x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)) r3 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/215, 0xd7, 0x7f, &(0x7f0000000280)) 00:37:13 executing program 0: ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xff7ffffffffffffd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24048000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:13 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:13 executing program 0: ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xff7ffffffffffffd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24048000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x0, 0x0, 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xff7ffffffffffffd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24048000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) 00:37:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:13 executing program 3: ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xff7ffffffffffffd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24048000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:13 executing program 0: ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xff7ffffffffffffd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24048000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfe0, 0x7e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040080) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x47}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "277ec382db9bd7a0c2e408b352139642"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) socketpair(0x21, 0x1, 0x10000, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x164, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x13c, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9b, 0x2, "003a747073655936a295e0c3d99cd14631f86d754a863575dbacd1b62dc58ed4209fd24a5a4538353ea00676a407a20fc89cc0f03bb5deaf3ac3bfdcc02be5842eaad618272017ca16828e51214822ecb5bf258d2486d56844b99aa17b455fe57d225fafc30c593593a14caa9a30242c061361b436f2ee33218ba8cb35b75dc41b945054f6231fe49d97081b1ab487a23d561e4e65ef1b"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3e5}}, {0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x85, 0x2, "03d2388a5a456df53a769661bcd62d1477873582dd2ba41211583fccb49bb2063081df395e7497695d16f5ddf2725232a507f2d940c089025a7ce0d4a94894ed3d5a454b29c77aae003306ebef7223ac0b12866b47866098e2a24bea1c94f655a1a3cb687dce49f7a60b6705bc565317292e95d1287dc83d23e50001e01acb171a"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x164}}, 0x44814) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00080000000000000000008cb14e6393380fd183b6d8636d7d2b9960a4895572e0f146d29a4d5a46aaa3a6ecec8b651ab88747cf8e2e63921905d2b560a564c2cbbef86cfe68ab5290922898301ebd89ac6b2a9ecb057f80ba21fe7762e815452dcf280278fd8194544250f944703e69240ebe69ca22fe9108b1f1bfa72bcc85477a38050d5c29a6a6fe43942e58da5cccbaa2ca91724c15e1d9609be7aa5ee3445d6a6586d16b7c72f41f2058904fb3"], 0x28}}, 0x0) 00:37:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x101}]}, 0x1c}}, 0x14000020) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="07009900000000e6e7ffffff"], 0x28}}, 0x0) 00:37:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfe0, 0x7e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040080) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x47}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "277ec382db9bd7a0c2e408b352139642"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) socketpair(0x21, 0x1, 0x10000, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x164, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x13c, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9b, 0x2, "003a747073655936a295e0c3d99cd14631f86d754a863575dbacd1b62dc58ed4209fd24a5a4538353ea00676a407a20fc89cc0f03bb5deaf3ac3bfdcc02be5842eaad618272017ca16828e51214822ecb5bf258d2486d56844b99aa17b455fe57d225fafc30c593593a14caa9a30242c061361b436f2ee33218ba8cb35b75dc41b945054f6231fe49d97081b1ab487a23d561e4e65ef1b"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3e5}}, {0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x85, 0x2, "03d2388a5a456df53a769661bcd62d1477873582dd2ba41211583fccb49bb2063081df395e7497695d16f5ddf2725232a507f2d940c089025a7ce0d4a94894ed3d5a454b29c77aae003306ebef7223ac0b12866b47866098e2a24bea1c94f655a1a3cb687dce49f7a60b6705bc565317292e95d1287dc83d23e50001e01acb171a"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x164}}, 0x44814) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00080000000000000000008cb14e6393380fd183b6d8636d7d2b9960a4895572e0f146d29a4d5a46aaa3a6ecec8b651ab88747cf8e2e63921905d2b560a564c2cbbef86cfe68ab5290922898301ebd89ac6b2a9ecb057f80ba21fe7762e815452dcf280278fd8194544250f944703e69240ebe69ca22fe9108b1f1bfa72bcc85477a38050d5c29a6a6fe43942e58da5cccbaa2ca91724c15e1d9609be7aa5ee3445d6a6586d16b7c72f41f2058904fb3"], 0x28}}, 0x0) 00:37:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000650000000c0099000000000000000000d2126e13b5ba2aa30a2db1d59f2ec3f48923c509a893161c2f837b847f744e81e2aa4a05d0c07299aca39b6dc5a94ae6f5a071bd3bbe07c0861c3553392ed51abc8f49cb08f2f352d67abe8574dddc26742191cd8d9a864e449ed4fdf44f02f05b3955e17431044c68b3c2d91abcaaa2e2cba219d867784c837f980f7d5e0ed1c3aafcba9c1d"], 0x20}}, 0x0) socketpair(0x11, 0x3, 0xb02, &(0x7f0000000280)={0xffffffffffffffff}) socketpair(0x22, 0x4, 0x8, &(0x7f0000000500)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x68, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x11}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x7e}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008840}, 0x40008009) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000090002cd045b107600000008000300", @ANYRES32=0x0, @ANYRES32=r2], 0x68}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10042}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xd4, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crash_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8008015}, 0x90) 00:37:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfe0, 0x7e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040080) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) (async) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x47}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "277ec382db9bd7a0c2e408b352139642"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) socketpair(0x21, 0x1, 0x10000, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x164, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x13c, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9b, 0x2, "003a747073655936a295e0c3d99cd14631f86d754a863575dbacd1b62dc58ed4209fd24a5a4538353ea00676a407a20fc89cc0f03bb5deaf3ac3bfdcc02be5842eaad618272017ca16828e51214822ecb5bf258d2486d56844b99aa17b455fe57d225fafc30c593593a14caa9a30242c061361b436f2ee33218ba8cb35b75dc41b945054f6231fe49d97081b1ab487a23d561e4e65ef1b"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3e5}}, {0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x85, 0x2, "03d2388a5a456df53a769661bcd62d1477873582dd2ba41211583fccb49bb2063081df395e7497695d16f5ddf2725232a507f2d940c089025a7ce0d4a94894ed3d5a454b29c77aae003306ebef7223ac0b12866b47866098e2a24bea1c94f655a1a3cb687dce49f7a60b6705bc565317292e95d1287dc83d23e50001e01acb171a"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x164}}, 0x44814) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00080000000000000000008cb14e6393380fd183b6d8636d7d2b9960a4895572e0f146d29a4d5a46aaa3a6ecec8b651ab88747cf8e2e63921905d2b560a564c2cbbef86cfe68ab5290922898301ebd89ac6b2a9ecb057f80ba21fe7762e815452dcf280278fd8194544250f944703e69240ebe69ca22fe9108b1f1bfa72bcc85477a38050d5c29a6a6fe43942e58da5cccbaa2ca91724c15e1d9609be7aa5ee3445d6a6586d16b7c72f41f2058904fb3"], 0x28}}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async, rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x30}}, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x140b, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:14 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x30}}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x140b, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) 00:37:14 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, 0x0, 0x4014) 00:37:14 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x30}}, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x140b, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 00:37:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x140b, 0x300, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4020884}, 0x24008864) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r4, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 2: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) r4 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0xfffffffc, {{0x1b}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x140b, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 00:37:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x140b, 0x1}, 0x10}}, 0x4014) 00:37:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) 00:37:14 executing program 2: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) (async) r4 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0xfffffffc, {{0x1b}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x140b, 0x300, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4020884}, 0x24008864) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r4, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x140b, 0x1}, 0x10}}, 0x0) 00:37:14 executing program 2: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) (async) r4 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0xfffffffc, {{0x1b}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x60, 0x140b, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={r3, 0x0, 0x8, 0x7, 0x8}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x6b) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0xae) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x10001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xe0, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x99}}, {0x8}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000100}, 0x20000080) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="010400000000000000001b0000000800c931", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={r3, 0x0, 0x8, 0x7, 0x8}) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={r3, 0x0, 0x8, 0x7, 0x8}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x6b) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0xae) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x10001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x40, 0x4c}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9d6, 0x20}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2c}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044010}, 0x8000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={r3, 0x0, 0x8, 0x7, 0x8}) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={r3, 0x0, 0x8, 0x7, 0x8}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x6b) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0xae) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x10001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100026bd7000ffdbdf253b00000008800300821328fd2b86050b59d45d1e406b838b3d971417d90e3e0e002420c2961942000000", @ANYRES32=0x0, @ANYBLOB="0c009900ff0f00002800000008005700cf0a000004008700"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x8000) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x40, 0x4c}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9d6, 0x20}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2c}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044010}, 0x8000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={r3, 0x0, 0x8, 0x7, 0x8}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x6b) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0xae) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x10001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100026bd7000ffdbdf253b00000008800300821328fd2b86050b59d45d1e406b838b3d971417d90e3e0e002420c2961942000000", @ANYRES32=0x0, @ANYBLOB="0c009900ff0f00002800000008005700cf0a000004008700"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x8000) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x40, 0x4c}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9d6, 0x20}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2c}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044010}, 0x8000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={r1, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100026bd7000ffdbdf253b00000008800300821328fd2b86050b59d45d1e406b838b3d971417d90e3e0e002420c2961942000000", @ANYRES32=0x0, @ANYBLOB="0c009900ff0f00002800000008005700cf0a000004008700"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x8000) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x6b) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0xae) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x10001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 00:37:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x40, 0x4c}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9d6, 0x20}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2c}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044010}, 0x8000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x6b) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0xae) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x10001) 00:37:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 00:37:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x6b) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0xae) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x500}, 0x0) 00:37:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x6b) socket$nl_generic(0x10, 0x3, 0x10) 00:37:14 executing program 2: socketpair(0x24, 0x3, 0x4, &(0x7f0000000000)) 00:37:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x6b) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x5a}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, r1, 0x504, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x81}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, [{0x4e, 0x1}, {0x5, 0x1}, {0x9}, {0x9, 0x1}, {0x1b}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]]}, 0x58}, 0x1, 0x0, 0x0, 0x9810}, 0x8804) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 2: socketpair(0x24, 0x3, 0x4, &(0x7f0000000000)) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x800) 00:37:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x5a}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, r1, 0x504, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x81}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, [{0x4e, 0x1}, {0x5, 0x1}, {0x9}, {0x9, 0x1}, {0x1b}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]]}, 0x58}, 0x1, 0x0, 0x0, 0x9810}, 0x8804) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 2: socketpair(0x24, 0x3, 0x4, &(0x7f0000000000)) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x5a}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, r1, 0x504, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x81}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, [{0x4e, 0x1}, {0x5, 0x1}, {0x9}, {0x9, 0x1}, {0x1b}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]]}, 0x58}, 0x1, 0x0, 0x0, 0x9810}, 0x8804) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x0) 00:37:14 executing program 2: socketpair(0x0, 0x3, 0x4, &(0x7f0000000000)) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x11c, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xaf4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdc, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc8, 0x1, "d9ea9585a361269754cc1f963a189a544ce245e44f985f08e555789e4df61d5a6884b9eb6d0154350cdbcb3f2c02981a40e5d91d4f21727d94628baa09a4db2c4ca1331993ae0f02df75f4b5cb4da07a0cc25ac74b7b646c9e41c9da42ac3bdf4de6c39b715c3a00c5ada11be62688051a235a7c11b25838d17bdc9c61417271b4486b67d53e1c6b8978443561159289575777aacd81f77cf41e1ef03af1c432caa8c779e4776ffdcf7e0a4511ad713d82f156d73156079f798b7fa9d8d8c74c4797dc4b"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffc1}]}, 0x11c}}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x14000000) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x11c, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xaf4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdc, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc8, 0x1, "d9ea9585a361269754cc1f963a189a544ce245e44f985f08e555789e4df61d5a6884b9eb6d0154350cdbcb3f2c02981a40e5d91d4f21727d94628baa09a4db2c4ca1331993ae0f02df75f4b5cb4da07a0cc25ac74b7b646c9e41c9da42ac3bdf4de6c39b715c3a00c5ada11be62688051a235a7c11b25838d17bdc9c61417271b4486b67d53e1c6b8978443561159289575777aacd81f77cf41e1ef03af1c432caa8c779e4776ffdcf7e0a4511ad713d82f156d73156079f798b7fa9d8d8c74c4797dc4b"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffc1}]}, 0x11c}}, 0x0) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x14000000) 00:37:14 executing program 2: socketpair(0x0, 0x3, 0x4, &(0x7f0000000000)) 00:37:14 executing program 3: openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x11c, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xaf4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdc, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc8, 0x1, "d9ea9585a361269754cc1f963a189a544ce245e44f985f08e555789e4df61d5a6884b9eb6d0154350cdbcb3f2c02981a40e5d91d4f21727d94628baa09a4db2c4ca1331993ae0f02df75f4b5cb4da07a0cc25ac74b7b646c9e41c9da42ac3bdf4de6c39b715c3a00c5ada11be62688051a235a7c11b25838d17bdc9c61417271b4486b67d53e1c6b8978443561159289575777aacd81f77cf41e1ef03af1c432caa8c779e4776ffdcf7e0a4511ad713d82f156d73156079f798b7fa9d8d8c74c4797dc4b"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffc1}]}, 