 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  963.515465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  963.524819] Call Trace:
[  963.527409]  dump_stack+0x1b2/0x283
[  963.531040]  should_fail.cold+0x10a/0x154
[  963.535192]  __alloc_pages_nodemask+0x22c/0x2720
08:17:08 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa90}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x4008801)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x8}, 0x8)

[  963.539951]  ? kasan_kmalloc+0xeb/0x160
[  963.543928]  ? blk_mq_alloc_rq_map+0x113/0x220
[  963.548511]  ? blk_mq_sched_alloc_tags+0xaa/0x240
[  963.553362]  ? elevator_init+0x2ee/0x410
[  963.557428]  ? loop_control_ioctl+0x161/0x3f0
[  963.561923]  ? do_vfs_ioctl+0x75a/0xff0
[  963.565913]  ? do_syscall_64+0x1d5/0x640
[  963.569056] FAULT_INJECTION: forcing a failure.
[  963.569056] name failslab, interval 1, probability 0, space 0, times 0
[  963.569968]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  963.569979]  ? __mutex_unlock_slowpath+0x75/0x770
[  963.569993]  ? fs_reclaim_release+0xd0/0x110
[  963.570004]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  963.570022]  ? __lockdep_init_map+0x100/0x560
[  963.605078]  ? _find_next_bit+0xdb/0x100
[  963.605092]  ? __cpu_to_node+0x7b/0xa0
[  963.613025]  ? memset+0x20/0x40
[  963.613038]  blk_mq_alloc_rqs+0x227/0x6d0
[  963.620481]  blk_mq_sched_alloc_tags+0x112/0x240
[  963.620496]  blk_mq_init_sched+0x18d/0x4a0
[  963.629465]  ? _raw_spin_unlock+0x29/0x40
[  963.633610]  elevator_init+0x2ee/0x410
[  963.637503]  blk_mq_sched_init+0x28/0x40
[  963.641556]  blk_mq_init_allocated_queue+0xca0/0xfd0
[  963.646663]  blk_mq_init_queue+0x5a/0x90
[  963.651066]  loop_add+0x303/0x830
[  963.654537]  ? loop_queue_rq+0x280/0x280
[  963.658588]  ? trace_hardirqs_on+0x10/0x10
[  963.662822]  loop_control_ioctl+0x161/0x3f0
[  963.667147]  ? loop_lookup+0x190/0x190
[  963.671027]  ? SyS_write+0x1b7/0x210
[  963.674735]  ? loop_lookup+0x190/0x190
[  963.678618]  do_vfs_ioctl+0x75a/0xff0
[  963.682427]  ? ioctl_preallocate+0x1a0/0x1a0
[  963.682439]  ? lock_downgrade+0x740/0x740
[  963.690980]  ? __fget+0x225/0x360
[  963.694432]  ? do_vfs_ioctl+0xff0/0xff0
[  963.698400]  ? security_file_ioctl+0x83/0xb0
[  963.702800]  SyS_ioctl+0x7f/0xb0
[  963.706156]  ? do_vfs_ioctl+0xff0/0xff0
[  963.710129]  do_syscall_64+0x1d5/0x640
[  963.714019]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  963.719378] RIP: 0033:0x45e219
[  963.722558] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  963.730258] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
08:17:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000080)={0x9d0, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_TID_CONFIG={0x534, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x450, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x5, 0x0, 0x0, 0xa1c6, 0x7f, 0x1]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x65, 0x6, 0x4, 0x1, 0x142c126001e29ada, 0xc, 0x6, 0x3, 0x48, 0x48, 0x1b, 0x6c, 0x24, 0x2, 0x3, 0x9, 0x2, 0x16, 0x1b, 0x48]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x9}, {0x3, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x4}, {0x4, 0x9}, {0x2, 0x7}, {0x1}, {0x6, 0x9}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {}, {0x2, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x3, 0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x2}, {0x4, 0x6}, {}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x1}, {0x1, 0x6}, {0x7, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x16, 0x2, 0x36, 0x6, 0x24, 0x60, 0x9, 0x3, 0xb]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x9, 0x2, 0x3, 0x6c, 0xc, 0x31, 0x30, 0x36]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x6c, 0x6, 0x9, 0x5, 0x24, 0x1b, 0x48, 0x30, 0x30, 0x27, 0x1b, 0x65, 0x18, 0x4, 0x1b, 0x3, 0x1b, 0x36, 0x48]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x4, 0x4, 0x2, 0x18, 0x1, 0x4, 0x6c, 0x18, 0x48, 0x3]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x4}, {0x6, 0x7}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x3, 0x6}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x3}, {0x3, 0xa}, {0x3, 0xa}, {0x3, 0x7}, {0x6, 0xa}, {0x7, 0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x7, 0xa}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x3}, {0x1}, {0x1, 0x8}, {}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x3}, {0x4, 0x3}, {0x3, 0x6}, {0x3, 0x7}, {0x4, 0x6}, {0x4, 0xa}, {0x4, 0x3}, {0x3, 0x6}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x4, 0x6}, {0x1, 0x1}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0x6}, {0x4, 0x3}, {0x3, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x9}, {0x2, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x9}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x2}, {0x2, 0x6}, {0x0, 0x3}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x60, 0x16, 0x9, 0x30, 0xc, 0x16, 0x48, 0x30, 0x79, 0x1b, 0x6, 0x60, 0x6]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x30, 0x0, 0x6c, 0x60, 0x24, 0x6c, 0x60, 0x1, 0x12, 0x1b, 0xb, 0x5, 0x16, 0x6c, 0xe, 0x36, 0x16]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x48, 0xc, 0x1, 0x19]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x36, 0x60, 0x46, 0x6, 0x48, 0x277dec20d1157dc6, 0x24, 0xc, 0x0, 0x6]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0xc, 0x18, 0x5, 0x71, 0x1b, 0x48, 0x1b, 0x4, 0x30, 0x24, 0x6c, 0x29, 0x60, 0x18, 0x6c, 0x3, 0x16, 0x3, 0x12, 0x48, 0x18, 0xb, 0x6]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x0, 0x24, 0x6c, 0x18, 0x13, 0x17]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x6, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x9}, {0x7}, {0x0, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x4, 0x8}, {0x0, 0x5}, {0x0, 0x8}, {0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0x6}, {0x6, 0xa}, {0x4, 0x7}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2, 0xa}, {0x5, 0x6}, {0x2, 0x8}, {0x7, 0x3}, {0x6, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x9}, {0x2, 0x6}, {0x7, 0x6}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x1}, {0x5, 0x8}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x7, 0x4}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0xe8, 0xfff8, 0x81, 0x1f, 0xa7d, 0x85]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x6}, {0x4, 0x8}, {}, {0x2}, {0x1, 0xa}, {0x5, 0x5}, {0x4, 0x3}, {0x4, 0x7}, {0x6, 0x3}, {0x6}, {0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x7}, {0x6, 0x7}, {0x6}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x2, 0x7}, {0x6, 0x2}, {0x6, 0x6}, {0x6, 0xa}, {0x5, 0x9}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x6, 0x8}, {0x6, 0xa}, {0x0, 0x3}]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x6c, 0x1b, 0x3, 0x1707fac5d242bf88, 0x24, 0x6, 0x12, 0x24, 0x36, 0x60, 0x24, 0x6c, 0x16, 0x1, 0x4, 0x4, 0x36, 0x16, 0x9, 0x48, 0x24, 0x24, 0x6c, 0xf, 0x1]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x9}, {}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x5, 0x16}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x5}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x5, 0x6}, {0x3, 0x4}, {0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x6}, {0x3, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0x5}, {0x2, 0x1}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x7, 0x6}, {0x6, 0x9}, {0x6, 0x7}, {0x5, 0x9}, {0x3, 0x3}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x2, 0x6c, 0x6c, 0x24, 0x2, 0x1, 0x2, 0x3c, 0xc, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x4, 0x81, 0xe92f, 0x800, 0x2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6b, 0x8, 0x88, 0x0, 0x5, 0xc59, 0x0, 0x2]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1f, 0x20, 0x3, 0x1bb, 0xd775, 0x1]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x16, 0x9, 0x60, 0x6, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x31, 0x8000, 0x1c5f, 0x3ff, 0x0, 0x3, 0x6]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x6}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x1, 