0x11c}}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0xf000000) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xcc}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}}, 0x20040000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x1b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20048090}, 0x40090) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc1002401}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xc4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xada5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0xc1) 00:37:14 executing program 3: openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 2: socketpair(0x0, 0x3, 0x4, &(0x7f0000000000)) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000000) 00:37:14 executing program 3: openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x8}) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xcc}, 0x10) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}}, 0x20040000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x1b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20048090}, 0x40090) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc1002401}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xc4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xada5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0xc1) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xcc}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}}, 0x20040000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x1b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20048090}, 0x40090) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc1002401}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xc4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xada5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0xc1) 00:37:14 executing program 2: socketpair(0x24, 0x0, 0x4, &(0x7f0000000000)) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) 00:37:14 executing program 2: socketpair(0x24, 0x0, 0x0, &(0x7f0000000000)) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xcc}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}}, 0x20040000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x1b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20048090}, 0x40090) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc1002401}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xc4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xada5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0xc1) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) 00:37:14 executing program 2: socketpair(0x24, 0x0, 0x0, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x600) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x16}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010400e8ffffff0000401b0000000800f0ff346a27d6f0ade755dc17a00726bb1090e872138f4c8664e53566066e32e35bc69c8a62f89517f596dd6ae5c1f86ca388f9b0bd0ae65c995da9bd67ed4a70ec", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) 00:37:14 executing program 2: socketpair(0x24, 0x0, 0x0, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x8}) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x16}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010400e8ffffff0000401b0000000800f0ff346a27d6f0ade755dc17a00726bb1090e872138f4c8664e53566066e32e35bc69c8a62f89517f596dd6ae5c1f86ca388f9b0bd0ae65c995da9bd67ed4a70ec", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) 00:37:14 executing program 2: socketpair(0x24, 0x0, 0x0, 0x0) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x16}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010400e8ffffff0000401b0000000800f0ff346a27d6f0ade755dc17a00726bb1090e872138f4c8664e53566066e32e35bc69c8a62f89517f596dd6ae5c1f86ca388f9b0bd0ae65c995da9bd67ed4a70ec", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x16}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010400e8ffffff0000401b0000000800f0ff346a27d6f0ade755dc17a00726bb1090e872138f4c8664e53566066e32e35bc69c8a62f89517f596dd6ae5c1f86ca388f9b0bd0ae65c995da9bd67ed4a70ec", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (async) 00:37:14 executing program 1: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x8}) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 00:37:14 executing program 3: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x6}, 0x0) 00:37:14 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x38}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x6}, 0x0) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0xffffff7f}, 0x0) 00:37:14 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x38}}, 0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0xfffff000}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x3c00}, 0x0) 00:37:14 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x1, 0x7, 0x2, 0x3}) socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) sendto$l2tp6(r1, &(0x7f0000000040)="bd757f494e680ae1a83abfe06249011bb46e200534e86d5f5c13c1d8793b", 0x1e, 0x8041, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}, 0x20) 00:37:14 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x38}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x28000000}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0xfffff000}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0xa2a02, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x1, 0x0, 0xfd13, 0x401, 0x0, 0x4, 0x9, 0x8, 0x2}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x3c4, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0xffff, 0x53}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x39c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x1}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x230, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xbe, 0xa, "d392af280816399e9b60ded110e851520dda713c121e186f74e29a8a6cb148b6143448760793278637d09030971b73f23e8651a7a66924544acf84d9ff9bd616a60f08da6a9c1a1d52ff6284d427c770e0a1032288adf52b70653943abdc7a468b1abd0ff38fea4b9e0303fe7d4e97c3e228f8fb330de575f08b78282ddb57f24ef276cd24b2d0e0374bd20655e5dd7f8b01de7fd4c1c1b9801d418d1cb40af1a31ec49a0eefa5a7e801a07d3b1e70418725dd1df7dcddde273a"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x5a, 0xa, "2d254c3e7e3e794a6d6ef908130d5b8e977e2acd39a546b779969928edc0526d9081b1e04523f7033e05cb009b67c8ad50593254da3ac2962fec66110bd21a67d14990fa1d1821a416bc30711b28f6d7552cc82fea97"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xb5, 0xa, "702bd19306b6917a2f34239d1a89c00de0d4a3de73f3f2ec2c6402ad3ec48bec8d320b393e0feb43a0234a2554e5939536f4e640a8a53e8c2a9b4c795a9c6c8cc073a1637b4aeda32e3097b122cf046f02b1a2d077061eb313a7b2b0d0dd6cfb0003ae2311cc1e1c77a01ea8f907f6db4a7e51b6604162267c1548ff0363f77507568813c3e528337484c5af1624a28db2f848971780ef7afa19dadd1e7b7c9fde91b294c757c64ceecab5b7fd2be3de08"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x8}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x9}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x2e, 0x6, "6456b2e92c4c9dde08f1df59cce283323cd590324579b527b8ae11ea769191621a70d31811521c165fde"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1000}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x130, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xd2, 0x6, "46a26339e7da386d7d7412c6af3eec86ffc1469f0b93bd5970204b68b604bf7d26473b2de981610e031673f6eca96274c4859cf469787ee1f5762194f8c5691ccdc396339afe66e7cb9dcec769b5c707b0e169af36154f684e6a2c3ed3b1d490e20ae56578e0227af9ed755494bdbf53fa5ad340a643765310b96073311f71a2efdee5e38aef24ba559da0fa3e8ee6e0ff25176c69498e2afabcfbd0fdeba61d412b7b371a47193263d61e52719b6eaf5af64db1404cb2f276bb64c17c0151b45c691d5ee0c036c53df02c13fc50"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x15, 0xb, "3cba6192cacdc5e32f709f77ec68a6d085"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x29}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4081}, 0x4080) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c000000222caba30101a33544592655f4af04ed5ca4844c25dc948d26ddd0b5600aeb3777927a", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf250100000006001d000300000005000700020000000c000f00008000000000000014002000fc00000000000000000000000000000108000b000000000005000d00000000000c00100004000000000000001400080076657468305f746f5f626174616476000500070003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x37381af4fed1e731}, 0x40) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x1d120000}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x14000000}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x300}, 0x0) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x600}, 0x0) 00:37:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0xa2a02, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x1, 0x0, 0xfd13, 0x401, 0x0, 0x4, 0x9, 0x8, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x1, 0x0, 0xfd13, 0x401, 0x0, 0x4, 0x9, 0x8, 0x2}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x3c4, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0xffff, 0x53}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x39c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x1}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x230, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xbe, 0xa, "d392af280816399e9b60ded110e851520dda713c121e186f74e29a8a6cb148b6143448760793278637d09030971b73f23e8651a7a66924544acf84d9ff9bd616a60f08da6a9c1a1d52ff6284d427c770e0a1032288adf52b70653943abdc7a468b1abd0ff38fea4b9e0303fe7d4e97c3e228f8fb330de575f08b78282ddb57f24ef276cd24b2d0e0374bd20655e5dd7f8b01de7fd4c1c1b9801d418d1cb40af1a31ec49a0eefa5a7e801a07d3b1e70418725dd1df7dcddde273a"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x5a, 0xa, "2d254c3e7e3e794a6d6ef908130d5b8e977e2acd39a546b779969928edc0526d9081b1e04523f7033e05cb009b67c8ad50593254da3ac2962fec66110bd21a67d14990fa1d1821a416bc30711b28f6d7552cc82fea97"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xb5, 0xa, "702bd19306b6917a2f34239d1a89c00de0d4a3de73f3f2ec2c6402ad3ec48bec8d320b393e0feb43a0234a2554e5939536f4e640a8a53e8c2a9b4c795a9c6c8cc073a1637b4aeda32e3097b122cf046f02b1a2d077061eb313a7b2b0d0dd6cfb0003ae2311cc1e1c77a01ea8f907f6db4a7e51b6604162267c1548ff0363f77507568813c3e528337484c5af1624a28db2f848971780ef7afa19dadd1e7b7c9fde91b294c757c64ceecab5b7fd2be3de08"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x8}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x9}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x2e, 0x6, "6456b2e92c4c9dde08f1df59cce283323cd590324579b527b8ae11ea769191621a70d31811521c165fde"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1000}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x130, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xd2, 0x6, "46a26339e7da386d7d7412c6af3eec86ffc1469f0b93bd5970204b68b604bf7d26473b2de981610e031673f6eca96274c4859cf469787ee1f5762194f8c5691ccdc396339afe66e7cb9dcec769b5c707b0e169af36154f684e6a2c3ed3b1d490e20ae56578e0227af9ed755494bdbf53fa5ad340a643765310b96073311f71a2efdee5e38aef24ba559da0fa3e8ee6e0ff25176c69498e2afabcfbd0fdeba61d412b7b371a47193263d61e52719b6eaf5af64db1404cb2f276bb64c17c0151b45c691d5ee0c036c53df02c13fc50"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x15, 0xb, "3cba6192cacdc5e32f709f77ec68a6d085"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x29}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4081}, 0x4080) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c000000222caba30101a33544592655f4af04ed5ca4844c25dc948d26ddd0b5600aeb3777927a", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf250100000006001d000300000005000700020000000c000f00008000000000000014002000fc00000000000000000000000000000108000b000000000005000d00000000000c00100004000000000000001400080076657468305f746f5f626174616476000500070003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x37381af4fed1e731}, 0x40) 00:37:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0xa2a02, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x1, 0x0, 0xfd13, 0x401, 0x0, 0x4, 0x9, 0x8, 0x2}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x3c4, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0xffff, 0x53}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x39c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x1}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x230, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xbe, 0xa, "d392af280816399e9b60ded110e851520dda713c121e186f74e29a8a6cb148b6143448760793278637d09030971b73f23e8651a7a66924544acf84d9ff9bd616a60f08da6a9c1a1d52ff6284d427c770e0a1032288adf52b70653943abdc7a468b1abd0ff38fea4b9e0303fe7d4e97c3e228f8fb330de575f08b78282ddb57f24ef276cd24b2d0e0374bd20655e5dd7f8b01de7fd4c1c1b9801d418d1cb40af1a31ec49a0eefa5a7e801a07d3b1e70418725dd1df7dcddde273a"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x5a, 0xa, "2d254c3e7e3e794a6d6ef908130d5b8e977e2acd39a546b779969928edc0526d9081b1e04523f7033e05cb009b67c8ad50593254da3ac2962fec66110bd21a67d14990fa1d1821a416bc30711b28f6d7552cc82fea97"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xb5, 0xa, "702bd19306b6917a2f34239d1a89c00de0d4a3de73f3f2ec2c6402ad3ec48bec8d320b393e0feb43a0234a2554e5939536f4e640a8a53e8c2a9b4c795a9c6c8cc073a1637b4aeda32e3097b122cf046f02b1a2d077061eb313a7b2b0d0dd6cfb0003ae2311cc1e1c77a01ea8f907f6db4a7e51b6604162267c1548ff0363f77507568813c3e528337484c5af1624a28db2f848971780ef7afa19dadd1e7b7c9fde91b294c757c64ceecab5b7fd2be3de08"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x8}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x9}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x2e, 0x6, "6456b2e92c4c9dde08f1df59cce283323cd590324579b527b8ae11ea769191621a70d31811521c165fde"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1000}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x130, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xd2, 0x6, "46a26339e7da386d7d7412c6af3eec86ffc1469f0b93bd5970204b68b604bf7d26473b2de981610e031673f6eca96274c4859cf469787ee1f5762194f8c5691ccdc396339afe66e7cb9dcec769b5c707b0e169af36154f684e6a2c3ed3b1d490e20ae56578e0227af9ed755494bdbf53fa5ad340a643765310b96073311f71a2efdee5e38aef24ba559da0fa3e8ee6e0ff25176c69498e2afabcfbd0fdeba61d412b7b371a47193263d61e52719b6eaf5af64db1404cb2f276bb64c17c0151b45c691d5ee0c036c53df02c13fc50"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x15, 0xb, "3cba6192cacdc5e32f709f77ec68a6d085"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x29}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4081}, 0x4080) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x3c4, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0xffff, 0x53}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x39c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x1}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x230, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xbe, 0xa, "d392af280816399e9b60ded110e851520dda713c121e186f74e29a8a6cb148b6143448760793278637d09030971b73f23e8651a7a66924544acf84d9ff9bd616a60f08da6a9c1a1d52ff6284d427c770e0a1032288adf52b70653943abdc7a468b1abd0ff38fea4b9e0303fe7d4e97c3e228f8fb330de575f08b78282ddb57f24ef276cd24b2d0e0374bd20655e5dd7f8b01de7fd4c1c1b9801d418d1cb40af1a31ec49a0eefa5a7e801a07d3b1e70418725dd1df7dcddde273a"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x5a, 0xa, "2d254c3e7e3e794a6d6ef908130d5b8e977e2acd39a546b779969928edc0526d9081b1e04523f7033e05cb009b67c8ad50593254da3ac2962fec66110bd21a67d14990fa1d1821a416bc30711b28f6d7552cc82fea97"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xb5, 0xa, "702bd19306b6917a2f34239d1a89c00de0d4a3de73f3f2ec2c6402ad3ec48bec8d320b393e0feb43a0234a2554e5939536f4e640a8a53e8c2a9b4c795a9c6c8cc073a1637b4aeda32e3097b122cf046f02b1a2d077061eb313a7b2b0d0dd6cfb0003ae2311cc1e1c77a01ea8f907f6db4a7e51b6604162267c1548ff0363f77507568813c3e528337484c5af1624a28db2f848971780ef7afa19dadd1e7b7c9fde91b294c757c64ceecab5b7fd2be3de08"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x8}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x9}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x2e, 0x6, "6456b2e92c4c9dde08f1df59cce283323cd590324579b527b8ae11ea769191621a70d31811521c165fde"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1000}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x130, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xd2, 0x6, "46a26339e7da386d7d7412c6af3eec86ffc1469f0b93bd5970204b68b604bf7d26473b2de981610e031673f6eca96274c4859cf469787ee1f5762194f8c5691ccdc396339afe66e7cb9dcec769b5c707b0e169af36154f684e6a2c3ed3b1d490e20ae56578e0227af9ed755494bdbf53fa5ad340a643765310b96073311f71a2efdee5e38aef24ba559da0fa3e8ee6e0ff25176c69498e2afabcfbd0fdeba61d412b7b371a47193263d61e52719b6eaf5af64db1404cb2f276bb64c17c0151b45c691d5ee0c036c53df02c13fc50"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x15, 0xb, "3cba6192cacdc5e32f709f77ec68a6d085"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x29}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4081}, 0x4080) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c000000222caba30101a33544592655f4af04ed5ca4844c25dc948d26ddd0b5600aeb3777927a", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf250100000006001d000300000005000700020000000c000f00008000000000000014002000fc00000000000000000000000000000108000b000000000005000d00000000000c00100004000000000000001400080076657468305f746f5f626174616476000500070003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x37381af4fed1e731}, 0x40) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x3000000}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x30000}, 0x0) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "315f789afdd784c0e4721287080ccc82"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040084}, 0x20004804) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r1, 0x4, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0x28}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fffffff}]}, 0x48}}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x3c00}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0xf0ffffff}, 0x0) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x1400}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "315f789afdd784c0e4721287080ccc82"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040084}, 0x20004804) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r1, 0x4, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0x28}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fffffff}]}, 0x48}}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0xf000}, 0x0) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xf7f1f579}}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x6}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "315f789afdd784c0e4721287080ccc82"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040084}, 0x20004804) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r1, 0x4, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0x28}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fffffff}]}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "315f789afdd784c0e4721287080ccc82"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040084}, 0x20004804) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r1, 0x4, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0x28}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fffffff}]}, 0x48}}, 0x0) (async) 00:37:14 executing program 3: socketpair(0x2, 0x3, 0x1, &(0x7f0000000300)) 00:37:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x28000000}}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: socketpair(0x2, 0x3, 0x1, &(0x7f0000000300)) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x48004) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x3f000000}, 0x0) 00:37:14 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)={0x106c, r4, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "d88747816e462322ccbd55e207b3be8da189af9ceeb46bb1293c9d1a657c52a7378a1c4f6fca279b3d95497e1de02f899c45948b20a0fee8c5627d9ac23d64cf969cac5600a9adbe86d48e635e158aa72fd98e04b104a35b41938f33c6f035db9da8f42e7071580bcb17beb1ac0a1a0e6233dcc9548e08ca62e09b72b0c876f43cfa944053ee5dc08c8511145478084920444e6e28483c681c81777dd1068bb9319cf375b057753e018877535003a5c28bbc4d2d29b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "c85902a40c05f73208f96c7aad1b403e7c4b474100749ed810ffb8169d2983d8fdc2c865a059b7d74a85a8e62d71be3eeb23679d3dcba502aa37d60290d1d5dc2535154e3b37d4bbcd93477e5b7df7699bfd08141f83e2ed129a6d900dd1b57daf927bf6170290bb48b426cf39a71e9ea27c6bde2c7bbfdd6eb19b7eca726e28b0a69ce86edae20b60baf9df9109829f032c959080f54aac9e51307481c23ccee008a48b75166998fc24a6a7d307d22cf17e6e4774cd41"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "781c7f23fb6f4d48b4d4d14de93aaf93c9fcc092fbc3bf1fda7b7072c6c9af13e6d22de29091a8fecfd7f9ba07a14c0f58ebe21b71bb0728e7f1dea9cc02ec2eb399afe8fa960cbb130ea85cdbfc1f382334e0d7a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "7c11b0b2c66e85b3fc691e7aeffa8d8e4e1beec175de5d987af4635ab923eeedd41e92c690d0198ea7dc46ec34356099562691c337bfe1152c1bcf7f35ea833fcfe7631227af70e3530a669db0c3ca3ad02a4ba8ace5d1ef9aa10883418b5d0e57adbb83d36dead7de86a5393750a020b6a2383e84d8824ed24a5d65f30c77b1a6f979e26d17c776b9f3c174fc32d6a544829f96451524b2584c67d6d0e4712237a94326a6d1911db08a192ca22e9ff7395f52850c93dc40f5724cd100121163befdf7ca5a5ccc317b191f855084a2493042"}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x2d5, 0xe, {@wo_ht={{}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x5}}, 0x6, @random=0x9, 0xa4a, @void, @void, @val={0x3, 0x1, 0x13}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x21}}, @void, [{0xdd, 0x77, "e5b890098bb753ef13acf30f9d0c3d938c9f1a800e84b895d5ae40c5e5873ea3def9101e66b1ac5d9ad9fbacf33388e19932ff72477352d47572ea026ab603a0e8a1aca1baffc459492a3051a1478ccda7dc5b39f6a5d47125450adc706e8ac23c84110c2c659cd1ddd46da6731b7f9dcdfd23c16e78bb"}, {0xdd, 0xfb, "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"}, {0xdd, 0x19, "4e52871e2ac400ee30b9eada930c039f455a75f0a8f8bad28b"}, {0xdd, 0xea, "0b11bfede481bbd291e5358aa960feb65f3e364fc7dac4edc10f15b1af9c87cb6cf4ec0c8e89228bff66955ccef2a269cad2cc8094fac3570d38c694054a38f954a32db9e8e280acab187de82006372a598354b71906372630ec086ae892642336895c76999dd0c0284cda11a426d909c1b7db27d70cd153e32ed72e5e9436afcefe868ce0a5b95ab915e0f8a9a1bc64041d733a2f163494b99bb299394ee02bfbc4b76c77c0af116a67f33f90c41e48aec754ffdd979620e82c2dcf83030969ca0035bd2fa1b66f0bbf77ee9697583b7871e936d6e4968af0e0e29805bef9279cfa6b26f281dcc45a6b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x31b, 0x91, "fe7b51b2a69921302c324ee6e17912305ddfa6ab98a373381a057ecf6a081814d35c191eb3dd67049af45b33b05b95d1b7345b4bd15235c1a8b33109c6cae0fb2f95a77e03625af2b310e1866c1efac4d1b78626aed379ee700ff02bcd911ba6e5ad9a9240602bdb72d13b0154186b05d0c746236850cb412b565f7c7bc8697b561dfc719f192e0bf66a6d326e439a6420b2655c1839eb2cec77ad095653e97ae1c66786c5075054731bbc72d2d996e17cd296292d55d4ec0d6663c100125bb0adef7731dbc5985c8c3c27c1fe3d541e82c939b77adde539c6f18a09eee0287b9553e190a9a88f316a66f3fdd158767f479627df53873d97dfe5241a08cac12d7d694a641797e3bd96d04c1ac38d39c56c1ccf512fc99a5f391f4f9312af772646d9cfaf899ff223fa37ffa1fa5b8f05f876ab26845756801cdccaac77f17273a3e35796b957a36905c2bd8804151c68195a5aa86d341c45cd471de525b1796fb57aaf41f83a4bc46c7b20af19b113d6787693d01de9c12991d11071501cf32ff291d65cd417ec520c974b4b8909528b07558392ce6e0bd074c13c3ab2033d5dbc2eeb2cf01d832326401bdbc23e356a268ddee46ee60e887ecc9f112aebe0ce08adbe9f9315e7380f44efc0389aaf2b71d63c52427feb72664df302e9d54a267266f811e6d9711be895ef1196ce85e1d54f69c18953494c966f836637016eab140032da788cd51dc2daaadb867f8b713fe8d13da4a75c02064597a11aa024d0e55448fd20b2cda4c9031f845142502d965299479e1f374a5e73a9e9d7d140258fe9568dbe8a1650a7b9d636d369724e37fe4e1eb020ee1403fa882478d85e1be46b0d00428e6548771b2efe5e37e2d64f5c2548e46c7365caea4b8bb831c5e633929547ae84ee5b1eec05c0cce5eeaa644edda8ae0ad895053ea1121569058120afd487f52861bfe15647a858acc80f14425499006a0bf333166ce86ddde41a17c11f1e459ac18159b9cef32a95f0b0954fd026ef5f56128e6ec16a88a11605496e48dc6b708be2dcd37f6246833a6bd9d8c2104ad1065e92969e4565804967a73dd52fc9daa8bc6753e25640cde3eb7dab295f2f4c78"}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="79bee68177e3", {0xe, 0x7f}}, 0x6, @default, 0x80e2, @void, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xe7, {0x97, 0x22, 0x1f, "b13e59928ebbe596ff5273de58c3c6a62731d21edb7a5742bc116d2e07fe3c6d5ad11c7d89c4844dd44b2e776f53c6859980b45d91ab913d0806c45353692b1f101dc5e3426baca53edcb163aadaba4a74da2c1e5bcd00164a774000a3180d326584e1f699c405b32dcdf52c9fad7160849aea70f586224415d762278907640c42209ceb983b4bbd741685882674e5d4459d0da10f9d095b2ceeaf6a363230f06b2995310d912ff19d4c22d4288565a3dceb5a9435ea396d963979e71135b7a77bb0f96588ee924136e919e4d0e0a75a5e8c06d6d889bf070d1195e3ca7bf12fecd78283"}}, @val={0x25, 0x3, {0x1, 0x78, 0xd8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x156, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xffffffff, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb9, "b7a24beccfb3795c4dce3055f53fac372156ebc165df2d93f639ee5d051d39c128420b95de3e69b5023114a567dfd659bbe157fa8fa233d1313b69623b1ccb2913f7e7de6e765ca35710587975ccb7d08c3db6947673a6946e0acfa17ac3a3abb46bc7cbca24255202d10b1902473ef6e13af38bf8755e9c7611b14dc18dafcc9d096d8a953c8fc5678df135c24411fad411d111d09eac7e1ca12a448de3da2b170baf94b17a42e3856b5f8c57d71ec0d23e50c1f5b267af28"}, {0xdd, 0x3b, "8073c5ab8a7797ed21027d134512f343902894734bc6ee2d9af21c4f856b46254577bfc0c1acfa76a9700265588be55ef44049b44fc2eeffc5c6ef"}, {0xdd, 0x3e, "a8409144c60199ccd9d5db365e9057e518b613ad23f5c97a68f11301869838c826721107addb3e1f92581b37fcaa1dbabe3b31504cb1307c08912f5ef3c6"}, {0xdd, 0x6b, "52ad6ea429ac240c770bad6817139de70ea117cd2fd3eeb1325349a37aff25106fc4ec0cb774a54ae9fafb559d2e320f83cf47b8cf4a62dd284f650e954788f34f2fdaa96680e89f00ce18114a35b25c6fc2d81238f311ef42d0334931d405964d61b0f47b310742c27df9"}, {0xdd, 0xf5, "add11ce2da05af539c7153719cd5d61970a5cc23915106d208f6f83da6abcd371711b194698caa7b6a1ff14cad0953ebced2fa50a2be783ec7b81d1a71759f6e061d2313ddf8776248f7fbfaa775f6e1a2f2902b1261369595755116ed32b7c5773120e4469972c5a7ec47bbffc3ef2134c0ad6d02149aceab62a870994e3d222144c04333619225731c2dfd58e06884cdc627f579024513ea5b87488ec5dbb76ea00313a4d08769054e037c0975924932b042beb98985d11fda81e6cca6f0492f7a06ae70232e0d5f66b0c8278f4bd71c9015a00908e01256f8bb66b81b10c75c2e5b2f05336447d8e32ea201ea43869e15978b8e"}]}}, @NL80211_ATTR_IE={0x41, 0x2a, [@supported_rates={0x1, 0x4, [{0x12}, {0x36}, {0x3}, {0x30}]}, @random={0x4, 0x2d, "3240c593ee6e9c4222dee965d33f44362ab3e9f5b42ddb7271e0dd04943f629d928a10d888bbc6ef9141994baa"}, @cf={0x4, 0x6, {0x2, 0x0, 0x0, 0xc8ad}}]}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x5e, 0x115, "ae3147d9a5695443da2a3ada9acc7761e9c4f0e1af53ff3910ee826c65dfb96fa18b0d5c4b624ea0b882e8c4d2ad059558c266edba395c1be7271a5a7f62be8aaedbc9d32fe089534feedb0a18fde06dacb7af59bdd514e20d44"}]]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2d0, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1f4, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8a, 0x2, "98fe01d6a4a1dc9fbc40dd4b9527a166a77438e0ad06aecca3ba165853c955fb8967bc78f2b4b399e85a095dec9c20557e7a265c5791ae3316fbffbc594d16632512c521b8cfaea55feb964e9b3067c8927d43f4a085aa018d73b8a848e4ea783e0dfad43c70fce8b41676c2d81dc5d1632384ce8b69b7308c03d9130aaa579ce8560e90f079"}}, {0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7f, 0x1, "a77a6d99560d2b372e3653c72811a14b3c6304390d4c805b9521c147dbd045f593a69f7340e31288e1b45eaa723d8838255426df95efb8798420d700657c4a54fed1181fbc3a37135a397fab7a5419bbb433a51944839b5281b87ecd7b4bab823c0911f9bd6b1639d8551e58577de983e9f75c84983be92c86781b"}}, {0xdc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd5, 0x1, "8663cfcce3410333d91819a9fc0871b75614b63badf4ccacbb3d98b043579d3c3615bac521e9eaebab5aa149938e6c3c48c831ef7ab8709458252c773a92d3eec51ce8941a5166b20efd04979ce700d8b8397ee3868b2aa10b78c12dd415ba73c978eb560386b08e9bc399e6501c94a71bca8928c71d5d7bc2265d56031a85ea5884366316444d182dcb0735030676ed9cc6a44fe4a759a30881b083ca83f3d8ae9e69ab5ba6912b266deb05f828cd8ac7378960060cacc57164877de2008817ee8c844334c01e41d0562e34d9df3189bc"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x98, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3f, 0x2, "683f7daa8e01cde7900af873a10477c53e9dbdb77e11982f98cac21ff3404aad04c0724f65323a52a1f58394aca7c9671c241f4bfa492a9e81db31"}}, {0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3f, 0x2, "189fb5ae93ab4cde5810a63c6a6b9d9fb47c6eb655ea331cab77f0b2103894aa9267f988515b2fb148369e6a3f111fe085bee74b8641a183f4d5cd"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x43f}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4080}, 0x40d0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002dbd7000fedbdf250b0000000c009900030000000b0000000800370001000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x48004) 00:37:14 executing program 3: socketpair(0x2, 0x3, 0x1, &(0x7f0000000300)) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xf00}}}}}, 0x28}}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x48004) 00:37:14 executing program 3: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x4730}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000070bd59358db6ea677746cc77252c65700c96a55d36a58f75fbf4cffb8705a70d1512a6e24064c8523d9f5332806b695b20f43f199919fcd38b9de0ae5979596881bf8c10ae5a89e442db52878ded0a3a840d104fb3cd611ceeef4b0300000200000000000000", @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:14 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)={0x106c, r4, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "d88747816e462322ccbd55e207b3be8da189af9ceeb46bb1293c9d1a657c52a7378a1c4f6fca279b3d95497e1de02f899c45948b20a0fee8c5627d9ac23d64cf969cac5600a9adbe86d48e635e158aa72fd98e04b104a35b41938f33c6f035db9da8f42e7071580bcb17beb1ac0a1a0e6233dcc9548e08ca62e09b72b0c876f43cfa944053ee5dc08c8511145478084920444e6e28483c681c81777dd1068bb9319cf375b057753e018877535003a5c28bbc4d2d29b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "c85902a40c05f73208f96c7aad1b403e7c4b474100749ed810ffb8169d2983d8fdc2c865a059b7d74a85a8e62d71be3eeb23679d3dcba502aa37d60290d1d5dc2535154e3b37d4bbcd93477e5b7df7699bfd08141f83e2ed129a6d900dd1b57daf927bf6170290bb48b426cf39a71e9ea27c6bde2c7bbfdd6eb19b7eca726e28b0a69ce86edae20b60baf9df9109829f032c959080f54aac9e51307481c23ccee008a48b75166998fc24a6a7d307d22cf17e6e4774cd41"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "781c7f23fb6f4d48b4d4d14de93aaf93c9fcc092fbc3bf1fda7b7072c6c9af13e6d22de29091a8fecfd7f9ba07a14c0f58ebe21b71bb0728e7f1dea9cc02ec2eb399afe8fa960cbb130ea85cdbfc1f382334e0d7a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "7c11b0b2c66e85b3fc691e7aeffa8d8e4e1beec175de5d987af4635ab923eeedd41e92c690d0198ea7dc46ec34356099562691c337bfe1152c1bcf7f35ea833fcfe7631227af70e3530a669db0c3ca3ad02a4ba8ace5d1ef9aa10883418b5d0e57adbb83d36dead7de86a5393750a020b6a2383e84d8824ed24a5d65f30c77b1a6f979e26d17c776b9f3c174fc32d6a544829f96451524b2584c67d6d0e4712237a94326a6d1911db08a192ca22e9ff7395f52850c93dc40f5724cd100121163befdf7ca5a5ccc317b191f855084a2493042"}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "e3e09f8cb2d3514c59b01c16624f02d8cd04ed6445ba0308f83f98dd633764a55effd396e5a94d9c1bbb2097df26314c7ac6597f27f519f9d20abcf4db44a5879671710a5f55a6a8f211d2d348d26aa15b419b423dd8c354514d1e46b75cc5dfa52a051761af2835cf3cb6131e2588492c502bc2bb1b2fa5129c4e49f352c27d3bda47a33793f3b049059ca93a1f4aefb0b3499bfa7b1559c19f12ed81155da8ca09267c46ecb88679bcad3d1c6592dbc07003e14ca4018e01f0f9b58953605282cee75454d7fd95ad47a5e0fb0d72370f77020fc5b315225321916e8c612597f6149cc8a7e0fc3bf3e675e7a0af6c2c630a94b067ea93874b4fa678d0cd4a940713c1702939e7f8acd6eb25d0aea40636eab2cc7d314198c027f1db07f2b49b2e46206c8841295050ad14692b4c72143828fb9328e06d0dbcf6379109a6f0e16060988661b786c2f7a2e1b6afe2e6f297ef5c5426d011aed0da02b07d15d457d00fda4a2a386ecf10655bc6a39259e417c95ee5ef0a8fe9c127c8efe7aa13c9919723a8d36bcdf513984f4ab212cdb277c86995be2655688fa79d179e9d7a03139fa11eb98c41a529da2eb9c9c80292de2aa37ca3d7aff0465bd2da59ebe5c7c644afd2c8b0b6293e72d44dbfeff011154c09b87f9f80a97a7e3740820490b4c26c865abc8037e98f3ef86ff5319b5de89735536adf1e801475354732fd155f38dabb3baae1cc009e12c65f6c914146c6ddb805f3c8cf2d0dd0884471388474eaa70de976c158e86a5145a265201e57c9cd3d5accdbc635e32ced09db771d72264a8bba911fabc7698828b2ab292c416502a9c9c9ceef464384766bb40d45c9d2367c0f27771d6a5fedf1640080eda25bbe7320052e40670fa843befe0737b7e3eb5f438f3ca6aaa5e2bfa81619f68e90eb164a9eed65a000d08c2a8f58996423e8d3c8eb65cf4879617ae6e9083fd545aee1def67de193f24821e5168fa7a8bce342042ccc0d7f2cfc6ef000e1351118f1066bedf855c9c58cbbc7a0826c2ceb5cef404c7250c9ae1727715fccf341670c08"}, @NL80211_ATTR_BEACON_HEAD={0x2d5, 0xe, {@wo_ht={{}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x5}}, 0x6, @random=0x9, 0xa4a, @void, @void, @val={0x3, 0x1, 0x13}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x21}}, @void, [{0xdd, 0x77, "e5b890098bb753ef13acf30f9d0c3d938c9f1a800e84b895d5ae40c5e5873ea3def9101e66b1ac5d9ad9fbacf33388e19932ff72477352d47572ea026ab603a0e8a1aca1baffc459492a3051a1478ccda7dc5b39f6a5d47125450adc706e8ac23c84110c2c659cd1ddd46da6731b7f9dcdfd23c16e78bb"}, {0xdd, 0xfb, "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"}, {0xdd, 0x19, "4e52871e2ac400ee30b9eada930c039f455a75f0a8f8bad28b"}, {0xdd, 0xea, "0b11bfede481bbd291e5358aa960feb65f3e364fc7dac4edc10f15b1af9c87cb6cf4ec0c8e89228bff66955ccef2a269cad2cc8094fac3570d38c694054a38f954a32db9e8e280acab187de82006372a598354b71906372630ec086ae892642336895c76999dd0c0284cda11a426d909c1b7db27d70cd153e32ed72e5e9436afcefe868ce0a5b95ab915e0f8a9a1bc64041d733a2f163494b99bb299394ee02bfbc4b76c77c0af116a67f33f90c41e48aec754ffdd979620e82c2dcf83030969ca0035bd2fa1b66f0bbf77ee9697583b7871e936d6e4968af0e0e29805bef9279cfa6b26f281dcc45a6b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x31b, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="79bee68177e3", {0xe, 0x7f}}, 0x6, @default, 0x80e2, @void, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xe7, {0x97, 0x22, 0x1f, "b13e59928ebbe596ff5273de58c3c6a62731d21edb7a5742bc116d2e07fe3c6d5ad11c7d89c4844dd44b2e776f53c6859980b45d91ab913d0806c45353692b1f101dc5e3426baca53edcb163aadaba4a74da2c1e5bcd00164a774000a3180d326584e1f699c405b32dcdf52c9fad7160849aea70f586224415d762278907640c42209ceb983b4bbd741685882674e5d4459d0da10f9d095b2ceeaf6a363230f06b2995310d912ff19d4c22d4288565a3dceb5a9435ea396d963979e71135b7a77bb0f96588ee924136e919e4d0e0a75a5e8c06d6d889bf070d1195e3ca7bf12fecd78283"}}, @val={0x25, 0x3, {0x1, 0x78, 0xd8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x156, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xffffffff, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb9, "b7a24beccfb3795c4dce3055f53fac372156ebc165df2d93f639ee5d051d39c128420b95de3e69b5023114a567dfd659bbe157fa8fa233d1313b69623b1ccb2913f7e7de6e765ca35710587975ccb7d08c3db6947673a6946e0acfa17ac3a3abb46bc7cbca24255202d10b1902473ef6e13af38bf8755e9c7611b14dc18dafcc9d096d8a953c8fc5678df135c24411fad411d111d09eac7e1ca12a448de3da2b170baf94b17a42e3856b5f8c57d71ec0d23e50c1f5b267af28"}, {0xdd, 0x3b, "8073c5ab8a7797ed21027d134512f343902894734bc6ee2d9af21c4f856b46254577bfc0c1acfa76a9700265588be55ef44049b44fc2eeffc5c6ef"}, {0xdd, 0x3e, "a8409144c60199ccd9d5db365e9057e518b613ad23f5c97a68f11301869838c826721107addb3e1f92581b37fcaa1dbabe3b31504cb1307c08912f5ef3c6"}, {0xdd, 