0x4}, {0x3}, {0x2, 0x1}, {0x5}, {0x1, 0xa}, {}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x3, 0x7}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x5}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x7, 0x8}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0x7}, {0x3, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x4}, {0x0, 0x2}, {0x4, 0x8}, {0x2, 0x8}, {0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x4}, {0x7, 0x9}, {0x3, 0x3}, {0x7, 0x8}, {0x6, 0x7}, {0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x2, 0x3}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x8, 0x6, 0x0, 0x2, 0x5, 0x40]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff1d, 0x0, 0x1, 0x7, 0x4, 0x4, 0x4, 0x40]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x8}, {0x0, 0x7}, {0x6}, {0x5, 0x4}, {0x6, 0x3}, {0x6, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x4, 0x4}, {0x5, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0x7}, {0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x6, 0xa}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x8}, {0x3, 0x1}, {0x7, 0x7}, {0x2}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0xa}, {0x6, 0x7}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x8}, {}, {0x0, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x7}, {0x6, 0x8}, {0x1, 0xa}, {0x4}, {0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x2, 0x7}, {0x2, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2, 0x7}, {0x5}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x4}, {0x1}, {0x2, 0xa}, {0x4, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac0f, 0x2, 0x4, 0x8000, 0x16, 0x40, 0x5, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x81}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x2d0, 0x11d, 0x0, 0x1, [{0x2a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x280, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x8}, {0x4, 0x9}, {0x7}, {0x1, 0x2}, {0x6}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x1}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x1}, {0x1, 0x2}, {0x2, 0x5}, {0x0, 0x3}, {0x6, 0x2}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x3}, {}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x6c, 0x48, 0xc, 0x2d, 0x0, 0x12, 0x5, 0x9]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x3, 0xd, 0x5, 0x30, 0x36, 0x60, 0x6, 0x1, 0xc, 0x36, 0x2, 0x18, 0x18, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x1b, 0x36, 0x24, 0x48, 0x4, 0x6, 0x60, 0x18, 0x6, 0x1b, 0x3, 0xc, 0x24, 0x16, 0x24]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x5}, {0x1, 0x3}, {0x6, 0x1}, {0x6, 0x2}, {0x0, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x6}, {0x6}, {0x7, 0x4}, {0x6, 0x8}, {0x2, 0x7}, {0x1}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x2}, {0x6}, {0x5, 0x4}, {0x6, 0x3}, {0x1, 0x5}, {0x7}, {0x4, 0x7}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x1}, {0x6, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x4}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x6}, {0x2, 0x5}, {0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0xa}, {0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x7}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0x4, 0x8001, 0xc9, 0xffff, 0x7]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x48, 0xc, 0x6, 0x1b, 0xc, 0x1e4cd1a5f3de8edd, 0x9, 0x16, 0x0, 0x9, 0x2, 0xda471517efbbb551, 0x18, 0x9, 0xc, 0x0, 0x2b, 0x48, 0x16, 0x0, 0x8, 0x16, 0x4, 0xc, 0x6, 0x60, 0x1b]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0x7}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x6}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x9, 0x0, 0x0, 0x7, 0x372, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x4}, {0x7, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x2, 0x3}, {0x2, 0x5}, {0x7}, {0x1}, {0x1, 0x6}, {0x1}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0x10c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x9, 0xc, 0x1, 0x48, 0xb, 0x6, 0x36, 0x2, 0x24, 0x18, 0x3, 0x3, 0x12, 0x6]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x8}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x6}, {}, {0x1}, {0x5, 0x4}, {0x4, 0x7}, {0x2}, {0x5, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x9}, {0x6}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x8}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x6, 0xa}, {0x6, 0x8}, {0x4}, {0x0, 0x4}, {0x6, 0x6}, {0x7, 0x1}, {0x0, 0x9}, {0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x3}, {0x5, 0x4}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0x5}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0xa}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x3}, {0x0, 0x4}, {}, {0x1, 0x5}, {0x1, 0x6}, {0x4}, {0x6, 0x9}, {0x6, 0x8}, {0x4, 0xa}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x2}, {0x3, 0x9}, {0x3, 0x6}, {0x4, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x6, 0x3}, {0x0, 0x9}, {0x2}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x4, 0x9}, {0x3}, {0x6, 0x8}, {0x4, 0x1}, {0x3, 0x9}, {0x6, 0x4}, {0x0, 0x4}, {0x7, 0x7}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {}, {0x1, 0x9}, {0x2, 0x4}, {0x0, 0x8}, {0x7, 0x4}, {0x3, 0x9}, {0x7, 0x7}, {0x1}, {0x6, 0x3}, {0x7, 0x3}, {0x7, 0x7}, {0x4, 0x7}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x6}, {0x3, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x2}, {0x6, 0x3}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0xc}, {0x2, 0x6}, {0x6}, {}, {0x5, 0xa}, {0x0, 0xa}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x3, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x5}, {0x2, 0x6}, {0x4, 0x1}, {0x5, 0x6}, {0x5, 0x6}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x9}, {0x5, 0x4}, {0x3}, {0x0, 0x7}, {0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x4}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x4, 0x24, 0x30, 0x2, 0x1b, 0x5, 0x9, 0x18, 0x16, 0x30, 0x5, 0x60, 0x3, 0x24, 0x6c, 0x60, 0x36, 0x1, 0x6, 0x9, 0x18, 0x1, 0x6c, 0xc, 0x60, 0x6c, 0x9, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x53}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfb5a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xef}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x85}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x80, 0x0, 0xa379, 0x4, 0xfe, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x8}, {0x7, 0x6}, {}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x1}, {0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x7}, {0x1, 0x9}, {0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x2, 0x9}, {0x0, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}]}]}, @NL80211_ATTR_TID_CONFIG={0xf8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x3, 0x3, 0x36, 0x4, 0x1, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfbff, 0xffff, 0xa08, 0x40, 0xffff, 0x96b3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x1}, {0x6, 0x6}, {0x5, 0xa}, {0x5, 0x9}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0x9}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x2}, {0x5, 0x7}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0xa}, {0x0, 0x5}, {0x2, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x4}, {0x0, 0x5}, {0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x7, 0x9}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0xa}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x7, 0x6}, {0x7}, {0x1, 0x1}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x6, 0x4}, {0x5}, {0x0, 0x7}, {0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x9}, {0x5, 0x1}, {}, {0x7, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {}, {0x3, 0x1}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x6}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x3}, {0x2, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x75}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffff7f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x9d0}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)