0x6b, "52ad6ea429ac240c770bad6817139de70ea117cd2fd3eeb1325349a37aff25106fc4ec0cb774a54ae9fafb559d2e320f83cf47b8cf4a62dd284f650e954788f34f2fdaa96680e89f00ce18114a35b25c6fc2d81238f311ef42d0334931d405964d61b0f47b310742c27df9"}, {0xdd, 0xf5, "add11ce2da05af539c7153719cd5d61970a5cc23915106d208f6f83da6abcd371711b194698caa7b6a1ff14cad0953ebced2fa50a2be783ec7b81d1a71759f6e061d2313ddf8776248f7fbfaa775f6e1a2f2902b1261369595755116ed32b7c5773120e4469972c5a7ec47bbffc3ef2134c0ad6d02149aceab62a870994e3d222144c04333619225731c2dfd58e06884cdc627f579024513ea5b87488ec5dbb76ea00313a4d08769054e037c0975924932b042beb98985d11fda81e6cca6f0492f7a06ae70232e0d5f66b0c8278f4bd71c9015a00908e01256f8bb66b81b10c75c2e5b2f05336447d8e32ea201ea43869e15978b8e"}]}}, @NL80211_ATTR_IE={0x41, 0x2a, [@supported_rates={0x1, 0x4, [{0x12}, {0x36}, {0x3}, {0x30}]}, @random={0x4, 0x2d, "3240c593ee6e9c4222dee965d33f44362ab3e9f5b42ddb7271e0dd04943f629d928a10d888bbc6ef9141994baa"}, @cf={0x4, 0x6, {0x2, 0x0, 0x0, 0xc8ad}}]}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x5e, 0x115, "ae3147d9a5695443da2a3ada9acc7761e9c4f0e1af53ff3910ee826c65dfb96fa18b0d5c4b624ea0b882e8c4d2ad059558c266edba395c1be7271a5a7f62be8aaedbc9d32fe089534feedb0a18fde06dacb7af59bdd514e20d44"}]]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2d0, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1f4, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8a, 0x2, "98fe01d6a4a1dc9fbc40dd4b9527a166a77438e0ad06aecca3ba165853c955fb8967bc78f2b4b399e85a095dec9c20557e7a265c5791ae3316fbffbc594d16632512c521b8cfaea55feb964e9b3067c8927d43f4a085aa018d73b8a848e4ea783e0dfad43c70fce8b41676c2d81dc5d1632384ce8b69b7308c03d9130aaa579ce8560e90f079"}}, {0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7f, 0x1, "a77a6d99560d2b372e3653c72811a14b3c6304390d4c805b9521c147dbd045f593a69f7340e31288e1b45eaa723d8838255426df95efb8798420d700657c4a54fed1181fbc3a37135a397fab7a5419bbb433a51944839b5281b87ecd7b4bab823c0911f9bd6b1639d8551e58577de983e9f75c84983be92c86781b"}}, {0xdc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd5, 0x1, "8663cfcce3410333d91819a9fc0871b75614b63badf4ccacbb3d98b043579d3c3615bac521e9eaebab5aa149938e6c3c48c831ef7ab8709458252c773a92d3eec51ce8941a5166b20efd04979ce700d8b8397ee3868b2aa10b78c12dd415ba73c978eb560386b08e9bc399e6501c94a71bca8928c71d5d7bc2265d56031a85ea5884366316444d182dcb0735030676ed9cc6a44fe4a759a30881b083ca83f3d8ae9e69ab5ba6912b266deb05f828cd8ac7378960060cacc57164877de2008817ee8c844334c01e41d0562e34d9df3189bc"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x98, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3f, 0x2, "683f7daa8e01cde7900af873a10477c53e9dbdb77e11982f98cac21ff3404aad04c0724f65323a52a1f58394aca7c9671c241f4bfa492a9e81db31"}}, {0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3f, 0x2, "189fb5ae93ab4cde5810a63c6a6b9d9fb47c6eb655ea331cab77f0b2103894aa9267f988515b2fb148369e6a3f111fe085bee74b8641a183f4d5cd"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x43f}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4080}, 0x40d0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002dbd7000fedbdf250b0000000c009900030000000b0000000800370001000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x28}}}}}, 0x28}}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000070bd59358db6ea677746cc77252c65700c96a55d36a58f75fbf4cffb8705a70d1512a6e24064c8523d9f5332806b695b20f43f199919fcd38b9de0ae5979596881bf8c10ae5a89e442db52878ded0a3a840d104fb3cd611ceeef4b0300000200000000000000", @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:14 executing program 3: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000070bd59358db6ea677746cc77252c65700c96a55d36a58f75fbf4cffb8705a70d1512a6e24064c8523d9f5332806b695b20f43f199919fcd38b9de0ae5979596881bf8c10ae5a89e442db52878ded0a3a840d104fb3cd611ceeef4b0300000200000000000000", @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x3c000000}}}}}, 0x28}}, 0x0) 00:37:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x33fe0}}, 0x0) 00:37:14 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)={0x106c, r4, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "d88747816e462322ccbd55e207b3be8da189af9ceeb46bb1293c9d1a657c52a7378a1c4f6fca279b3d95497e1de02f899c45948b20a0fee8c5627d9ac23d64cf969cac5600a9adbe86d48e635e158aa72fd98e04b104a35b41938f33c6f035db9da8f42e7071580bcb17beb1ac0a1a0e6233dcc9548e08ca62e09b72b0c876f43cfa944053ee5dc08c8511145478084920444e6e28483c681c81777dd1068bb9319cf375b057753e018877535003a5c28bbc4d2d29b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "c85902a40c05f73208f96c7aad1b403e7c4b474100749ed810ffb8169d2983d8fdc2c865a059b7d74a85a8e62d71be3eeb23679d3dcba502aa37d60290d1d5dc2535154e3b37d4bbcd93477e5b7df7699bfd08141f83e2ed129a6d900dd1b57daf927bf6170290bb48b426cf39a71e9ea27c6bde2c7bbfdd6eb19b7eca726e28b0a69ce86edae20b60baf9df9109829f032c959080f54aac9e51307481c23ccee008a48b75166998fc24a6a7d307d22cf17e6e4774cd41"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "781c7f23fb6f4d48b4d4d14de93aaf93c9fcc092fbc3bf1fda7b7072c6c9af13e6d22de29091a8fecfd7f9ba07a14c0f58ebe21b71bb0728e7f1dea9cc02ec2eb399afe8fa960cbb130ea85cdbfc1f382334e0d7a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "7c11b0b2c66e85b3fc691e7aeffa8d8e4e1beec175de5d987af4635ab923eeedd41e92c690d0198ea7dc46ec34356099562691c337bfe1152c1bcf7f35ea833fcfe7631227af70e3530a669db0c3ca3ad02a4ba8ace5d1ef9aa10883418b5d0e57adbb83d36dead7de86a5393750a020b6a2383e84d8824ed24a5d65f30c77b1a6f979e26d17c776b9f3c174fc32d6a544829f96451524b2584c67d6d0e4712237a94326a6d1911db08a192ca22e9ff7395f52850c93dc40f5724cd100121163befdf7ca5a5ccc317b191f855084a2493042"}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x2d5, 0xe, {@wo_ht={{}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x5}}, 0x6, @random=0x9, 0xa4a, @void, @void, @val={0x3, 0x1, 0x13}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x21}}, @void, [{0xdd, 0x77, "e5b890098bb753ef13acf30f9d0c3d938c9f1a800e84b895d5ae40c5e5873ea3def9101e66b1ac5d9ad9fbacf33388e19932ff72477352d47572ea026ab603a0e8a1aca1baffc459492a3051a1478ccda7dc5b39f6a5d47125450adc706e8ac23c84110c2c659cd1ddd46da6731b7f9dcdfd23c16e78bb"}, {0xdd, 0xfb, "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"}, {0xdd, 0x19, "4e52871e2ac400ee30b9eada930c039f455a75f0a8f8bad28b"}, {0xdd, 0xea, "0b11bfede481bbd291e5358aa960feb65f3e364fc7dac4edc10f15b1af9c87cb6cf4ec0c8e89228bff66955ccef2a269cad2cc8094fac3570d38c694054a38f954a32db9e8e280acab187de82006372a598354b71906372630ec086ae892642336895c76999dd0c0284cda11a426d909c1b7db27d70cd153e32ed72e5e9436afcefe868ce0a5b95ab915e0f8a9a1bc64041d733a2f163494b99bb299394ee02bfbc4b76c77c0af116a67f33f90c41e48aec754ffdd979620e82c2dcf83030969ca0035bd2fa1b66f0bbf77ee9697583b7871e936d6e4968af0e0e29805bef9279cfa6b26f281dcc45a6b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x31b, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="79bee68177e3", {0xe, 0x7f}}, 0x6, @default, 0x80e2, @void, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xe7, {0x97, 0x22, 0x1f, "b13e59928ebbe596ff5273de58c3c6a62731d21edb7a5742bc116d2e07fe3c6d5ad11c7d89c4844dd44b2e776f53c6859980b45d91ab913d0806c45353692b1f101dc5e3426baca53edcb163aadaba4a74da2c1e5bcd00164a774000a3180d326584e1f699c405b32dcdf52c9fad7160849aea70f586224415d762278907640c42209ceb983b4bbd741685882674e5d4459d0da10f9d095b2ceeaf6a363230f06b2995310d912ff19d4c22d4288565a3dceb5a9435ea396d963979e71135b7a77bb0f96588ee924136e919e4d0e0a75a5e8c06d6d889bf070d1195e3ca7bf12fecd78283"}}, @val={0x25, 0x3, {0x1, 0x78, 0xd8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x156, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xffffffff, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb9, "b7a24beccfb3795c4dce3055f53fac372156ebc165df2d93f639ee5d051d39c128420b95de3e69b5023114a567dfd659bbe157fa8fa233d1313b69623b1ccb2913f7e7de6e765ca35710587975ccb7d08c3db6947673a6946e0acfa17ac3a3abb46bc7cbca24255202d10b1902473ef6e13af38bf8755e9c7611b14dc18dafcc9d096d8a953c8fc5678df135c24411fad411d111d09eac7e1ca12a448de3da2b170baf94b17a42e3856b5f8c57d71ec0d23e50c1f5b267af28"}, {0xdd, 0x3b, "8073c5ab8a7797ed21027d134512f343902894734bc6ee2d9af21c4f856b46254577bfc0c1acfa76a9700265588be55ef44049b44fc2eeffc5c6ef"}, {0xdd, 0x3e, "a8409144c60199ccd9d5db365e9057e518b613ad23f5c97a68f11301869838c826721107addb3e1f92581b37fcaa1dbabe3b31504cb1307c08912f5ef3c6"}, {0xdd, 0x6b, "52ad6ea429ac240c770bad6817139de70ea117cd2fd3eeb1325349a37aff25106fc4ec0cb774a54ae9fafb559d2e320f83cf47b8cf4a62dd284f650e954788f34f2fdaa96680e89f00ce18114a35b25c6fc2d81238f311ef42d0334931d405964d61b0f47b310742c27df9"}, {0xdd, 0xf5, "add11ce2da05af539c7153719cd5d61970a5cc23915106d208f6f83da6abcd371711b194698caa7b6a1ff14cad0953ebced2fa50a2be783ec7b81d1a71759f6e061d2313ddf8776248f7fbfaa775f6e1a2f2902b1261369595755116ed32b7c5773120e4469972c5a7ec47bbffc3ef2134c0ad6d02149aceab62a870994e3d222144c04333619225731c2dfd58e06884cdc627f579024513ea5b87488ec5dbb76ea00313a4d08769054e037c0975924932b042beb98985d11fda81e6cca6f0492f7a06ae70232e0d5f66b0c8278f4bd71c9015a00908e01256f8bb66b81b10c75c2e5b2f05336447d8e32ea201ea43869e15978b8e"}]}}, @NL80211_ATTR_IE={0x41, 0x2a, [@supported_rates={0x1, 0x4, [{0x12}, {0x36}, {0x3}, {0x30}]}, @random={0x4, 0x2d, "3240c593ee6e9c4222dee965d33f44362ab3e9f5b42ddb7271e0dd04943f629d928a10d888bbc6ef9141994baa"}, @cf={0x4, 0x6, {0x2, 0x0, 0x0, 0xc8ad}}]}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x5e, 0x115, "ae3147d9a5695443da2a3ada9acc7761e9c4f0e1af53ff3910ee826c65dfb96fa18b0d5c4b624ea0b882e8c4d2ad059558c266edba395c1be7271a5a7f62be8aaedbc9d32fe089534feedb0a18fde06dacb7af59bdd514e20d44"}]]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2d0, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1f4, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8a, 0x2, "98fe01d6a4a1dc9fbc40dd4b9527a166a77438e0ad06aecca3ba165853c955fb8967bc78f2b4b399e85a095dec9c20557e7a265c5791ae3316fbffbc594d16632512c521b8cfaea55feb964e9b3067c8927d43f4a085aa018d73b8a848e4ea783e0dfad43c70fce8b41676c2d81dc5d1632384ce8b69b7308c03d9130aaa579ce8560e90f079"}}, {0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7f, 0x1, "a77a6d99560d2b372e3653c72811a14b3c6304390d4c805b9521c147dbd045f593a69f7340e31288e1b45eaa723d8838255426df95efb8798420d700657c4a54fed1181fbc3a37135a397fab7a5419bbb433a51944839b5281b87ecd7b4bab823c0911f9bd6b1639d8551e58577de983e9f75c84983be92c86781b"}}, {0xdc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd5, 0x1, "8663cfcce3410333d91819a9fc0871b75614b63badf4ccacbb3d98b043579d3c3615bac521e9eaebab5aa149938e6c3c48c831ef7ab8709458252c773a92d3eec51ce8941a5166b20efd04979ce700d8b8397ee3868b2aa10b78c12dd415ba73c978eb560386b08e9bc399e6501c94a71bca8928c71d5d7bc2265d56031a85ea5884366316444d182dcb0735030676ed9cc6a44fe4a759a30881b083ca83f3d8ae9e69ab5ba6912b266deb05f828cd8ac7378960060cacc57164877de2008817ee8c844334c01e41d0562e34d9df3189bc"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x98, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3f, 0x2, "683f7daa8e01cde7900af873a10477c53e9dbdb77e11982f98cac21ff3404aad04c0724f65323a52a1f58394aca7c9671c241f4bfa492a9e81db31"}}, {0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3f, 0x2, "189fb5ae93ab4cde5810a63c6a6b9d9fb47c6eb655ea331cab77f0b2103894aa9267f988515b2fb148369e6a3f111fe085bee74b8641a183f4d5cd"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x43f}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4080}, 0x40d0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002dbd7000fedbdf250b0000000c009900030000000b0000000800370001000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 00:37:14 executing program 3: socketpair(0x2, 0x0, 0x1, &(0x7f0000000300)) 00:37:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x18440000}}}}}, 0x28}}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000180)) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)={0x106c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "d88747816e462322ccbd55e207b3be8da189af9ceeb46bb1293c9d1a657c52a7378a1c4f6fca279b3d95497e1de02f899c45948b20a0fee8c5627d9ac23d64cf969cac5600a9adbe86d48e635e158aa72fd98e04b104a35b41938f33c6f035db9da8f42e7071580bcb17beb1ac0a1a0e6233dcc9548e08ca62e09b72b0c876f43cfa944053ee5dc08c8511145478084920444e6e28483c681c81777dd1068bb9319cf375b057753e018877535003a5c28bbc4d2d29b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "c85902a40c05f73208f96c7aad1b403e7c4b474100749ed810ffb8169d2983d8fdc2c865a059b7d74a85a8e62d71be3eeb23679d3dcba502aa37d60290d1d5dc2535154e3b37d4bbcd93477e5b7df7699bfd08141f83e2ed129a6d900dd1b57daf927bf6170290bb48b426cf39a71e9ea27c6bde2c7bbfdd6eb19b7eca726e28b0a69ce86edae20b60baf9df9109829f032c959080f54aac9e51307481c23ccee008a48b75166998fc24a6a7d307d22cf17e6e4774cd41"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "781c7f23fb6f4d48b4d4d14de93aaf93c9fcc092fbc3bf1fda7b7072c6c9af13e6d22de29091a8fecfd7f9ba07a14c0f58ebe21b71bb0728e7f1dea9cc02ec2eb399afe8fa960cbb130ea85cdbfc1f382334e0d7a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "7c11b0b2c66e85b3fc691e7aeffa8d8e4e1beec175de5d987af4635ab923eeedd41e92c690d0198ea7dc46ec34356099562691c337bfe1152c1bcf7f35ea833fcfe7631227af70e3530a669db0c3ca3ad02a4ba8ace5d1ef9aa10883418b5d0e57adbb83d36dead7de86a5393750a020b6a2383e84d8824ed24a5d65f30c77b1a6f979e26d17c776b9f3c174fc32d6a544829f96451524b2584c67d6d0e4712237a94326a6d1911db08a192ca22e9ff7395f52850c93dc40f5724cd100121163befdf7ca5a5ccc317b191f855084a2493042"}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x2d5, 0xe, {@wo_ht={{}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x5}}, 0x6, @random=0x9, 0xa4a, @void, @void, @val={0x3, 0x1, 0x13}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x21}}, @void, [{0xdd, 0x77, "e5b890098bb753ef13acf30f9d0c3d938c9f1a800e84b895d5ae40c5e5873ea3def9101e66b1ac5d9ad9fbacf33388e19932ff72477352d47572ea026ab603a0e8a1aca1baffc459492a3051a1478ccda7dc5b39f6a5d47125450adc706e8ac23c84110c2c659cd1ddd46da6731b7f9dcdfd23c16e78bb"}, {0xdd, 0xfb, "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"}, {0xdd, 0x19, "4e52871e2ac400ee30b9eada930c039f455a75f0a8f8bad28b"}, {0xdd, 0xea, "0b11bfede481bbd291e5358aa960feb65f3e364fc7dac4edc10f15b1af9c87cb6cf4ec0c8e89228bff66955ccef2a269cad2cc8094fac3570d38c694054a38f954a32db9e8e280acab187de82006372a598354b71906372630ec086ae892642336895c76999dd0c0284cda11a426d909c1b7db27d70cd153e32ed72e5e9436afcefe868ce0a5b95ab915e0f8a9a1bc64041d733a2f163494b99bb299394ee02bfbc4b76c77c0af116a67f33f90c41e48aec754ffdd979620e82c2dcf83030969ca0035bd2fa1b66f0bbf77ee9697583b7871e936d6e4968af0e0e29805bef9279cfa6b26f281dcc45a6b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x31b, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="79bee68177e3", {0xe, 0x7f}}, 0x6, @default, 0x80e2, @void, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xe7, {0x97, 0x22, 0x1f, "b13e59928ebbe596ff5273de58c3c6a62731d21edb7a5742bc116d2e07fe3c6d5ad11c7d89c4844dd44b2e776f53c6859980b45d91ab913d0806c45353692b1f101dc5e3426baca53edcb163aadaba4a74da2c1e5bcd00164a774000a3180d326584e1f699c405b32dcdf52c9fad7160849aea70f586224415d762278907640c42209ceb983b4bbd741685882674e5d4459d0da10f9d095b2ceeaf6a363230f06b2995310d912ff19d4c22d4288565a3dceb5a9435ea396d963979e71135b7a77bb0f96588ee924136e919e4d0e0a75a5e8c06d6d889bf070d1195e3ca7bf12fecd78283"}}, @val={0x25, 0x3, {0x1, 0x78, 0xd8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x156, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xffffffff, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb9, "b7a24beccfb3795c4dce3055f53fac372156ebc165df2d93f639ee5d051d39c128420b95de3e69b5023114a567dfd659bbe157fa8fa233d1313b69623b1ccb2913f7e7de6e765ca35710587975ccb7d08c3db6947673a6946e0acfa17ac3a3abb46bc7cbca24255202d10b1902473ef6e13af38bf8755e9c7611b14dc18dafcc9d096d8a953c8fc5678df135c24411fad411d111d09eac7e1ca12a448de3da2b170baf94b17a42e3856b5f8c57d71ec0d23e50c1f5b267af28"}, {0xdd, 0x3b, "8073c5ab8a7797ed21027d134512f343902894734bc6ee2d9af21c4f856b46254577bfc0c1acfa76a9700265588be55ef44049b44fc2eeffc5c6ef"}, {0xdd, 0x3e, "a8409144c60199ccd9d5db365e9057e518b613ad23f5c97a68f11301869838c826721107addb3e1f92581b37fcaa1dbabe3b31504cb1307c08912f5ef3c6"}, {0xdd, 0x6b, "52ad6ea429ac240c770bad6817139de70ea117cd2fd3eeb1325349a37aff25106fc4ec0cb774a54ae9fafb559d2e320f83cf47b8cf4a62dd284f650e954788f34f2fdaa96680e89f00ce18114a35b25c6fc2d81238f311ef42d0334931d405964d61b0f47b310742c27df9"}, {0xdd, 0xf5, "add11ce2da05af539c7153719cd5d61970a5cc23915106d208f6f83da6abcd371711b194698caa7b6a1ff14cad0953ebced2fa50a2be783ec7b81d1a71759f6e061d2313ddf8776248f7fbfaa775f6e1a2f2902b1261369595755116ed32b7c5773120e4469972c5a7ec47bbffc3ef2134c0ad6d02149aceab62a870994e3d222144c04333619225731c2dfd58e06884cdc627f579024513ea5b87488ec5dbb76ea00313a4d08769054e037c0975924932b042beb98985d11fda81e6cca6f0492f7a06ae70232e0d5f66b0c8278f4bd71c9015a00908e01256f8bb66b81b10c75c2e5b2f05336447d8e32ea201ea43869e15978b8e"}]}}, @NL80211_ATTR_IE={0x41, 0x2a, [@supported_rates={0x1, 0x4, [{0x12}, {0x36}, {0x3}, {0x30}]}, @random={0x4, 0x2d, "3240c593ee6e9c4222dee965d33f44362ab3e9f5b42ddb7271e0dd04943f629d928a10d888bbc6ef9141994baa"}, @cf={0x4, 0x6, {0x2, 0x0, 0x0, 0xc8ad}}]}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x5e, 0x115, "ae3147d9a5695443da2a3ada9acc7761e9c4f0e1af53ff3910ee826c65dfb96fa18b0d5c4b624ea0b882e8c4d2ad059558c266edba395c1be7271a5a7f62be8aaedbc9d32fe089534feedb0a18fde06dacb7af59bdd514e20d44"}]]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2d0, r4, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1f4, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8a, 0x2, "98fe01d6a4a1dc9fbc40dd4b9527a166a77438e0ad06aecca3ba165853c955fb8967bc78f2b4b399e85a095dec9c20557e7a265c5791ae3316fbffbc594d16632512c521b8cfaea55feb964e9b3067c8927d43f4a085aa018d73b8a848e4ea783e0dfad43c70fce8b41676c2d81dc5d1632384ce8b69b7308c03d9130aaa579ce8560e90f079"}}, {0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7f, 0x1, "a77a6d99560d2b372e3653c72811a14b3c6304390d4c805b9521c147dbd045f593a69f7340e31288e1b45eaa723d8838255426df95efb8798420d700657c4a54fed1181fbc3a37135a397fab7a5419bbb433a51944839b5281b87ecd7b4bab823c0911f9bd6b1639d8551e58577de983e9f75c84983be92c86781b"}}, {0xdc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd5, 0x1, "8663cfcce3410333d91819a9fc0871b75614b63badf4ccacbb3d98b043579d3c3615bac521e9eaebab5aa149938e6c3c48c831ef7ab8709458252c773a92d3eec51ce8941a5166b20efd04979ce700d8b8397ee3868b2aa10b78c12dd415ba73c978eb560386b08e9bc399e6501c94a71bca8928c71d5d7bc2265d56031a85ea5884366316444d182dcb0735030676ed9cc6a44fe4a759a30881b083ca83f3d8ae9e69ab5ba6912b266deb05f828cd8ac7378960060cacc57164877de2008817ee8c844334c01e41d0562e34d9df3189bc"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x98, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3f, 0x2, "683f7daa8e01cde7900af873a10477c53e9dbdb77e11982f98cac21ff3404aad04c0724f65323a52a1f58394aca7c9671c241f4bfa492a9e81db31"}}, {0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3f, 0x2, "189fb5ae93ab4cde5810a63c6a6b9d9fb47c6eb655ea331cab77f0b2103894aa9267f988515b2fb148369e6a3f111fe085bee74b8641a183f4d5cd"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x43f}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4080}, 0x40d0) 00:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x2000000}}}}}, 0x28}}, 0x0) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000180)) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:14 executing program 3: socketpair(0x2, 0x0, 0x1, &(0x7f0000000300)) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000000) 00:37:14 executing program 1: socketpair(0x2, 0x0, 0x1, &(0x7f0000000300)) 00:37:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000000) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000000) (async) 00:37:14 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)={0x106c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "d88747816e462322ccbd55e207b3be8da189af9ceeb46bb1293c9d1a657c52a7378a1c4f6fca279b3d95497e1de02f899c45948b20a0fee8c5627d9ac23d64cf969cac5600a9adbe86d48e635e158aa72fd98e04b104a35b41938f33c6f035db9da8f42e7071580bcb17beb1ac0a1a0e6233dcc9548e08ca62e09b72b0c876f43cfa944053ee5dc08c8511145478084920444e6e28483c681c81777dd1068bb9319cf375b057753e018877535003a5c28bbc4d2d29b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "c85902a40c05f73208f96c7aad1b403e7c4b474100749ed810ffb8169d2983d8fdc2c865a059b7d74a85a8e62d71be3eeb23679d3dcba502aa37d60290d1d5dc2535154e3b37d4bbcd93477e5b7df7699bfd08141f83e2ed129a6d900dd1b57daf927bf6170290bb48b426cf39a71e9ea27c6bde2c7bbfdd6eb19b7eca726e28b0a69ce86edae20b60baf9df9109829f032c959080f54aac9e51307481c23ccee008a48b75166998fc24a6a7d307d22cf17e6e4774cd41"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "781c7f23fb6f4d48b4d4d14de93aaf93c9fcc092fbc3bf1fda7b7072c6c9af13e6d22de29091a8fecfd7f9ba07a14c0f58ebe21b71bb0728e7f1dea9cc02ec2eb399afe8fa960cbb130ea85cdbfc1f382334e0d7a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "7c11b0b2c66e85b3fc691e7aeffa8d8e4e1beec175de5d987af4635ab923eeedd41e92c690d0198ea7dc46ec34356099562691c337bfe1152c1bcf7f35ea833fcfe7631227af70e3530a669db0c3ca3ad02a4ba8ace5d1ef9aa10883418b5d0e57adbb83d36dead7de86a5393750a020b6a2383e84d8824ed24a5d65f30c77b1a6f979e26d17c776b9f3c174fc32d6a544829f96451524b2584c67d6d0e4712237a94326a6d1911db08a192ca22e9ff7395f52850c93dc40f5724cd100121163befdf7ca5a5ccc317b191f855084a2493042"}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x2d5, 0xe, {@wo_ht={{}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x5}}, 0x6, @random=0x9, 0xa4a, @void, @void, @val={0x3, 0x1, 0x13}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x21}}, @void, [{0xdd, 0x77, "e5b890098bb753ef13acf30f9d0c3d938c9f1a800e84b895d5ae40c5e5873ea3def9101e66b1ac5d9ad9fbacf33388e19932ff72477352d47572ea026ab603a0e8a1aca1baffc459492a3051a1478ccda7dc5b39f6a5d47125450adc706e8ac23c84110c2c659cd1ddd46da6731b7f9dcdfd23c16e78bb"}, {0xdd, 0xfb, "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"}, {0xdd, 0x19, "4e52871e2ac400ee30b9eada930c039f455a75f0a8f8bad28b"}, {0xdd, 0xea, "0b11bfede481bbd291e5358aa960feb65f3e364fc7dac4edc10f15b1af9c87cb6cf4ec0c8e89228bff66955ccef2a269cad2cc8094fac3570d38c694054a38f954a32db9e8e280acab187de82006372a598354b71906372630ec086ae892642336895c76999dd0c0284cda11a426d909c1b7db27d70cd153e32ed72e5e9436afcefe868ce0a5b95ab915e0f8a9a1bc64041d733a2f163494b99bb299394ee02bfbc4b76c77c0af116a67f33f90c41e48aec754ffdd979620e82c2dcf83030969ca0035bd2fa1b66f0bbf77ee9697583b7871e936d6e4968af0e0e29805bef9279cfa6b26f281dcc45a6b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x31b, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="79bee68177e3", {0xe, 0x7f}}, 0x6, @default, 0x80e2, @void, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xe7, {0x97, 0x22, 0x1f, "b13e59928ebbe596ff5273de58c3c6a62731d21edb7a5742bc116d2e07fe3c6d5ad11c7d89c4844dd44b2e776f53c6859980b45d91ab913d0806c45353692b1f101dc5e3426baca53edcb163aadaba4a74da2c1e5bcd00164a774000a3180d326584e1f699c405b32dcdf52c9fad7160849aea70f586224415d762278907640c42209ceb983b4bbd741685882674e5d4459d0da10f9d095b2ceeaf6a363230f06b2995310d912ff19d4c22d4288565a3dceb5a9435ea396d963979e71135b7a77bb0f96588ee924136e919e4d0e0a75a5e8c06d6d889bf070d1195e3ca7bf12fecd78283"}}, @val={0x25, 0x3, {0x1, 0x78, 0xd8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x156, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xffffffff, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb9, "b7a24beccfb3795c4dce3055f53fac372156ebc165df2d93f639ee5d051d39c128420b95de3e69b5023114a567dfd659bbe157fa8fa233d1313b69623b1ccb2913f7e7de6e765ca35710587975ccb7d08c3db6947673a6946e0acfa17ac3a3abb46bc7cbca24255202d10b1902473ef6e13af38bf8755e9c7611b14dc18dafcc9d096d8a953c8fc5678df135c24411fad411d111d09eac7e1ca12a448de3da2b170baf94b17a42e3856b5f8c57d71ec0d23e50c1f5b267af28"}, {0xdd, 0x3b, "8073c5ab8a7797ed21027d134512f343902894734bc6ee2d9af21c4f856b46254577bfc0c1acfa76a9700265588be55ef44049b44fc2eeffc5c6ef"}, {0xdd, 0x3e, "a8409144c60199ccd9d5db365e9057e518b613ad23f5c97a68f11301869838c826721107addb3e1f92581b37fcaa1dbabe3b31504cb1307c08912f5ef3c6"}, {0xdd, 0x6b, "52ad6ea429ac240c770bad6817139de70ea117cd2fd3eeb1325349a37aff25106fc4ec0cb774a54ae9fafb559d2e320f83cf47b8cf4a62dd284f650e954788f34f2fdaa96680e89f00ce18114a35b25c6fc2d81238f311ef42d0334931d405964d61b0f47b310742c27df9"}, {0xdd, 0xf5, "add11ce2da05af539c7153719cd5d61970a5cc23915106d208f6f83da6abcd371711b194698caa7b6a1ff14cad0953ebced2fa50a2be783ec7b81d1a71759f6e061d2313ddf8776248f7fbfaa775f6e1a2f2902b1261369595755116ed32b7c5773120e4469972c5a7ec47bbffc3ef2134c0ad6d02149aceab62a870994e3d222144c04333619225731c2dfd58e06884cdc627f579024513ea5b87488ec5dbb76ea00313a4d08769054e037c0975924932b042beb98985d11fda81e6cca6f0492f7a06ae70232e0d5f66b0c8278f4bd71c9015a00908e01256f8bb66b81b10c75c2e5b2f05336447d8e32ea201ea43869e15978b8e"}]}}, @NL80211_ATTR_IE={0x41, 0x2a, [@supported_rates={0x1, 0x4, [{0x12}, {0x36}, {0x3}, {0x30}]}, @random={0x4, 0x2d, "3240c593ee6e9c4222dee965d33f44362ab3e9f5b42ddb7271e0dd04943f629d928a10d888bbc6ef9141994baa"}, @cf={0x4, 0x6, {0x2, 0x0, 0x0, 0xc8ad}}]}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x5e, 0x115, "ae3147d9a5695443da2a3ada9acc7761e9c4f0e1af53ff3910ee826c65dfb96fa18b0d5c4b624ea0b882e8c4d2ad059558c266edba395c1be7271a5a7f62be8aaedbc9d32fe089534feedb0a18fde06dacb7af59bdd514e20d44"}]]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 00:37:14 executing program 3: socketpair(0x2, 0x0, 0x1, &(0x7f0000000300)) 00:37:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x1000000}}}}}, 0x28}}, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) 00:37:15 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)={0x106c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "d88747816e462322ccbd55e207b3be8da189af9ceeb46bb1293c9d1a657c52a7378a1c4f6fca279b3d95497e1de02f899c45948b20a0fee8c5627d9ac23d64cf969cac5600a9adbe86d48e635e158aa72fd98e04b104a35b41938f33c6f035db9da8f42e7071580bcb17beb1ac0a1a0e6233dcc9548e08ca62e09b72b0c876f43cfa944053ee5dc08c8511145478084920444e6e28483c681c81777dd1068bb9319cf375b057753e018877535003a5c28bbc4d2d29b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "c85902a40c05f73208f96c7aad1b403e7c4b474100749ed810ffb8169d2983d8fdc2c865a059b7d74a85a8e62d71be3eeb23679d3dcba502aa37d60290d1d5dc2535154e3b37d4bbcd93477e5b7df7699bfd08141f83e2ed129a6d900dd1b57daf927bf6170290bb48b426cf39a71e9ea27c6bde2c7bbfdd6eb19b7eca726e28b0a69ce86edae20b60baf9df9109829f032c959080f54aac9e51307481c23ccee008a48b75166998fc24a6a7d307d22cf17e6e4774cd41"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "781c7f23fb6f4d48b4d4d14de93aaf93c9fcc092fbc3bf1fda7b7072c6c9af13e6d22de29091a8fecfd7f9ba07a14c0f58ebe21b71bb0728e7f1dea9cc02ec2eb399afe8fa960cbb130ea85cdbfc1f382334e0d7a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "7c11b0b2c66e85b3fc691e7aeffa8d8e4e1beec175de5d987af4635ab923eeedd41e92c690d0198ea7dc46ec34356099562691c337bfe1152c1bcf7f35ea833fcfe7631227af70e3530a669db0c3ca3ad02a4ba8ace5d1ef9aa10883418b5d0e57adbb83d36dead7de86a5393750a020b6a2383e84d8824ed24a5d65f30c77b1a6f979e26d17c776b9f3c174fc32d6a544829f96451524b2584c67d6d0e4712237a94326a6d1911db08a192ca22e9ff7395f52850c93dc40f5724cd100121163befdf7ca5a5ccc317b191f855084a2493042"}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x2d5, 0xe, {@wo_ht={{}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x5}}, 0x6, @random=0x9, 0xa4a, @void, @void, @val={0x3, 0x1, 0x13}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x21}}, @void, [{0xdd, 0x77, "e5b890098bb753ef13acf30f9d0c3d938c9f1a800e84b895d5ae40c5e5873ea3def9101e66b1ac5d9ad9fbacf33388e19932ff72477352d47572ea026ab603a0e8a1aca1baffc459492a3051a1478ccda7dc5b39f6a5d47125450adc706e8ac23c84110c2c659cd1ddd46da6731b7f9dcdfd23c16e78bb"}, {0xdd, 0xfb, "2fd7f32f19760ce4e826d6f7d7296462bd032dede628e342ba6b9911a8d0c3b3ecc98f20f37b47605898f23b45f26bf3e1b84c3c48523e1d67d0906370b668728d14e11278e961bcce5841fe3a57cc5c9a3c0d0dccaf2657aad15f586eb5665bb2669d027091a23bb2bf8637c63c5aee39ed3f65c673d158ccc71dde1337e95541eb3319ce4eaf15b5c2e7213feeab6a4bf49d7184ea30a19bd30eb784606e3fa862009dee72a5a49121ecfc7d0e5e9a3bfc8d850aabd0ca56005fb224fd2649f0221d53ff7c23003e08f31d452ccdfe14167cf009dd064eafc11dfa232af186ede4a34e0c66a378181741d551434016ded22c233b6d8651334319"}, {0xdd, 0x19, "4e52871e2ac400ee30b9eada930c039f455a75f0a8f8bad28b"}, {0xdd, 0xea, "0b11bfede481bbd291e5358aa960feb65f3e364fc7dac4edc10f15b1af9c87cb6cf4ec0c8e89228bff66955ccef2a269cad2cc8094fac3570d38c694054a38f954a32db9e8e280acab187de82006372a598354b71906372630ec086ae892642336895c76999dd0c0284cda11a426d909c1b7db27d70cd153e32ed72e5e9436afcefe868ce0a5b95ab915e0f8a9a1bc64041d733a2f163494b99bb299394ee02bfbc4b76c77c0af116a67f33f90c41e48aec754ffdd979620e82c2dcf83030969ca0035bd2fa1b66f0bbf77ee9697583b7871e936d6e4968af0e0e29805bef9279cfa6b26f281dcc45a6b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x31b, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="79bee68177e3", {0xe, 0x7f}}, 0x6, @default, 0x80e2, @void, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xe7, {0x97, 0x22, 0x1f, "b13e59928ebbe596ff5273de58c3c6a62731d21edb7a5742bc116d2e07fe3c6d5ad11c7d89c4844dd44b2e776f53c6859980b45d91ab913d0806c45353692b1f101dc5e3426baca53edcb163aadaba4a74da2c1e5bcd00164a774000a3180d326584e1f699c405b32dcdf52c9fad7160849aea70f586224415d762278907640c42209ceb983b4bbd741685882674e5d4459d0da10f9d095b2ceeaf6a363230f06b2995310d912ff19d4c22d4288565a3dceb5a9435ea396d963979e71135b7a77bb0f96588ee924136e919e4d0e0a75a5e8c06d6d889bf070d1195e3ca7bf12fecd78283"}}, @val={0x25, 0x3, {0x1, 0x78, 0xd8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x156, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xffffffff, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb9, "b7a24beccfb3795c4dce3055f53fac372156ebc165df2d93f639ee5d051d39c128420b95de3e69b5023114a567dfd659bbe157fa8fa233d1313b69623b1ccb2913f7e7de6e765ca35710587975ccb7d08c3db6947673a6946e0acfa17ac3a3abb46bc7cbca24255202d10b1902473ef6e13af38bf8755e9c7611b14dc18dafcc9d096d8a953c8fc5678df135c24411fad411d111d09eac7e1ca12a448de3da2b170baf94b17a42e3856b5f8c57d71ec0d23e50c1f5b267af28"}, {0xdd, 0x3b, "8073c5ab8a7797ed21027d134512f343902894734bc6ee2d9af21c4f856b46254577bfc0c1acfa76a9700265588be55ef44049b44fc2eeffc5c6ef"}, {0xdd, 0x3e, "a8409144c60199ccd9d5db365e9057e518b613ad23f5c97a68f11301869838c826721107addb3e1f92581b37fcaa1dbabe3b31504cb1307c08912f5ef3c6"}, {0xdd, 0x6b, "52ad6ea429ac240c770bad6817139de70ea117cd2fd3eeb1325349a37aff25106fc4ec0cb774a54ae9fafb559d2e320f83cf47b8cf4a62dd284f650e954788f34f2fdaa96680e89f00ce18114a35b25c6fc2d81238f311ef42d0334931d405964d61b0f47b310742c27df9"}, {0xdd, 0xf5, "add11ce2da05af539c7153719cd5d61970a5cc23915106d208f6f83da6abcd371711b194698caa7b6a1ff14cad0953ebced2fa50a2be783ec7b81d1a71759f6e061d2313ddf8776248f7fbfaa775f6e1a2f2902b1261369595755116ed32b7c5773120e4469972c5a7ec47bbffc3ef2134c0ad6d02149aceab62a870994e3d222144c04333619225731c2dfd58e06884cdc627f579024513ea5b87488ec5dbb76ea00313a4d08769054e037c0975924932b042beb98985d11fda81e6cca6f0492f7a06ae70232e0d5f66b0c8278f4bd71c9015a00908e01256f8bb66b81b10c75c2e5b2f05336447d8e32ea201ea43869e15978b8e"}]}}, @NL80211_ATTR_IE={0x41, 0x2a, [@supported_rates={0x1, 0x4, [{0x12}, {0x36}, {0x3}, {0x30}]}, @random={0x4, 0x2d, "3240c593ee6e9c4222dee965d33f44362ab3e9f5b42ddb7271e0dd04943f629d928a10d888bbc6ef9141994baa"}, @cf={0x4, 0x6, {0x2, 0x0, 0x0, 0xc8ad}}]}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x5e, 0x115, "ae3147d9a5695443da2a3ada9acc7761e9c4f0e1af53ff3910ee826c65dfb96fa18b0d5c4b624ea0b882e8c4d2ad059558c266edba395c1be7271a5a7f62be8aaedbc9d32fe089534feedb0a18fde06dacb7af59bdd514e20d44"}]]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) 00:37:15 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7000000}}}}}, 0x28}}, 0x0) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x3c000000}}}}}, 0x28}}, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x401, 0x0, 0x0, {{0x1b}, {@void, @val={0xc, 0x99, {0x0, 0x7f}}}}}, 0x20}}, 0x4008084) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0xf0ffff}}}}}, 0x28}}, 0x0) 00:37:15 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x401, 0x0, 0x0, {{0x1b}, {@void, @val={0xc, 0x99, {0x0, 0x7f}}}}}, 0x20}}, 0x4008084) 00:37:15 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)={0x106c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "d88747816e462322ccbd55e207b3be8da189af9ceeb46bb1293c9d1a657c52a7378a1c4f6fca279b3d95497e1de02f899c45948b20a0fee8c5627d9ac23d64cf969cac5600a9adbe86d48e635e158aa72fd98e04b104a35b41938f33c6f035db9da8f42e7071580bcb17beb1ac0a1a0e6233dcc9548e08ca62e09b72b0c876f43cfa944053ee5dc08c8511145478084920444e6e28483c681c81777dd1068bb9319cf375b057753e018877535003a5c28bbc4d2d29b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "c85902a40c05f73208f96c7aad1b403e7c4b474100749ed810ffb8169d2983d8fdc2c865a059b7d74a85a8e62d71be3eeb23679d3dcba502aa37d60290d1d5dc2535154e3b37d4bbcd93477e5b7df7699bfd08141f83e2ed129a6d900dd1b57daf927bf6170290bb48b426cf39a71e9ea27c6bde2c7bbfdd6eb19b7eca726e28b0a69ce86edae20b60baf9df9109829f032c959080f54aac9e51307481c23ccee008a48b75166998fc24a6a7d307d22cf17e6e4774cd41"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "781c7f23fb6f4d48b4d4d14de93aaf93c9fcc092fbc3bf1fda7b7072c6c9af13e6d22de29091a8fecfd7f9ba07a14c0f58ebe21b71bb0728e7f1dea9cc02ec2eb399afe8fa960cbb130ea85cdbfc1f382334e0d7a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "7c11b0b2c66e85b3fc691e7aeffa8d8e4e1beec175de5d987af4635ab923eeedd41e92c690d0198ea7dc46ec34356099562691c337bfe1152c1bcf7f35ea833fcfe7631227af70e3530a669db0c3ca3ad02a4ba8ace5d1ef9aa10883418b5d0e57adbb83d36dead7de86a5393750a020b6a2383e84d8824ed24a5d65f30c77b1a6f979e26d17c776b9f3c174fc32d6a544829f96451524b2584c67d6d0e4712237a94326a6d1911db08a192ca22e9ff7395f52850c93dc40f5724cd100121163befdf7ca5a5ccc317b191f855084a2493042"}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x2d5, 0xe, {@wo_ht={{}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x5}}, 0x6, @random=0x9, 0xa4a, @void, @void, @val={0x3, 0x1, 0x13}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x21}}, @void, [{0xdd, 0x77, "e5b890098bb753ef13acf30f9d0c3d938c9f1a800e84b895d5ae40c5e5873ea3def9101e66b1ac5d9ad9fbacf33388e19932ff72477352d47572ea026ab603a0e8a1aca1baffc459492a3051a1478ccda7dc5b39f6a5d47125450adc706e8ac23c84110c2c659cd1ddd46da6731b7f9dcdfd23c16e78bb"}, {0xdd, 0xfb, "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"}, {0xdd, 0x19, "4e52871e2ac400ee30b9eada930c039f455a75f0a8f8bad28b"}, {0xdd, 0xea, "0b11bfede481bbd291e5358aa960feb65f3e364fc7dac4edc10f15b1af9c87cb6cf4ec0c8e89228bff66955ccef2a269cad2cc8094fac3570d38c694054a38f954a32db9e8e280acab187de82006372a598354b71906372630ec086ae892642336895c76999dd0c0284cda11a426d909c1b7db27d70cd153e32ed72e5e9436afcefe868ce0a5b95ab915e0f8a9a1bc64041d733a2f163494b99bb299394ee02bfbc4b76c77c0af116a67f33f90c41e48aec754ffdd979620e82c2dcf83030969ca0035bd2fa1b66f0bbf77ee9697583b7871e936d6e4968af0e0e29805bef9279cfa6b26f281dcc45a6b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x31b, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="79bee68177e3", {0xe, 0x7f}}, 0x6, @default, 0x80e2, @void, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xe7, {0x97, 0x22, 0x1f, "b13e59928ebbe596ff5273de58c3c6a62731d21edb7a5742bc116d2e07fe3c6d5ad11c7d89c4844dd44b2e776f53c6859980b45d91ab913d0806c45353692b1f101dc5e3426baca53edcb163aadaba4a74da2c1e5bcd00164a774000a3180d326584e1f699c405b32dcdf52c9fad7160849aea70f586224415d762278907640c42209ceb983b4bbd741685882674e5d4459d0da10f9d095b2ceeaf6a363230f06b2995310d912ff19d4c22d4288565a3dceb5a9435ea396d963979e71135b7a77bb0f96588ee924136e919e4d0e0a75a5e8c06d6d889bf070d1195e3ca7bf12fecd78283"}}, @val={0x25, 