08:17:09 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:09 executing program 2:
r0 = socket(0xa, 0x5, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @tipc=@name, @hci, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="23aaafb7191f"}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="34ddd914", @ANYRES16=0x0, @ANYBLOB="000000000000000000007400000099ab562d0408d1d67186d3f043a290fcad7c4ed75ee00ce628d472d3ff3e882a2ca6fc752f4f88"], 0x71}}, 0x0)

08:17:09 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:09 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x40141, 0x0)
ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, @llc={0x1a, 0x339, 0x3, 0x4, 0x89, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @generic={0x4, "9a397bba5d146e6fc474ad3ef5f8"}, @in={0x2, 0x4e24, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)='veth1\x00', 0x2, 0x2, 0x1})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd3f00000001000000000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000300000009000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x20, 0x3}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000008d9daf9767f69940c886b7490334ebb6956c357cc46f43b3d57f66a32ee973fd0f150f5996e0f7a59e426075c980b1e63a3ca23", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00'], 0x71}}, 0x0)

[  963.737520] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  963.744799] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  963.752428] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a
[  963.752437] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  963.770770] CPU: 0 PID: 4789 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0
[  963.778580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  963.787931] Call Trace:
[  963.790779]  dump_stack+0x1b2/0x283
[  963.794761]  should_fail.cold+0x10a/0x154
[  963.798908]  should_failslab+0xd6/0x130
[  963.802971]  kmem_cache_alloc+0x28e/0x3c0
[  963.807118]  alloc_inode+0xa0/0x170
[  963.810742]  new_inode_pseudo+0x14/0xe0
[  963.814711]  __ns_get_path+0xf8/0x6f0
[  963.818597]  ns_get_path+0x55/0xa0
[  963.822145]  proc_ns_get_link+0x12e/0x160
[  963.826322]  ? proc_ns_readlink+0x1c0/0x1c0
[  963.830643]  ? security_inode_follow_link+0xca/0x100
[  963.835748]  trailing_symlink+0x59c/0x750
[  963.839978]  ? proc_ns_readlink+0x1c0/0x1c0
[  963.844321]  path_openat+0x795/0x2970
[  963.844336]  ? path_lookupat+0x780/0x780
[  963.852183]  ? trace_hardirqs_on+0x10/0x10
[  963.856422]  do_filp_open+0x179/0x3c0
[  963.860224]  ? may_open_dev+0xe0/0xe0
[  963.864034]  ? do_raw_spin_unlock+0x164/0x220
[  963.868526]  ? __alloc_fd+0x1be/0x490
[  963.872480]  do_sys_open+0x296/0x410
[  963.876195]  ? filp_open+0x60/0x60
[  963.879826]  ? __do_page_fault+0x159/0xad0
[  963.884067]  ? do_syscall_64+0x4c/0x640
[  963.888021]  ? do_sys_open+0x410/0x410
[  963.891895]  do_syscall_64+0x1d5/0x640
[  963.895776]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  963.900971] RIP: 0033:0x417d11
[  963.904140] RSP: 002b:00007f935dde7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  963.911849] RAX: ffffffffffffffda RBX: 00007f935dde7bc0 RCX: 0000000000417d11
[  963.919122] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007f935dde7bc0
[  963.926377] RBP: 00007f935dde7ca0 R08: 0000000000000000 R09: 0000000000000011
[  963.933720] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000010
[  963.940980] R13: 00007ffdba11814f R14: 00007f935dde89c0 R15: 000000000119bf8c
08:17:09 executing program 1 (fault-call:2 fault-nth:43):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