0x3, {0x1, 0x78, 0xd8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x156, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xffffffff, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb9, "b7a24beccfb3795c4dce3055f53fac372156ebc165df2d93f639ee5d051d39c128420b95de3e69b5023114a567dfd659bbe157fa8fa233d1313b69623b1ccb2913f7e7de6e765ca35710587975ccb7d08c3db6947673a6946e0acfa17ac3a3abb46bc7cbca24255202d10b1902473ef6e13af38bf8755e9c7611b14dc18dafcc9d096d8a953c8fc5678df135c24411fad411d111d09eac7e1ca12a448de3da2b170baf94b17a42e3856b5f8c57d71ec0d23e50c1f5b267af28"}, {0xdd, 0x3b, "8073c5ab8a7797ed21027d134512f343902894734bc6ee2d9af21c4f856b46254577bfc0c1acfa76a9700265588be55ef44049b44fc2eeffc5c6ef"}, {0xdd, 0x3e, "a8409144c60199ccd9d5db365e9057e518b613ad23f5c97a68f11301869838c826721107addb3e1f92581b37fcaa1dbabe3b31504cb1307c08912f5ef3c6"}, {0xdd, 0x6b, "52ad6ea429ac240c770bad6817139de70ea117cd2fd3eeb1325349a37aff25106fc4ec0cb774a54ae9fafb559d2e320f83cf47b8cf4a62dd284f650e954788f34f2fdaa96680e89f00ce18114a35b25c6fc2d81238f311ef42d0334931d405964d61b0f47b310742c27df9"}, {0xdd, 0xf5, "add11ce2da05af539c7153719cd5d61970a5cc23915106d208f6f83da6abcd371711b194698caa7b6a1ff14cad0953ebced2fa50a2be783ec7b81d1a71759f6e061d2313ddf8776248f7fbfaa775f6e1a2f2902b1261369595755116ed32b7c5773120e4469972c5a7ec47bbffc3ef2134c0ad6d02149aceab62a870994e3d222144c04333619225731c2dfd58e06884cdc627f579024513ea5b87488ec5dbb76ea00313a4d08769054e037c0975924932b042beb98985d11fda81e6cca6f0492f7a06ae70232e0d5f66b0c8278f4bd71c9015a00908e01256f8bb66b81b10c75c2e5b2f05336447d8e32ea201ea43869e15978b8e"}]}}, @NL80211_ATTR_IE={0x41, 0x2a, [@supported_rates={0x1, 0x4, [{0x12}, {0x36}, {0x3}, {0x30}]}, @random={0x4, 0x2d, "3240c593ee6e9c4222dee965d33f44362ab3e9f5b42ddb7271e0dd04943f629d928a10d888bbc6ef9141994baa"}, @cf={0x4, 0x6, {0x2, 0x0, 0x0, 0xc8ad}}]}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x5e, 0x115, "ae3147d9a5695443da2a3ada9acc7761e9c4f0e1af53ff3910ee826c65dfb96fa18b0d5c4b624ea0b882e8c4d2ad059558c266edba395c1be7271a5a7f62be8aaedbc9d32fe089534feedb0a18fde06dacb7af59bdd514e20d44"}]]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x401, 0x0, 0x0, {{0x1b}, {@void, @val={0xc, 0x99, {0x0, 0x7f}}}}}, 0x20}}, 0x4008084) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r3, 0x300, 0x70bd30, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x26088834) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') 00:37:15 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) 00:37:15 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r3, 0x300, 0x70bd30, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x26088834) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r3, 0x300, 0x70bd30, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x26088834) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)={0x106c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "d88747816e462322ccbd55e207b3be8da189af9ceeb46bb1293c9d1a657c52a7378a1c4f6fca279b3d95497e1de02f899c45948b20a0fee8c5627d9ac23d64cf969cac5600a9adbe86d48e635e158aa72fd98e04b104a35b41938f33c6f035db9da8f42e7071580bcb17beb1ac0a1a0e6233dcc9548e08ca62e09b72b0c876f43cfa944053ee5dc08c8511145478084920444e6e28483c681c81777dd1068bb9319cf375b057753e018877535003a5c28bbc4d2d29b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "c85902a40c05f73208f96c7aad1b403e7c4b474100749ed810ffb8169d2983d8fdc2c865a059b7d74a85a8e62d71be3eeb23679d3dcba502aa37d60290d1d5dc2535154e3b37d4bbcd93477e5b7df7699bfd08141f83e2ed129a6d900dd1b57daf927bf6170290bb48b426cf39a71e9ea27c6bde2c7bbfdd6eb19b7eca726e28b0a69ce86edae20b60baf9df9109829f032c959080f54aac9e51307481c23ccee008a48b75166998fc24a6a7d307d22cf17e6e4774cd41"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "781c7f23fb6f4d48b4d4d14de93aaf93c9fcc092fbc3bf1fda7b7072c6c9af13e6d22de29091a8fecfd7f9ba07a14c0f58ebe21b71bb0728e7f1dea9cc02ec2eb399afe8fa960cbb130ea85cdbfc1f382334e0d7a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "7c11b0b2c66e85b3fc691e7aeffa8d8e4e1beec175de5d987af4635ab923eeedd41e92c690d0198ea7dc46ec34356099562691c337bfe1152c1bcf7f35ea833fcfe7631227af70e3530a669db0c3ca3ad02a4ba8ace5d1ef9aa10883418b5d0e57adbb83d36dead7de86a5393750a020b6a2383e84d8824ed24a5d65f30c77b1a6f979e26d17c776b9f3c174fc32d6a544829f96451524b2584c67d6d0e4712237a94326a6d1911db08a192ca22e9ff7395f52850c93dc40f5724cd100121163befdf7ca5a5ccc317b191f855084a2493042"}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x2d5, 0xe, {@wo_ht={{}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x5}}, 0x6, @random=0x9, 0xa4a, @void, @void, @val={0x3, 0x1, 0x13}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x21}}, @void, [{0xdd, 0x77, "e5b890098bb753ef13acf30f9d0c3d938c9f1a800e84b895d5ae40c5e5873ea3def9101e66b1ac5d9ad9fbacf33388e19932ff72477352d47572ea026ab603a0e8a1aca1baffc459492a3051a1478ccda7dc5b39f6a5d47125450adc706e8ac23c84110c2c659cd1ddd46da6731b7f9dcdfd23c16e78bb"}, {0xdd, 0xfb, "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"}, {0xdd, 0x19, "4e52871e2ac400ee30b9eada930c039f455a75f0a8f8bad28b"}, {0xdd, 0xea, "0b11bfede481bbd291e5358aa960feb65f3e364fc7dac4edc10f15b1af9c87cb6cf4ec0c8e89228bff66955ccef2a269cad2cc8094fac3570d38c694054a38f954a32db9e8e280acab187de82006372a598354b71906372630ec086ae892642336895c76999dd0c0284cda11a426d909c1b7db27d70cd153e32ed72e5e9436afcefe868ce0a5b95ab915e0f8a9a1bc64041d733a2f163494b99bb299394ee02bfbc4b76c77c0af116a67f33f90c41e48aec754ffdd979620e82c2dcf83030969ca0035bd2fa1b66f0bbf77ee9697583b7871e936d6e4968af0e0e29805bef9279cfa6b26f281dcc45a6b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x31b, 0x91, "fe7b51b2a69921302c324ee6e17912305ddfa6ab98a373381a057ecf6a081814d35c191eb3dd67049af45b33b05b95d1b7345b4bd15235c1a8b33109c6cae0fb2f95a77e03625af2b310e1866c1efac4d1b78626aed379ee700ff02bcd911ba6e5ad9a9240602bdb72d13b0154186b05d0c746236850cb412b565f7c7bc8697b561dfc719f192e0bf66a6d326e439a6420b2655c1839eb2cec77ad095653e97ae1c66786c5075054731bbc72d2d996e17cd296292d55d4ec0d6663c100125bb0adef7731dbc5985c8c3c27c1fe3d541e82c939b77adde539c6f18a09eee0287b9553e190a9a88f316a66f3fdd158767f479627df53873d97dfe5241a08cac12d7d694a641797e3bd96d04c1ac38d39c56c1ccf512fc99a5f391f4f9312af772646d9cfaf899ff223fa37ffa1fa5b8f05f876ab26845756801cdccaac77f17273a3e35796b957a36905c2bd8804151c68195a5aa86d341c45cd471de525b1796fb57aaf41f83a4bc46c7b20af19b113d6787693d01de9c12991d11071501cf32ff291d65cd417ec520c974b4b8909528b07558392ce6e0bd074c13c3ab2033d5dbc2eeb2cf01d832326401bdbc23e356a268ddee46ee60e887ecc9f112aebe0ce08adbe9f9315e7380f44efc0389aaf2b71d63c52427feb72664df302e9d54a267266f811e6d9711be895ef1196ce85e1d54f69c18953494c966f836637016eab140032da788cd51dc2daaadb867f8b713fe8d13da4a75c02064597a11aa024d0e55448fd20b2cda4c9031f845142502d965299479e1f374a5e73a9e9d7d140258fe9568dbe8a1650a7b9d636d369724e37fe4e1eb020ee1403fa882478d85e1be46b0d00428e6548771b2efe5e37e2d64f5c2548e46c7365caea4b8bb831c5e633929547ae84ee5b1eec05c0cce5eeaa644edda8ae0ad895053ea1121569058120afd487f52861bfe15647a858acc80f14425499006a0bf333166ce86ddde41a17c11f1e459ac18159b9cef32a95f0b0954fd026ef5f56128e6ec16a88a11605496e48dc6b708be2dcd37f6246833a6bd9d8c2104ad1065e92969e4565804967a73dd52fc9daa8bc6753e25640cde3eb7dab295f2f4c78"}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="79bee68177e3", {0xe, 0x7f}}, 0x6, @default, 0x80e2, @void, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xe7, {0x97, 0x22, 0x1f, "b13e59928ebbe596ff5273de58c3c6a62731d21edb7a5742bc116d2e07fe3c6d5ad11c7d89c4844dd44b2e776f53c6859980b45d91ab913d0806c45353692b1f101dc5e3426baca53edcb163aadaba4a74da2c1e5bcd00164a774000a3180d326584e1f699c405b32dcdf52c9fad7160849aea70f586224415d762278907640c42209ceb983b4bbd741685882674e5d4459d0da10f9d095b2ceeaf6a363230f06b2995310d912ff19d4c22d4288565a3dceb5a9435ea396d963979e71135b7a77bb0f96588ee924136e919e4d0e0a75a5e8c06d6d889bf070d1195e3ca7bf12fecd78283"}}, @val={0x25, 0x3, {0x1, 0x78, 0xd8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x156, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xffffffff, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb9, "b7a24beccfb3795c4dce3055f53fac372156ebc165df2d93f639ee5d051d39c128420b95de3e69b5023114a567dfd659bbe157fa8fa233d1313b69623b1ccb2913f7e7de6e765ca35710587975ccb7d08c3db6947673a6946e0acfa17ac3a3abb46bc7cbca24255202d10b1902473ef6e13af38bf8755e9c7611b14dc18dafcc9d096d8a953c8fc5678df135c24411fad411d111d09eac7e1ca12a448de3da2b170baf94b17a42e3856b5f8c57d71ec0d23e50c1f5b267af28"}, {0xdd, 0x3b, "8073c5ab8a7797ed21027d134512f343902894734bc6ee2d9af21c4f856b46254577bfc0c1acfa76a9700265588be55ef44049b44fc2eeffc5c6ef"}, {0xdd, 0x3e, "a8409144c60199ccd9d5db365e9057e518b613ad23f5c97a68f11301869838c826721107addb3e1f92581b37fcaa1dbabe3b31504cb1307c08912f5ef3c6"}, {0xdd, 0x6b, "52ad6ea429ac240c770bad6817139de70ea117cd2fd3eeb1325349a37aff25106fc4ec0cb774a54ae9fafb559d2e320f83cf47b8cf4a62dd284f650e954788f34f2fdaa96680e89f00ce18114a35b25c6fc2d81238f311ef42d0334931d405964d61b0f47b310742c27df9"}, {0xdd, 0xf5, "add11ce2da05af539c7153719cd5d61970a5cc23915106d208f6f83da6abcd371711b194698caa7b6a1ff14cad0953ebced2fa50a2be783ec7b81d1a71759f6e061d2313ddf8776248f7fbfaa775f6e1a2f2902b1261369595755116ed32b7c5773120e4469972c5a7ec47bbffc3ef2134c0ad6d02149aceab62a870994e3d222144c04333619225731c2dfd58e06884cdc627f579024513ea5b87488ec5dbb76ea00313a4d08769054e037c0975924932b042beb98985d11fda81e6cca6f0492f7a06ae70232e0d5f66b0c8278f4bd71c9015a00908e01256f8bb66b81b10c75c2e5b2f05336447d8e32ea201ea43869e15978b8e"}]}}, @NL80211_ATTR_IE={0x41, 0x2a, [@supported_rates={0x1, 0x4, [{0x12}, {0x36}, {0x3}, {0x30}]}, @random={0x4, 0x2d, "3240c593ee6e9c4222dee965d33f44362ab3e9f5b42ddb7271e0dd04943f629d928a10d888bbc6ef9141994baa"}, @cf={0x4, 0x6, {0x2, 0x0, 0x0, 0xc8ad}}]}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x5e, 0x115, "ae3147d9a5695443da2a3ada9acc7761e9c4f0e1af53ff3910ee826c65dfb96fa18b0d5c4b624ea0b882e8c4d2ad059558c266edba395c1be7271a5a7f62be8aaedbc9d32fe089534feedb0a18fde06dacb7af59bdd514e20d44"}]]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 00:37:15 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0xa7, 0x2d5, 0x1, "be3de6606502cbee630e504b742448435dddcc5fb98b72df76134ff6fd3e2fd4107a4228ed185a443cc31aef4ca1298a022b8703bed43b789745b7e5bcf7cde6b8847f8622af26b51bdde076c7a723d410b655cfd488f4f22552c6ab9d844ec26fa79db67cafbd974761751296ddf7b340abcc719c3bc4e50f2a2267bef904ef7e7f678de9fea3183d655dcc8fa062505c0ac4e1573f576e1daed9a80697b4e65264608e9e3bfd"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="01040000000088462b55e208000000803b9b7bdc9de8a13f2241", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x80) 00:37:15 executing program 3: socketpair(0x2, 0x3, 0x1, 0x0) 00:37:15 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) 00:37:15 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0xa7, 0x2d5, 0x1, "be3de6606502cbee630e504b742448435dddcc5fb98b72df76134ff6fd3e2fd4107a4228ed185a443cc31aef4ca1298a022b8703bed43b789745b7e5bcf7cde6b8847f8622af26b51bdde076c7a723d410b655cfd488f4f22552c6ab9d844ec26fa79db67cafbd974761751296ddf7b340abcc719c3bc4e50f2a2267bef904ef7e7f678de9fea3183d655dcc8fa062505c0ac4e1573f576e1daed9a80697b4e65264608e9e3bfd"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="01040000000088462b55e208000000803b9b7bdc9de8a13f2241", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x80) 00:37:15 executing program 3: socketpair(0x2, 0x3, 0x1, 0x0) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)={0x106c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "d88747816e462322ccbd55e207b3be8da189af9ceeb46bb1293c9d1a657c52a7378a1c4f6fca279b3d95497e1de02f899c45948b20a0fee8c5627d9ac23d64cf969cac5600a9adbe86d48e635e158aa72fd98e04b104a35b41938f33c6f035db9da8f42e7071580bcb17beb1ac0a1a0e6233dcc9548e08ca62e09b72b0c876f43cfa944053ee5dc08c8511145478084920444e6e28483c681c81777dd1068bb9319cf375b057753e018877535003a5c28bbc4d2d29b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "c85902a40c05f73208f96c7aad1b403e7c4b474100749ed810ffb8169d2983d8fdc2c865a059b7d74a85a8e62d71be3eeb23679d3dcba502aa37d60290d1d5dc2535154e3b37d4bbcd93477e5b7df7699bfd08141f83e2ed129a6d900dd1b57daf927bf6170290bb48b426cf39a71e9ea27c6bde2c7bbfdd6eb19b7eca726e28b0a69ce86edae20b60baf9df9109829f032c959080f54aac9e51307481c23ccee008a48b75166998fc24a6a7d307d22cf17e6e4774cd41"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "781c7f23fb6f4d48b4d4d14de93aaf93c9fcc092fbc3bf1fda7b7072c6c9af13e6d22de29091a8fecfd7f9ba07a14c0f58ebe21b71bb0728e7f1dea9cc02ec2eb399afe8fa960cbb130ea85cdbfc1f382334e0d7a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "7c11b0b2c66e85b3fc691e7aeffa8d8e4e1beec175de5d987af4635ab923eeedd41e92c690d0198ea7dc46ec34356099562691c337bfe1152c1bcf7f35ea833fcfe7631227af70e3530a669db0c3ca3ad02a4ba8ace5d1ef9aa10883418b5d0e57adbb83d36dead7de86a5393750a020b6a2383e84d8824ed24a5d65f30c77b1a6f979e26d17c776b9f3c174fc32d6a544829f96451524b2584c67d6d0e4712237a94326a6d1911db08a192ca22e9ff7395f52850c93dc40f5724cd100121163befdf7ca5a5ccc317b191f855084a2493042"}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "e3e09f8cb2d3514c59b01c16624f02d8cd04ed6445ba0308f83f98dd633764a55effd396e5a94d9c1bbb2097df26314c7ac6597f27f519f9d20abcf4db44a5879671710a5f55a6a8f211d2d348d26aa15b419b423dd8c354514d1e46b75cc5dfa52a051761af2835cf3cb6131e2588492c502bc2bb1b2fa5129c4e49f352c27d3bda47a33793f3b049059ca93a1f4aefb0b3499bfa7b1559c19f12ed81155da8ca09267c46ecb88679bcad3d1c6592dbc07003e14ca4018e01f0f9b58953605282cee75454d7fd95ad47a5e0fb0d72370f77020fc5b315225321916e8c612597f6149cc8a7e0fc3bf3e675e7a0af6c2c630a94b067ea93874b4fa678d0cd4a940713c1702939e7f8acd6eb25d0aea40636eab2cc7d314198c027f1db07f2b49b2e46206c8841295050ad14692b4c72143828fb9328e06d0dbcf6379109a6f0e16060988661b786c2f7a2e1b6afe2e6f297ef5c5426d011aed0da02b07d15d457d00fda4a2a386ecf10655bc6a39259e417c95ee5ef0a8fe9c127c8efe7aa13c9919723a8d36bcdf513984f4ab212cdb277c86995be2655688fa79d179e9d7a03139fa11eb98c41a529da2eb9c9c80292de2aa37ca3d7aff0465bd2da59ebe5c7c644afd2c8b0b6293e72d44dbfeff011154c09b87f9f80a97a7e3740820490b4c26c865abc8037e98f3ef86ff5319b5de89735536adf1e801475354732fd155f38dabb3baae1cc009e12c65f6c914146c6ddb805f3c8cf2d0dd0884471388474eaa70de976c158e86a5145a265201e57c9cd3d5accdbc635e32ced09db771d72264a8bba911fabc7698828b2ab292c416502a9c9c9ceef464384766bb40d45c9d2367c0f27771d6a5fedf1640080eda25bbe7320052e40670fa843befe0737b7e3eb5f438f3ca6aaa5e2bfa81619f68e90eb164a9eed65a000d08c2a8f58996423e8d3c8eb65cf4879617ae6e9083fd545aee1def67de193f24821e5168fa7a8bce342042ccc0d7f2cfc6ef000e1351118f1066bedf855c9c58cbbc7a0826c2ceb5cef404c7250c9ae1727715fccf341670c08"}, @NL80211_ATTR_BEACON_HEAD={0x2d5, 0xe, {@wo_ht={{}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x5}}, 0x6, @random=0x9, 0xa4a, @void, @void, @val={0x3, 0x1, 0x13}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x21}}, @void, [{0xdd, 0x77, "e5b890098bb753ef13acf30f9d0c3d938c9f1a800e84b895d5ae40c5e5873ea3def9101e66b1ac5d9ad9fbacf33388e19932ff72477352d47572ea026ab603a0e8a1aca1baffc459492a3051a1478ccda7dc5b39f6a5d47125450adc706e8ac23c84110c2c659cd1ddd46da6731b7f9dcdfd23c16e78bb"}, {0xdd, 0xfb, "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"}, {0xdd, 0x19, "4e52871e2ac400ee30b9eada930c039f455a75f0a8f8bad28b"}, {0xdd, 0xea, "0b11bfede481bbd291e5358aa960feb65f3e364fc7dac4edc10f15b1af9c87cb6cf4ec0c8e89228bff66955ccef2a269cad2cc8094fac3570d38c694054a38f954a32db9e8e280acab187de82006372a598354b71906372630ec086ae892642336895c76999dd0c0284cda11a426d909c1b7db27d70cd153e32ed72e5e9436afcefe868ce0a5b95ab915e0f8a9a1bc64041d733a2f163494b99bb299394ee02bfbc4b76c77c0af116a67f33f90c41e48aec754ffdd979620e82c2dcf83030969ca0035bd2fa1b66f0bbf77ee9697583b7871e936d6e4968af0e0e29805bef9279cfa6b26f281dcc45a6b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x31b, 0x91, "fe7b51b2a69921302c324ee6e17912305ddfa6ab98a373381a057ecf6a081814d35c191eb3dd67049af45b33b05b95d1b7345b4bd15235c1a8b33109c6cae0fb2f95a77e03625af2b310e1866c1efac4d1b78626aed379ee700ff02bcd911ba6e5ad9a9240602bdb72d13b0154186b05d0c746236850cb412b565f7c7bc8697b561dfc719f192e0bf66a6d326e439a6420b2655c1839eb2cec77ad095653e97ae1c66786c5075054731bbc72d2d996e17cd296292d55d4ec0d6663c100125bb0adef7731dbc5985c8c3c27c1fe3d541e82c939b77adde539c6f18a09eee0287b9553e190a9a88f316a66f3fdd158767f479627df53873d97dfe5241a08cac12d7d694a641797e3bd96d04c1ac38d39c56c1ccf512fc99a5f391f4f9312af772646d9cfaf899ff223fa37ffa1fa5b8f05f876ab26845756801cdccaac77f17273a3e35796b957a36905c2bd8804151c68195a5aa86d341c45cd471de525b1796fb57aaf41f83a4bc46c7b20af19b113d6787693d01de9c12991d11071501cf32ff291d65cd417ec520c974b4b8909528b07558392ce6e0bd074c13c3ab2033d5dbc2eeb2cf01d832326401bdbc23e356a268ddee46ee60e887ecc9f112aebe0ce08adbe9f9315e7380f44efc0389aaf2b71d63c52427feb72664df302e9d54a267266f811e6d9711be895ef1196ce85e1d54f69c18953494c966f836637016eab140032da788cd51dc2daaadb867f8b713fe8d13da4a75c02064597a11aa024d0e55448fd20b2cda4c9031f845142502d965299479e1f374a5e73a9e9d7d140258fe9568dbe8a1650a7b9d636d369724e37fe4e1eb020ee1403fa882478d85e1be46b0d00428e6548771b2efe5e37e2d64f5c2548e46c7365caea4b8bb831c5e633929547ae84ee5b1eec05c0cce5eeaa644edda8ae0ad895053ea1121569058120afd487f52861bfe15647a858acc80f14425499006a0bf333166ce86ddde41a17c11f1e459ac18159b9cef32a95f0b0954fd026ef5f56128e6ec16a88a11605496e48dc6b708be2dcd37f6246833a6bd9d8c2104ad1065e92969e4565804967a73dd52fc9daa8bc6753e25640cde3eb7dab295f2f4c78"}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="79bee68177e3", {0xe, 0x7f}}, 0x6, @default, 0x80e2, @void, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xe7, {0x97, 0x22, 0x1f, "b13e59928ebbe596ff5273de58c3c6a62731d21edb7a5742bc116d2e07fe3c6d5ad11c7d89c4844dd44b2e776f53c6859980b45d91ab913d0806c45353692b1f101dc5e3426baca53edcb163aadaba4a74da2c1e5bcd00164a774000a3180d326584e1f699c405b32dcdf52c9fad7160849aea70f586224415d762278907640c42209ceb983b4bbd741685882674e5d4459d0da10f9d095b2ceeaf6a363230f06b2995310d912ff19d4c22d4288565a3dceb5a9435ea396d963979e71135b7a77bb0f96588ee924136e919e4d0e0a75a5e8c06d6d889bf070d1195e3ca7bf12fecd78283"}}, @val={0x25, 0x3, {0x1, 0x78, 0xd8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x156, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xffffffff, 0x1}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb9, "b7a24beccfb3795c4dce3055f53fac372156ebc165df2d93f639ee5d051d39c128420b95de3e69b5023114a567dfd659bbe157fa8fa233d1313b69623b1ccb2913f7e7de6e765ca35710587975ccb7d08c3db6947673a6946e0acfa17ac3a3abb46bc7cbca24255202d10b1902473ef6e13af38bf8755e9c7611b14dc18dafcc9d096d8a953c8fc5678df135c24411fad411d111d09eac7e1ca12a448de3da2b170baf94b17a42e3856b5f8c57d71ec0d23e50c1f5b267af28"}, {0xdd, 0x3b, "8073c5ab8a7797ed21027d134512f343902894734bc6ee2d9af21c4f856b46254577bfc0c1acfa76a9700265588be55ef44049b44fc2eeffc5c6ef"}, {0xdd, 0x3e, "a8409144c60199ccd9d5db365e9057e518b613ad23f5c97a68f11301869838c826721107addb3e1f92581b37fcaa1dbabe3b31504cb1307c08912f5ef3c6"}, {0xdd, 0x6b, "52ad6ea429ac240c770bad6817139de70ea117cd2fd3eeb1325349a37aff25106fc4ec0cb774a54ae9fafb559d2e320f83cf47b8cf4a62dd284f650e954788f34f2fdaa96680e89f00ce18114a35b25c6fc2d81238f311ef42d0334931d405964d61b0f47b310742c27df9"}, {0xdd, 0xf5, "add11ce2da05af539c7153719cd5d61970a5cc23915106d208f6f83da6abcd371711b194698caa7b6a1ff14cad0953ebced2fa50a2be783ec7b81d1a71759f6e061d2313ddf8776248f7fbfaa775f6e1a2f2902b1261369595755116ed32b7c5773120e4469972c5a7ec47bbffc3ef2134c0ad6d02149aceab62a870994e3d222144c04333619225731c2dfd58e06884cdc627f579024513ea5b87488ec5dbb76ea00313a4d08769054e037c0975924932b042beb98985d11fda81e6cca6f0492f7a06ae70232e0d5f66b0c8278f4bd71c9015a00908e01256f8bb66b81b10c75c2e5b2f05336447d8e32ea201ea43869e15978b8e"}]}}, @NL80211_ATTR_IE={0x41, 0x2a, [@supported_rates={0x1, 0x4, [{0x12}, {0x36}, {0x3}, {0x30}]}, @random={0x4, 0x2d, "3240c593ee6e9c4222dee965d33f44362ab3e9f5b42ddb7271e0dd04943f629d928a10d888bbc6ef9141994baa"}, @cf={0x4, 0x6, {0x2, 0x0, 0x0, 0xc8ad}}]}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x5e, 0x115, "ae3147d9a5695443da2a3ada9acc7761e9c4f0e1af53ff3910ee826c65dfb96fa18b0d5c4b624ea0b882e8c4d2ad059558c266edba395c1be7271a5a7f62be8aaedbc9d32fe089534feedb0a18fde06dacb7af59bdd514e20d44"}]]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 00:37:15 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0xa7, 0x2d5, 0x1, "be3de6606502cbee630e504b742448435dddcc5fb98b72df76134ff6fd3e2fd4107a4228ed185a443cc31aef4ca1298a022b8703bed43b789745b7e5bcf7cde6b8847f8622af26b51bdde076c7a723d410b655cfd488f4f22552c6ab9d844ec26fa79db67cafbd974761751296ddf7b340abcc719c3bc4e50f2a2267bef904ef7e7f678de9fea3183d655dcc8fa062505c0ac4e1573f576e1daed9a80697b4e65264608e9e3bfd"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="01040000000088462b55e208000000803b9b7bdc9de8a13f2241", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0xa7, 0x2d5, 0x1, "be3de6606502cbee630e504b742448435dddcc5fb98b72df76134ff6fd3e2fd4107a4228ed185a443cc31aef4ca1298a022b8703bed43b789745b7e5bcf7cde6b8847f8622af26b51bdde076c7a723d410b655cfd488f4f22552c6ab9d844ec26fa79db67cafbd974761751296ddf7b340abcc719c3bc4e50f2a2267bef904ef7e7f678de9fea3183d655dcc8fa062505c0ac4e1573f576e1daed9a80697b4e65264608e9e3bfd"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="01040000000088462b55e208000000803b9b7bdc9de8a13f2241", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x80) (async) 00:37:15 executing program 3: socketpair(0x2, 0x3, 0x1, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="858a7bbf44802f12b9650eac4e46c56ed6a867806c420fdf392583ada0923f82255244acea5bd1b67a52744fb93218b18c1927a3d318c46c91197e87fc520fa9992fcd6c0e", @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x3000000}}}}}, 0x28}}, 0x0) 00:37:15 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="858a7bbf44802f12b9650eac4e46c56ed6a867806c420fdf392583ada0923f82255244acea5bd1b67a52744fb93218b18c1927a3d318c46c91197e87fc520fa9992fcd6c0e", @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:15 executing program 2: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="858a7bbf44802f12b9650eac4e46c56ed6a867806c420fdf392583ada0923f82255244acea5bd1b67a52744fb93218b18c1927a3d318c46c91197e87fc520fa9992fcd6c0e", @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2800}}}}}, 0x28}}, 0x0) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1ce, 0x7c6, 0x9, 0x20, 0x0, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x1, 0x1, 0x3, 0x0, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x13, 0x16]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000004) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x700}}}}}, 0x28}}, 0x0) 00:37:15 executing program 2: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1ce, 0x7c6, 0x9, 0x20, 0x0, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x1, 0x1, 0x3, 0x0, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x13, 0x16]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000004) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1ce, 0x7c6, 0x9, 0x20, 0x0, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x1, 0x1, 0x3, 0x0, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x13, 0x16]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000004) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) 00:37:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1ce, 0x7c6, 0x9, 0x20, 0x0, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x1, 0x1, 0x3, 0x0, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x13, 0x16]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000004) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1ce, 0x7c6, 0x9, 0x20, 0x0, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x1, 0x1, 0x3, 0x0, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x13, 0x16]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000004) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1ce, 0x7c6, 0x9, 0x20, 0x0, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x1, 0x1, 0x3, 0x0, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x13, 0x16]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000004) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) 00:37:15 executing program 2: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1ce, 0x7c6, 0x9, 0x20, 0x0, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x1, 0x1, 0x3, 0x0, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x13, 0x16]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000004) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r3 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000abcc4c33956b7f53874c"], 0x28}}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd1d, 0xff, 0xfffffffb, 0x2d, 0x80000001, 0x7, 0xae4, 0xffffffff, 0x9}) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r3 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000abcc4c33956b7f53874c"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000abcc4c33956b7f53874c"], 0x28}}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd1d, 0xff, 0xfffffffb, 0x2d, 0x80000001, 0x7, 0xae4, 0xffffffff, 0x9}) 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) 00:37:15 executing program 2: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r3 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000abcc4c33956b7f53874c"], 0x28}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd1d, 0xff, 0xfffffffb, 0x2d, 0x80000001, 0x7, 0xae4, 0xffffffff, 0x9}) 00:37:15 executing program 2: socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0x80000000, 0x33, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x10000, 0x9}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004c084}, 0x0) r3 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 2: socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0x80000000, 0x33, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x10000, 0x9}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004c084}, 0x0) r3 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0x80000000, 0x33, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x10000, 0x9}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004c084}, 0x0) (async) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) 00:37:15 executing program 2: socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) 00:37:15 executing program 3: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 2: socketpair(0x22, 0x3, 0x0, 0x0) 00:37:15 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0x80000000, 0x33, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x10000, 0x9}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004c084}, 0x0) (async) r3 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async, rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (rerun: 32) 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) 00:37:15 executing program 2: socketpair(0x22, 0x3, 0x0, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d1977f54f50507713f054d3d370000", @ANYRES16=r3, @ANYBLOB="010000000000000000000400000006000100000000001400080076657468305f746f5f62617461647600"], 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x70) 00:37:15 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 2: socketpair(0x22, 0x3, 0x0, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d1977f54f50507713f054d3d370000", @ANYRES16=r3, @ANYBLOB="010000000000000000000400000006000100000000001400080076657468305f746f5f62617461647600"], 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x70) 00:37:15 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x500}}}}}, 0x28}}, 0x0) 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d1977f54f50507713f054d3d370000", @ANYRES16=r3, @ANYBLOB="010000000000000000000400000006000100000000001400080076657468305f746f5f62617461647600"], 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d1977f54f50507713f054d3d370000", @ANYRES16=r3, @ANYBLOB="010000000000000000000400000006000100000000001400080076657468305f746f5f62617461647600"], 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x70) (async) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x3c}}}}}, 0x28}}, 0x0) 00:37:15 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x28}}}}}, 0x28}}, 0x0) 00:37:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000480)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000580)={&(0x7f00000004c0)=[r3, r4, 0x0], &(0x7f0000000500)=[0x3ff, 0x3, 0x1, 0x2, 0x84, 0x6, 0x8001, 0x3, 0x0, 0x9], 0x7, 0x3, 0x2}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x50, r0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x101}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x885}, 0x40080) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) r6 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x28, r9, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}]}, 0x28}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r10, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r12 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7f}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bd28dad4dc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x4008810) 00:37:15 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) 00:37:15 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) syz_open_dev$sg(&(0x7f0000001740), 0x80000000, 0x6081) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x28}}}}}, 0x28}}, 0x0) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, 0x0) 00:37:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000480)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000580)={&(0x7f00000004c0)=[r3, r4, 0x0], &(0x7f0000000500)=[0x3ff, 0x3, 0x1, 0x2, 0x84, 0x6, 0x8001, 0x3, 0x0, 0x9], 0x7, 0x3, 0x2}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x50, r0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x101}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x885}, 0x40080) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) (async) r6 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x28, r9, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}]}, 0x28}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r10, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) (async) r12 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7f}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bd28dad4dc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x4008810) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, 0x0) 00:37:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000440)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000480)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000580)={&(0x7f00000004c0)=[r3, r4, 0x0], &(0x7f0000000500)=[0x3ff, 0x3, 0x1, 0x2, 0x84, 0x6, 0x8001, 0x3, 0x0, 0x9], 0x7, 0x3, 0x2}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x50, r0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x101}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x885}, 0x40080) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) (async) r6 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x28, r9, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}]}, 0x28}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r10, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) (async) r12 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7f}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bd28dad4dc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x4008810) 00:37:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000480)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000580)={&(0x7f00000004c0)=[r3, r4, 0x0], &(0x7f0000000500)=[0x3ff, 0x3, 0x1, 0x2, 0x84, 0x6, 0x8001, 0x3, 0x0, 0x9], 0x7, 0x3, 0x2}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x50, r0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x101}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x885}, 0x40080) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) r6 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x28, r9, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}]}, 0x28}, 0x1, 0x0, 0x0, 0x80001}, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r10, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r12 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7f}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bd28dad4dc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x4008810) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, 0x0) 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}}, 0x28}}, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r19, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xa}}}}}, 0x28}}, 0x0) [ 648.616890][T26296] validate_nla: 122 callbacks suppressed 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 648.616900][T26296] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r19, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x9effffff}}}}}, 0x28}}, 0x0) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r19, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 648.644657][T26305] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9effffff}}}}}, 0x28}}, 0x0) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) (async) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) (async, rerun: 32) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r19, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) [ 648.665692][T26311] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 00:37:15 executing program 0: ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x96}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r4, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r19, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 0: ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x96}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x14) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r4, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (rerun: 32) 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 648.718696][T26329] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 1: socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x4, 0x2, &(0x7f0000000180)) 00:37:15 executing program 0: ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x96}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r4, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x96}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r4, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r19, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 3: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x800, 0x0, 0x0, {{0x1b}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x0, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0xfffffffffffffc80, 0x2, 0x1}]}, 0x38}}, 0x4000001) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x800, 0x0, 0x0, {{0x1b}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x0, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0xfffffffffffffc80, 0x2, 0x1}]}, 0x38}}, 0x4000001) 00:37:15 executing program 3: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8, 0xb}, @val={0xc}}}}, 0x28}}, 0x0) [ 648.767206][T26351] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x800, 0x0, 0x0, {{0x1b}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x0, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0xfffffffffffffc80, 0x2, 0x1}]}, 0x38}}, 0x4000001) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x5}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 3: socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)) [ 