[  964.005458] FAULT_INJECTION: forcing a failure.
[  964.005458] name failslab, interval 1, probability 0, space 0, times 0
[  964.018314] CPU: 0 PID: 4816 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  964.026203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  964.035538] Call Trace:
[  964.038245]  dump_stack+0x1b2/0x283
[  964.041858]  should_fail.cold+0x10a/0x154
[  964.045988]  should_failslab+0xd6/0x130
[  964.049941]  kmem_cache_alloc_node_trace+0x25a/0x400
[  964.055028]  elevator_alloc+0x7a/0x1f0
[  964.058893]  dd_init_queue+0x20/0x420
[  964.062673]  blk_mq_init_sched+0x214/0x4a0
[  964.066888]  ? _raw_spin_unlock+0x29/0x40
[  964.071024]  elevator_init+0x2ee/0x410
[  964.074898]  blk_mq_sched_init+0x28/0x40
[  964.078935]  blk_mq_init_allocated_queue+0xca0/0xfd0
[  964.084018]  blk_mq_init_queue+0x5a/0x90
[  964.088057]  loop_add+0x303/0x830
[  964.091492]  ? loop_queue_rq+0x280/0x280
[  964.095545]  ? trace_hardirqs_on+0x10/0x10
[  964.099776]  loop_control_ioctl+0x161/0x3f0
[  964.104087]  ? loop_lookup+0x190/0x190
[  964.107956]  ? SyS_write+0x1b7/0x210
[  964.111657]  ? loop_lookup+0x190/0x190
[  964.115541]  do_vfs_ioctl+0x75a/0xff0
[  964.119383]  ? ioctl_preallocate+0x1a0/0x1a0
[  964.123831]  ? lock_downgrade+0x740/0x740
[  964.127978]  ? __fget+0x225/0x360
[  964.131423]  ? do_vfs_ioctl+0xff0/0xff0
[  964.135384]  ? security_file_ioctl+0x83/0xb0
[  964.139769]  SyS_ioctl+0x7f/0xb0
[  964.143116]  ? do_vfs_ioctl+0xff0/0xff0
[  964.147074]  do_syscall_64+0x1d5/0x640
[  964.150963]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
08:17:09 executing program 0:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x453, 0x1, 0x70bd29, 0x25dfdbfd, "0360767acc38489aea76a8cd00de2bc8d34778dbcb56fe2a9539c265ca70403a3519b6a80422d86bb47f171135ab358d44d0f0e3f386e277214a8b9db54e848dc3956a478d53b36bc14968dd83b9dd9a77e53aa7912e836e88e4c5d7dae213fb8e720fa1a48f6c20b127df09406e0455", ["", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x48001}, 0x20044050)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x10)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r2=>0x0}, 0x5f)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0x4)

08:17:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a8128ba7fe736f343448d56acbc3b04f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "343fd4f4ea19abe028a9998c0a73aa59"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f91016f67f016974f38059493a90de7d"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4044}, 0x4000000)

08:17:09 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:09 executing program 4:
r0 = socket(0x18, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x72}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40910)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4}, 0xfffffffffffffd99)

08:17:09 executing program 3 (fault-call:0 fault-nth:17):
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:09 executing program 1 (fault-call:2 fault-nth:44):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

[  964.156156] RIP: 0033:0x45e219
[  964.159323] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  964.167010] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  964.174258] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  964.181661] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  964.188956] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b
[  964.196209] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:09 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:09 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
connect$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x3}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80054}, 0x40000)

[  964.256395] FAULT_INJECTION: forcing a failure.
[  964.256395] name failslab, interval 1, probability 0, space 0, times 0
08:17:09 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000bc88c266e7e932a683a730319357acb85680fa41d26fae19d55c95690ea6d0a1d90b4c6ca8755bc80529", @ANYRES16=r0, @ANYBLOB="0100000000000000000074000000"], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:09 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x49d}, 0xffffffffffffff14)

[  964.329185] CPU: 0 PID: 4829 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  964.337015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  964.346360] Call Trace:
[  964.349034]  dump_stack+0x1b2/0x283
[  964.352673]  should_fail.cold+0x10a/0x154
[  964.356822]  should_failslab+0xd6/0x130
[  964.360797]  kmem_cache_alloc_node_trace+0x25a/0x400
[  964.365900]  dd_init_queue+0x94/0x420
[  964.369699]  blk_mq_init_sched+0x214/0x4a0
[  964.373933]  ? _raw_spin_unlock+0x29/0x40
08:17:09 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={<r0=>0x0})
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x3fa, 0x4, 0x70bd2d, 0x25dfdbff}, 0x20}}, 0x880)
r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x2000)
r2 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0xa98c, 0xa2401)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000300)={r0, 0x80000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x7c, 0x6852, 0x1, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000003c0)={r3})
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
r5 = accept$nfc_llcp(r4, &(0x7f00000000c0), &(0x7f0000000000)=0x60)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r6 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bind$nfc_llcp(r4, &(0x7f0000000500)={0x27, 0x0, 0x0, 0x2, 0x7, 0xd6, "e418e33d9c95562caa9d5649756caf05753749a70976bf51297f420fb418588fbcb65daede6dc1bd9e99327bb30212d52010b43b20a9869fe697bfa9c7c95c", 0x29}, 0x60)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB='\x00'/13], 0x14}}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4854}, 0x40)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400)={0x7f}, 0x8)

08:17:09 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

08:17:09 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:09 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

[  964.378084]  elevator_init+0x2ee/0x410
[  964.381968]  blk_mq_sched_init+0x28/0x40
[  964.386030]  blk_mq_init_allocated_queue+0xca0/0xfd0
[  964.391137]  blk_mq_init_queue+0x5a/0x90
[  964.395193]  loop_add+0x303/0x830
[  964.398671]  ? loop_queue_rq+0x280/0x280
[  964.402750]  ? trace_hardirqs_on+0x10/0x10
[  964.406994]  loop_control_ioctl+0x161/0x3f0
[  964.407004]  ? loop_lookup+0x190/0x190
[  964.407012]  ? SyS_write+0x1b7/0x210
[  964.407023]  ? loop_lookup+0x190/0x190
[  964.422964]  do_vfs_ioctl+0x75a/0xff0
08:17:09 executing program 1 (fault-call:2 fault-nth:45):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:09 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/net\x00')

[  964.422978]  ? ioctl_preallocate+0x1a0/0x1a0
[  964.422987]  ? lock_downgrade+0x740/0x740
08:17:09 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x8)

08:17:09 executing program 1 (fault-call:2 fault-nth:46):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:09 executing program 3:
r0 = getpid()
ioprio_set$pid(0x3, r0, 0x6003)
syz_open_procfs$namespace(r0, &(0x7f0000000640)='ns/uts\x00')

[  964.423002]  ? __fget+0x225/0x360
[  964.423011]  ? do_vfs_ioctl+0xff0/0xff0
[  964.423022]  ? security_file_ioctl+0x83/0xb0
[  964.423032]  SyS_ioctl+0x7f/0xb0
[  964.423040]  ? do_vfs_ioctl+0xff0/0xff0
[  964.423051]  do_syscall_64+0x1d5/0x640
[  964.423068]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  964.423076] RIP: 0033:0x45e219
[  964.423081] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  964.423091] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  964.423096] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  964.423102] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  964.423107] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c
[  964.423112] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  964.477946] FAULT_INJECTION: forcing a failure.
[  964.477946] name failslab, interval 1, probability 0, space 0, times 0
[  964.477958] CPU: 0 PID: 4856 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  964.477965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  964.477968] Call Trace:
[  964.477982]  dump_stack+0x1b2/0x283
[  964.477999]  should_fail.cold+0x10a/0x154
[  964.478014]  should_failslab+0xd6/0x130
[  964.478028]  kmem_cache_alloc_node_trace+0x25a/0x400
[  964.478045]  alloc_disk_node+0x5d/0x3d0
[  964.478057]  loop_add+0x3cb/0x830
[  964.478066]  ? loop_queue_rq+0x280/0x280
[  964.478078]  ? trace_hardirqs_on+0x10/0x10
[  964.478090]  loop_control_ioctl+0x161/0x3f0
[  964.478099]  ? loop_lookup+0x190/0x190
[  964.478108]  ? SyS_write+0x1b7/0x210
[  964.478120]  ? loop_lookup+0x190/0x190
[  964.478130]  do_vfs_ioctl+0x75a/0xff0
[  964.478142]  ? ioctl_preallocate+0x1a0/0x1a0
[  964.478150]  ? lock_downgrade+0x740/0x740
[  964.478163]  ? __fget+0x225/0x360
[  964.478173]  ? do_vfs_ioctl+0xff0/0xff0
[  964.478183]  ? security_file_ioctl+0x83/0xb0
[  964.478194]  SyS_ioctl+0x7f/0xb0
[  964.478201]  ? do_vfs_ioctl+0xff0/0xff0
[  964.478213]  do_syscall_64+0x1d5/0x640
[  964.478228]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  964.478235] RIP: 0033:0x45e219
[  964.478240] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  964.478250] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  964.478256] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  964.478261] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  964.478266] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d
[  964.478272] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  964.542995] FAULT_INJECTION: forcing a failure.
[  964.542995] name failslab, interval 1, probability 0, space 0, times 0
[  964.778406] CPU: 1 PID: 4863 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  964.778412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  964.778416] Call Trace:
[  964.778431]  dump_stack+0x1b2/0x283
[  964.778445]  should_fail.cold+0x10a/0x154
[  964.778459]  should_failslab+0xd6/0x130
[  964.778472]  kmem_cache_alloc_node_trace+0x25a/0x400
[  964.778485]  __kmalloc_node+0x38/0x70
[  964.778499]  disk_expand_part_tbl+0x17a/0x340
[  964.778513]  alloc_disk_node+0xf1/0x3d0
[  964.778525]  loop_add+0x3cb/0x830
[  964.778535]  ? loop_queue_rq+0x280/0x280
[  964.778546]  ? trace_hardirqs_on+0x10/0x10
[  964.778563]  loop_control_ioctl+0x161/0x3f0
[  964.778572]  ? loop_lookup+0x190/0x190
[  964.778581]  ? SyS_write+0x1b7/0x210
[  964.778593]  ? loop_lookup+0x190/0x190
[  964.778608]  do_vfs_ioctl+0x75a/0xff0
[  964.778620]  ? ioctl_preallocate+0x1a0/0x1a0
[  964.778628]  ? lock_downgrade+0x740/0x740
[  964.778642]  ? __fget+0x225/0x360
[  964.778652]  ? do_vfs_ioctl+0xff0/0xff0
[  964.778662]  ? security_file_ioctl+0x83/0xb0
[  964.778673]  SyS_ioctl+0x7f/0xb0
[  964.778681]  ? do_vfs_ioctl+0xff0/0xff0
[  964.778692]  do_syscall_64+0x1d5/0x640
[  964.778709]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  964.778716] RIP: 0033:0x45e219
[  964.778721] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  964.778731] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  964.778736] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  964.778742] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
08:17:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000007d91cba0a0ee32ad8abd1adef47dcd6ae6ad606e79a69068d142b491767c49552ef36c383ec1f25014fe02394525a8da4118b47b057f94d221f4453c8bee150866564d41aa4c943fdd5c5246f6b83042bdbd86eada1791556142205fdbde11428ecaafd0ebf3f957abd160831f09afbb8972d51b60ef661b4794b42759a0e2c68d8dde6bf0a03819b9dca0efef4248d613089f873753d39e713a295f048f8e040000006017e97fad95837988c1ecddad17a8633efc648490cc38", @ANYRES16=r1, @ANYBLOB="0100000000000000000074000000"], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x6a}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x4040)

08:17:10 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xffff, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)
ptrace(0x8, 0xffffffffffffffff)

08:17:10 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x40a0)
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0)
accept4$tipc(r3, &(0x7f0000000000), &(0x7f0000000080)=0xfffffe4a, 0x80800)

08:17:10 executing program 1 (fault-call:2 fault-nth:47):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:10 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xfffffffc}, 0x8)

08:17:10 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

[  964.778747] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e
[  964.778753] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:10 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x9}, 0x8)
getuid()
getuid()

08:17:10 executing program 4:
r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, <r1=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)

08:17:10 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')

[  964.997417] FAULT_INJECTION: forcing a failure.
[  964.997417] name failslab, interval 1, probability 0, space 0, times 0
[  965.044282] CPU: 0 PID: 4879 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  965.052202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  965.061553] Call Trace:
[  965.064148]  dump_stack+0x1b2/0x283
[  965.067789]  should_fail.cold+0x10a/0x154
[  965.071942]  should_failslab+0xd6/0x130
[  965.075922]  kmem_cache_alloc_trace+0x29a/0x3d0
[  965.080744]  rand_initialize_disk+0x3b/0xc0
[  965.085065]  alloc_disk_node+0x1f7/0x3d0
[  965.089130]  loop_add+0x3cb/0x830
08:17:10 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:10 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
r1 = socket(0x6, 0x1, 0x8001)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0x4e, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYRESOCT=r0, @ANYBLOB="010028bd7000fddbdf25310000000c0099003f00000041000000080001003e0000000100fb00c7a4216e86b7d6e93b15a2b8906a87b6b2af94e1223ac03c387898f3338bed762c030b4de5656e812576bb1172e5ad345f9a1f0066bae6b69cce43e80b657ae463bedb6372df14adf768d6ecfb0b883baf683a1f61c3357d1f7eeb915e8db33f3567f31813957e461fffb7d842d91766f1edcf08a29958eeeea2df0c52ad1a0dd1a27a902862851b984f29c98f96886a854ce0e9eccce6f50d36b080a887dffffb7da239553f8bccb24bfd349b49dc6d9833d71ced63d0b7601e92b68bc09255993d02f496b236e439dc157ae7c2c7d136e691b098d8eadb56be375e2fee10cf589bb036e09a7fad5e575a850b0725d7af7e70e2d111760e7bdd1830cbfc9df9dff28c6ebd6097021f4501978fcc46", @ANYRES32=r0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

08:17:10 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x108001}, 0xffffffffffffff1c)

08:17:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00')
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x15}, 0x404c001)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x6d}, {0x5, 0x1}, {0x2, 0x1}, {0x6c}, {0x6c, 0x1}, {0x12, 0x1}, {0x6c, 0x1}, {0xc, 0x1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004)

08:17:10 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x9, 0x0}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2800c000}, 0x8000)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x4000, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x100, 0x5b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xdb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffe}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20000100)

[  965.092582]  ? loop_queue_rq+0x280/0x280
[  965.097336]  ? trace_hardirqs_on+0x10/0x10
[  965.101602]  loop_control_ioctl+0x161/0x3f0
[  965.105921]  ? loop_lookup+0x190/0x190
[  965.109815]  ? SyS_write+0x1b7/0x210
[  965.109827]  ? loop_lookup+0x190/0x190
08:17:10 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x20004044)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000001900000009000700943932ea710000000a0006000802112eefda0000010000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000014)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000fedbdf250500000006001b000c00ffffffff0c000f0008000000000000000c001000ffffffff00000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0x4000010)

[  965.109838]  do_vfs_ioctl+0x75a/0xff0
[  965.109849]  ? ioctl_preallocate+0x1a0/0x1a0
[  965.109857]  ? lock_downgrade+0x740/0x740
[  965.109871]  ? __fget+0x225/0x360
[  965.109880]  ? do_vfs_ioctl+0xff0/0xff0
[  965.109891]  ? security_file_ioctl+0x83/0xb0
[  965.109900]  SyS_ioctl+0x7f/0xb0
[  965.109907]  ? do_vfs_ioctl+0xff0/0xff0
[  965.109919]  do_syscall_64+0x1d5/0x640
[  965.109934]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  965.109942] RIP: 0033:0x45e219
[  965.109947] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  965.109957] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  965.109962] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
08:17:10 executing program 1 (fault-call:2 fault-nth:48):
socket(0x2, 0xa, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:17:10 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r0=>0x0})
r1 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000280)=@buf={0xd0, &(0x7f0000000180)="1cd43efdf624756a4762649550b4195ffa43ed3a43c6425d7c094d5ae7d925ac643529505d6dd110c108a5e8d4268b756a44994cfc72bc871ae8853ac41b1220d8b33c532a70ab4deabb5cb11cc783b9c2c062a0216c80832a5b6cb6d05d37c5f394dbc3551ff59a6795691b447cb1ba4264485dea169a97f1ce81d3f2ffafa296a164df06f5c8124511ba94ed5f19cad632771c7f3af332532704d8e4c3e891d9d6374e39b50c17836be8a3d50a22a9787001c25c69b371770c70ca0737820b5bf159bffacb9731505c7b315fcb9cc0"})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x5f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000300000000000000", @ANYRES32=r4, @ANYBLOB="0c0099001d000000260000000800220100000000080027000300000008009f000100000004006c000800a000223e000008009f0002000000080022014103000008009f0003000000080027000200000005001801110000000500180134000000050019010600000004008700"], 0x88}}, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880)='nl80211\x00')
sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="05000000", @ANYRES16=r6, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000040)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x721, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="059ced588025"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ae26bef8eecc"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8dc12a591cd5"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e42dd247a98c"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800)
ioctl$sock_ifreq(r1, 0x891b, &(0x7f00000005c0)={'netdevsim0\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f0000000580)={0xfffb, 0x8}}})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="040029a970001adcdf253b00000008004300", @ANYRES32=r0, @ANYBLOB="43a83e260ecf97c5d5372190a35553b5dcaef0c534e5b99649f9e582fee835cbb771b9d342ca8261115c12214657089066382893da17aa0f541a38b6788de24de3286923034aea3ff6804a4a5d569262fff9d93fa0e8bd75642e848fd7dce4ddfb0cb3cfdba40598117b76573784e4ec48f31f29a124987773d7349ba90ce5d33261be6755771ed2b13f4bc656a7054dfd0edac7f487c18e5fe1cba38820095a046da6a42b8902f93a808811f35a78e5ad3b7b67055004c09d15287a7e64"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0)

08:17:10 executing program 5:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf250700000008f10900078a600005001300050d000006001a0063bedb4608000a000100000008001700c6b19f5e7245ae3fd8c3ac8422405f5f6928b9bfbaa0e140bddc0e6bd3e2e6a00a44abbefd946a649a16a26196edb88e5f5af53a4c34c2cca71751f586d70de285602d69839fdffad5bc9d9fd675fd0000000000000000", @ANYRES32, @ANYBLOB="1400080068737230000000000000000000000000060001000700000008000c00030000000500040079000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004084}, 0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x68, r7, 0x200, 0x70bd29, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x31c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x337}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x9, 0xffffffff, 0x8, @empty, @dev={0xfe, 0x80, [], 0x2d}, 0x7, 0x10, 0xff, 0x2}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @xdp={0x2c, 0xe582a62d3f7ffe49, r5}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="a61920bbbc7f"}, 0xffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x800000})

08:17:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1d, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}}, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24088804)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000c0}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2d}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x400}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xbe}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xa7}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8}]}]}, 0x60}}, 0x4008090)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, 0x0, 0x400, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7b}}}}}, 0x20}}, 0x8000)

08:17:10 executing program 3:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/ipc\x00')

[  965.109967] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  965.109972] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002f
[  965.109978] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
08:17:10 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
r0 = socket$kcm(0x29, 0x4, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000))

[  965.336968] FAULT_INJECTION: forcing a failure.
[  965.336968] name failslab, interval 1, probability 0, space 0, times 0
[  965.354886] CPU: 0 PID: 4928 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  965.363403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  965.372766] Call Trace:
[  965.372781]  dump_stack+0x1b2/0x283
[  965.372795]  should_fail.cold+0x10a/0x154
[  965.383127]  should_failslab+0xd6/0x130
[  965.387103]  kmem_cache_alloc_trace+0x29a/0x3d0
[  965.391770]  ? __lock_acquire+0x5fc/0x3f20
[  965.396007]  device_create_groups_vargs+0x7b/0x250
[  965.400937]  device_create_vargs+0x3a/0x50
[  965.405172]  bdi_register_va.part.0+0x35/0x650
[  965.409754]  bdi_register+0x101/0x110
[  965.413558]  ? bdi_register_va+0x80/0x80
[  965.417665]  ? vsnprintf+0x260/0x1340
[  965.417681]  bdi_register_owner+0x59/0xf0
[  965.417694]  device_add_disk+0x5bb/0xdc0
[  965.417705]  ? sprintf+0xa7/0xd0
[  965.417715]  ? blk_alloc_devt+0x310/0x310
[  965.417725]  ? __lockdep_init_map+0x100/0x560
[  965.417735]  ? __lockdep_init_map+0x100/0x560
[  965.417747]  loop_add+0x615/0x830
[  965.417757]  ? loop_queue_rq+0x280/0x280
[  965.417767]  ? trace_hardirqs_on+0x10/0x10
[  965.417778]  loop_control_ioctl+0x161/0x3f0
[  965.417787]  ? loop_lookup+0x190/0x190
[  965.417796]  ? SyS_write+0x1b7/0x210
[  965.417808]  ? loop_lookup+0x190/0x190
[  965.417818]  do_vfs_ioctl+0x75a/0xff0
[  965.417838]  ? ioctl_preallocate+0x1a0/0x1a0
[  965.417846]  ? lock_downgrade+0x740/0x740
08:17:10 executing program 4:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8)

08:17:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000000)="19fd1dc67f919a739a69360d9de079d409b3d79c", 0x14}], 0x1}, 0x0)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'bond0\x00', @ifru_flags})
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')

08:17:10 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x8, 0x40)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000001c0)={r1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x71}}, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7a4, 0x26}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008044)
r5 = syz_open_dev$vcsa(&(0x7f0000000d00)='/dev/vcsa#\x00', 0x6, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2d8, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd, 0x2, "433a2b0c0cd5962a07"}]}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@supported_rates={0x1, 0x1, [{0x0, 0x1}]}]}, @NL80211_ATTR_FTM_RESPONDER={0x2a0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x7e, 0x3, "a3998e007ed3aa2625634cba94df2c8829f9214536ceb898762a033c367b67f621d14b2e16d1eb80de58707c3d81eed8816ea65bc74f4fcb9f890baec9bff438dbb451e8fb07f4ba18d244f203a66f7efddce5fc0aa63f78a3527b764b2aa70a5be1582a3a05480e6403fb172d6e5707d19e7775796802f19666"}, @NL80211_FTM_RESP_ATTR_LCI={0x50, 0x2, "277cd749cafb5e258a75153c4114390c81a95fe7c3954d3224b97dbb3c7154bdefead277f1962252266d40421e6d9e69e1b401e2d4e8477c557e62c1e005049463536a0ba5cdd8a398b9dfe9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x55, 0x3, "fab3e7338fa1d1d6212dbc3eb4036b69698c23afc0da4f5d80561e6392b1236ea7cc84e52db072d14f3c99b34eb46b14fcdf9e98d4980f132dccaa06fc0012808c437b2d69f282ed7323660fb15efdfea2"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf2, 0x3, "7625b2ee550457e8f4b0db19e2253d849a2448a5e1c9748e99db1985fe9c036d4d2b269e518ad9bdeb732a3822a28b993bf0277276497f1361c37b5ef68ba295da873e3cdedbe937da72463214d23e17b3056145560da35fc6b87925bd408e408018ff115606c8d6d500370ea50516ed3b9dbbc2ec35925061cd15c074ece10c2f1a54794df017f86e16106e14ad1f9073b90b65ebef8fdb8eb3281109a001e5ec692198ba1257867c18cb8e9a80ee28c5367d0c148122d0204dd2fd39fe13d697439398211c7e976c236ce1f34260e1a5fb60f761cf006e7fcb95507b0ca5e96a91af19e2da6de6ebcb6a75cc03"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7c, 0x3, "1479cb983a5c9251dbe4b954178596924b8d0f45fec3be04b5aab70619833287847f0be4fd2c6bd531330b53f1c67a1b7c90098c33c2dd47c6d816a606db2ba472fcb0fe20372ebf174e2bb4925c355d412fe2f53e6500b2da5d82c46626b5550dc95bc8904bee83b302abc08559602995a6d943e9d26642"}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4}, 0x0)

08:17:10 executing program 4:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x1)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x9, 0x1, 0x4, 0x0, 0x1, {}, {0x2, 0x8, 0x1, 0x5, 0x1, 0xb0, "4d98ccc1"}, 0x6c4, 0x3, @planes=&(0x7f0000000080)={0xfffffbff, 0x7fff, @userptr=0x9, 0x82}, 0x7})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffec9)

08:17:10 executing program 3:
r0 = gettid()
syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00')
r1 = getpid()
ioprio_set$pid(0x3, r1, 0x2004)
ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000100)={&(0x7f0000000080)="a0219a6e2bdd0e0380e4bc05ddb58918ec75c4802beb4d09601efcc05bb6f886b2c6b508d97c09fa19b683831fcce090ad257ca616e94b8268c1fdae36b3592efab5cd30060ff46c54bc46de13fb2aed4ed23380bdeda4529a4662c0fd986b121d2b2594d6088d1a5be01d822122bd345ef1b3f08de61c1df581d1ca78dd", 0x7e})
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x100, 0x4)

08:17:10 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00')
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x80, 0x7, 0x7c8, 0x80000001, {{0x8, 0x4, 0x2, 0x10, 0x20, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x7, 0x6c, [@broadcast]}, @ra={0x94, 0x4}]}}}}})
gettid()

[  965.417863]  ? __fget+0x225/0x360
[  965.435601] bond0: Invalid MTU -1663585527 requested, hw min 68
[  965.437306]  ? do_vfs_ioctl+0xff0/0xff0
[  965.437318]  ? security_file_ioctl+0x83/0xb0
[  965.437328]  SyS_ioctl+0x7f/0xb0
[  965.437338]  ? do_vfs_ioctl+0xff0/0xff0
[  965.468157] bond0: Invalid MTU -1663585527 requested, hw min 68
[  965.469985]  do_syscall_64+0x1d5/0x640
[  965.470004]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  965.470014] RIP: 0033:0x45e219
[  965.529841] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  965.529855] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  965.544843] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  965.552106] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  965.559369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030
[  965.566635] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  965.593659] kasan: CONFIG_KASAN_INLINE enabled
[  965.598631] kasan: GPF could be caused by NULL-ptr deref or user memory access
[  965.606124] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  965.612353] Modules linked in:
[  965.615551] CPU: 0 PID: 4928 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0
[  965.623420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  965.632762] task: ffff888075618680 task.stack: ffff888099dc8000
[  965.638803] RIP: 0010:sysfs_do_create_link_sd+0x56/0x120
[  965.644227] RSP: 0018:ffff888099dcfb48 EFLAGS: 00010202
[  965.649564] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 0000000000006829
[  965.656814] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000040
[  965.664058] RBP: ffffffff87cb9b60 R08: ffffffff8b9bdc08 R09: 00000000000400c6
[  965.671329] R10: ffff888075618f30 R11: ffff888075618680 R12: ffff8880aef588c0
[  965.678582] R13: ffffffff87cb9b60 R14: 0000000000000001 R15: ffff8880944b73dc
[  965.685853] FS:  00007f2442eec700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
[  965.694055] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  965.699997] CR2: 00007f97d6d80050 CR3: 00000000a4e42000 CR4: 00000000001406f0
[  965.707250] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  965.714495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  965.721841] Call Trace:
[  965.724425]  sysfs_create_link+0x5f/0xc0
[  965.728574]  device_add_disk+0x9f8/0xdc0
[  965.732709]  ? sprintf+0xa7/0xd0
[  965.736403]  ? blk_alloc_devt+0x310/0x310
[  965.740532]  ? __lockdep_init_map+0x100/0x560
[  965.745006]  ? __lockdep_init_map+0x100/0x560
[  965.749476]  loop_add+0x615/0x830
[  965.752908]  ? loop_queue_rq+0x280/0x280
[  965.756944]  ? trace_hardirqs_on+0x10/0x10
[  965.761155]  loop_control_ioctl+0x161/0x3f0
[  965.765450]  ? loop_lookup+0x190/0x190
[  965.769312]  ? SyS_write+0x1b7/0x210
[  965.773011]  ? loop_lookup+0x190/0x190
[  965.776874]  do_vfs_ioctl+0x75a/0xff0
[  965.780670]  ? ioctl_preallocate+0x1a0/0x1a0
[  965.785053]  ? lock_downgrade+0x740/0x740
[  965.789277]  ? __fget+0x225/0x360
[  965.792710]  ? do_vfs_ioctl+0xff0/0xff0
[  965.796672]  ? security_file_ioctl+0x83/0xb0
[  965.801063]  SyS_ioctl+0x7f/0xb0
[  965.804412]  ? do_vfs_ioctl+0xff0/0xff0
[  965.808544]  do_syscall_64+0x1d5/0x640
[  965.812426]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  965.817589] RIP: 0033:0x45e219
[  965.820754] RSP: 002b:00007f2442eebc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  965.828436] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
[  965.835682] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000004
[  965.842927] RBP: 00007f2442eebca0 R08: 0000000000000000 R09: 0000000000000000
[  965.850178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030
[  965.857430] R13: 00007ffe084906ef R14: 00007f2442eec9c0 R15: 000000000119bf8c
[  965.864684] Code: 84 a1 00 00 00 e8 8b 18 b1 ff 48 c7 c7 40 c2 04 89 e8 7f a7 7a 05 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 00 00 00 4c 8b 6b 30 4d 85 ed 74 4f e8 52 
[  965.883801] RIP: sysfs_do_create_link_sd+0x56/0x120 RSP: ffff888099dcfb48
[  965.891040] ---[ end trace 474237c80f0e6394 ]---
[  965.895792] Kernel panic - not syncing: Fatal exception
[  965.901846] Kernel Offset: disabled
[  965.905472] Rebooting in 86400 seconds..