648.806776][T26367] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000000100000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b, 0x0, 0xe00}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000000100000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:15 executing program 3: socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) [ 648.833728][T26378] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000000100000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000000100000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:15 executing program 3: socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b, 0x0, 0xf}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 648.856400][T26390] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffff7, 0x400080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000840)={r2, r3, "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", "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"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0104004b84e47a0def0e1e00000008000300a72a3d221e8350b19fdd7490e1c649d6bb185b20c89784cd9eb7e23be1849c17097e6e7282d93077e81c6a9e2ee6ee267602119e9ae6636de28d1561a5728538fa4257f9c3b35268f8860291317ef224fcc50425d4f1c37f0e293541947d0d46a21db8fc8e6d0d3f34b99a5586aa001d36885e914664cdf71ee20dc083740049ccc63818ca95be7c18", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:15 executing program 3: socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffff7, 0x400080) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000840)={r2, r3, "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", "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"}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0104004b84e47a0def0e1e00000008000300a72a3d221e8350b19fdd7490e1c649d6bb185b20c89784cd9eb7e23be1849c17097e6e7282d93077e81c6a9e2ee6ee267602119e9ae6636de28d1561a5728538fa4257f9c3b35268f8860291317ef224fcc50425d4f1c37f0e293541947d0d46a21db8fc8e6d0d3f34b99a5586aa001d36885e914664cdf71ee20dc083740049ccc63818ca95be7c18", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, 0x0) [ 648.886951][T26401] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffff7, 0x400080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000840)={r2, r3, "b6b80c9142d0089c1e3b7a0e3038a2ab43bf859e6090e1795d0fcfeaf0c7c04e250cee7809b07af533132846b65197d422f3e318d26e0891c5789a29d7846fdc9d022930e79e972796cc24a6c59b021d0eb47762dc676019bf343e2fdd74d180b82f79d3e1f147342c10e70b480efce43c109af7d19a299e1498e7b0e11b4d0755c6c73ae49b94c62e77f86362c4afd60fa326d7d25a6c2a90b7bb94a4f8ec42ae9173270b4a53d861f9be2bb54766e05066dd1bdb6d564254f2f3bad2e86d0d14c5efb6419d125fdcb5411f1b45436a4481d3a366d57e921f8cf9994466b15939e15e4b521603685c788132969e8bd4b6c0fe7f85c576fc3a364009af2ce87b", "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"}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0104004b84e47a0def0e1e00000008000300a72a3d221e8350b19fdd7490e1c649d6bb185b20c89784cd9eb7e23be1849c17097e6e7282d93077e81c6a9e2ee6ee267602119e9ae6636de28d1561a5728538fa4257f9c3b35268f8860291317ef224fcc50425d4f1c37f0e293541947d0d46a21db8fc8e6d0d3f34b99a5586aa001d36885e914664cdf71ee20dc083740049ccc63818ca95be7c18", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) [ 648.887093][T26396] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 00:37:15 executing program 3: socketpair(0x22, 0x3, 0x0, 0x0) 00:37:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r4, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4e}, @void, @val={0xc, 0x99, {0xfc6, 0x1e}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) 00:37:16 executing program 3: socketpair(0x22, 0x3, 0x0, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r4, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4e}, @void, @val={0xc, 0x99, {0xfc6, 0x1e}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) 00:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc, 0x99, {0x3}}}}}, 0x28}}, 0x0) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b, 0x0, 0x6}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r4, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4e}, @void, @val={0xc, 0x99, {0xfc6, 0x1e}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000040)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT=r1], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20010000b92739775e1e1767be5a3c25d7351cacee88ada2d54658357f1f02f4f72d64436425fa4db54a9acdf3b8255d1c80be41e297cba98a4dc17685c7d7b80e01690c83769af1eeba7c60dd15db46c92cc025e7724e91d089d3f99043032759c47f8f035533cc24576cff03683857dea3393ccd2c41146f2fdd946d07a7ca9ff2be43f6feadf4c8e037363b8713d88def15743698023bc808d4a0f9331fd6fc18ffbbcca16d4ee27961", @ANYRES16=r1, @ANYBLOB="010400000000fedbdf251b0000000c00990000000000001f500673dcdd080000d5fbf06b7888c6c6f9920ac7e3a2d384f2a5819a974c84d03e333ab7f37a6e363bd24e38f84c30725741e01aa5ed19f07d82a29533df180fd65c7a79"], 0x20}}, 0x20000001) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r12, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000040)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT=r1], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20010000b92739775e1e1767be5a3c25d7351cacee88ada2d54658357f1f02f4f72d64436425fa4db54a9acdf3b8255d1c80be41e297cba98a4dc17685c7d7b80e01690c83769af1eeba7c60dd15db46c92cc025e7724e91d089d3f99043032759c47f8f035533cc24576cff03683857dea3393ccd2c41146f2fdd946d07a7ca9ff2be43f6feadf4c8e037363b8713d88def15743698023bc808d4a0f9331fd6fc18ffbbcca16d4ee27961", @ANYRES16=r1, @ANYBLOB="010400000000fedbdf251b0000000c00990000000000001f500673dcdd080000d5fbf06b7888c6c6f9920ac7e3a2d384f2a5819a974c84d03e333ab7f37a6e363bd24e38f84c30725741e01aa5ed19f07d82a29533df180fd65c7a79"], 0x20}}, 0x20000001) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r10, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r12, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x10}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000040)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT=r1], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20010000b92739775e1e1767be5a3c25d7351cacee88ada2d54658357f1f02f4f72d64436425fa4db54a9acdf3b8255d1c80be41e297cba98a4dc17685c7d7b80e01690c83769af1eeba7c60dd15db46c92cc025e7724e91d089d3f99043032759c47f8f035533cc24576cff03683857dea3393ccd2c41146f2fdd946d07a7ca9ff2be43f6feadf4c8e037363b8713d88def15743698023bc808d4a0f9331fd6fc18ffbbcca16d4ee27961", @ANYRES16=r1, @ANYBLOB="010400000000fedbdf251b0000000c00990000000000001f500673dcdd080000d5fbf06b7888c6c6f9920ac7e3a2d384f2a5819a974c84d03e333ab7f37a6e363bd24e38f84c30725741e01aa5ed19f07d82a29533df180fd65c7a79"], 0x20}}, 0x20000001) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000040)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT=r1], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20010000b92739775e1e1767be5a3c25d7351cacee88ada2d54658357f1f02f4f72d64436425fa4db54a9acdf3b8255d1c80be41e297cba98a4dc17685c7d7b80e01690c83769af1eeba7c60dd15db46c92cc025e7724e91d089d3f99043032759c47f8f035533cc24576cff03683857dea3393ccd2c41146f2fdd946d07a7ca9ff2be43f6feadf4c8e037363b8713d88def15743698023bc808d4a0f9331fd6fc18ffbbcca16d4ee27961", @ANYRES16=r1, @ANYBLOB="010400000000fedbdf251b0000000c00990000000000001f500673dcdd080000d5fbf06b7888c6c6f9920ac7e3a2d384f2a5819a974c84d03e333ab7f37a6e363bd24e38f84c30725741e01aa5ed19f07d82a29533df180fd65c7a79"], 0x20}}, 0x20000001) (async) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c08d57134c4f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4912876adb5f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9d0a768d45ce"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44044000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0xb}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x840) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b, 0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c08d57134c4f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4912876adb5f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9d0a768d45ce"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44044000}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b, 0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x840) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2, 0x0, 0x9}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c08d57134c4f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4912876adb5f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9d0a768d45ce"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44044000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x840) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x6000000, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3ad00abe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) clock_getres(0x3, &(0x7f0000000380)) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000580)={0x6000, 0x0, 0x2}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r7) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000005) 00:37:16 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x30}}, 0x0) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b, 0x4}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3ad00abe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) clock_getres(0x3, &(0x7f0000000380)) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000580)={0x6000, 0x0, 0x2}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r6 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r7) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000005) 00:37:16 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2, 0x0, 0x8}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2, 0x0, 0x8}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3ad00abe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) clock_getres(0x3, &(0x7f0000000380)) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000580)={0x6000, 0x0, 0x2}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r7) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000005) 00:37:16 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x41, &(0x7f0000000480)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val, @val={0xc}}}, [@NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x12}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}]}, 0x28}}, 0x401) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x4, 0x4000000, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000001c0)=0x8000) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8, 0x1, r5}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) [ 649.254001][T26536] __nla_validate_parse: 50 callbacks suppressed [ 649.254011][T26536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x41, &(0x7f0000000480)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val, @val={0xc}}}, [@NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x12}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}]}, 0x28}}, 0x401) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x4, 0x4000000, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4) (async) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000001c0)=0x8000) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: socketpair(0x0, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) [ 649.281635][T26546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x41, &(0x7f0000000480)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val, @val={0xc}}}, [@NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x12}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}]}, 0x28}}, 0x401) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x4, 0x4000000, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000001c0)=0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x41, &(0x7f0000000480)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val, @val={0xc}}}, [@NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x12}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}]}, 0x28}}, 0x401) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x4, 0x4000000, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4) (async) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000001c0)=0x8000) (async) 00:37:16 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 3: socketpair(0x0, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) [ 649.301837][T26558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:37:16 executing program 1: openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfd3fd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}, @L2TP_ATTR_IP_SADDR={0x0, 0x18, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x42}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x2e}}}}, [@NL80211_ATTR_KEY={0x7c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "3db32c970ca7a7effecd8d6a1a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e0c775181ad37ba24202282bea"}, @NL80211_KEY_SEQ={0x10, 0x4, "55a62d59085cdcf8d6074e2e"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "38f39077678142dc2c01d11dc4"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44000}, 0x48001) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: socketpair(0x0, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfd3fd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}, @L2TP_ATTR_IP_SADDR={0x0, 0x18, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x42}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x90) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x2e}}}}, [@NL80211_ATTR_KEY={0x7c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "3db32c970ca7a7effecd8d6a1a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e0c775181ad37ba24202282bea"}, @NL80211_KEY_SEQ={0x10, 0x4, "55a62d59085cdcf8d6074e2e"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "38f39077678142dc2c01d11dc4"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44000}, 0x48001) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:37:16 executing program 1: socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: socketpair(0x0, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfd3fd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}, @L2TP_ATTR_IP_SADDR={0x0, 0x18, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x42}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x90) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x2e}}}}, [@NL80211_ATTR_KEY={0x7c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "3db32c970ca7a7effecd8d6a1a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e0c775181ad37ba24202282bea"}, @NL80211_KEY_SEQ={0x10, 0x4, "55a62d59085cdcf8d6074e2e"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "38f39077678142dc2c01d11dc4"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44000}, 0x48001) (async, rerun: 64) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (rerun: 64) 00:37:16 executing program 3: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900f400000000000000"], 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: socketpair(0x0, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900f400000000000000"], 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:16 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900f400000000000000"], 0x28}}, 0x0) 00:37:16 executing program 1: socketpair(0x0, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x29}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x200400c0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="010025bd7800fddbdf25260000000c00990003000000690000000400af000800fe0003fbe34c040008010400930008004200000000003900f2002a24f562177c03dc62e2e49e94aac568579617bd71dda001a791af30d0da02a07bb20d547d938c3eb4eb8fc7c6723a83c322ab191e1730c1fc056bce0000002f00f200d95cb4401f11451755880c70fc486c000000008097a580ffe17a1f90902d1ad2c16a81bf0563978b732e1f5e150a2b80d95c907ddfc345f1a89b90b2b639af43e6c79922f9ffffffffffffff94546f402fa545e90dcfdeae7ac4978f110d800e244855638018d5838e10b2f3da187f22feffbe8400b099fdb2b60504f3a3"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1f4, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd1d6}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff9b}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x3, 0x4, 0x1, 0x81, 0x8001, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x16, 0x30, 0x1b, 0x1f, 0x12, 0x5, 0x3c, 0x6, 0x5, 0x5, 0xc, 0x9, 0x1, 0x60, 0x48, 0x3, 0xb, 0xc, 0x3, 0x5, 0x9, 0x18, 0xc, 0x24, 0x60, 0x48, 0xc, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x2, 0x3, 0x9, 0x16, 0x15, 0x24, 0x60, 0x1b, 0x18, 0x24, 0x48, 0x4, 0x1b, 0x36, 0x30, 0x3, 0xb, 0xb, 0x6, 0x12, 0x6c, 0x16, 0x45, 0x24, 0x48, 0x0, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x5, 0x36, 0x0, 0x1b, 0x36, 0x30, 0x5, 0x6c, 0x36, 0x6, 0x1, 0x1, 0x5, 0x48, 0x16, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x4}, {0x0, 0x4}, {}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x9}, {}, {0x5}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x7, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x8}, {0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x9}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x4, 0xe, 0x1b, 0x48, 0x2, 0x12, 0xb, 0x16, 0xb, 0x2, 0x2, 0x5, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x60, 0x1b, 0x24, 0xb, 0x24, 0x5e, 0x36, 0xb, 0x24, 0xb, 0x2915d69c2ee1f6b7, 0x6, 0x9, 0x1, 0x36, 0x6, 0x60, 0x3, 0x5, 0x1b, 0x6c, 0x18, 0x48, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x5, 0x6, 0xc6b, 0x20, 0xa7bb, 0x2]}}]}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xcbdf}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xf194}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x29}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x200400c0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="010025bd7800fddbdf25260000000c00990003000000690000000400af000800fe0003fbe34c040008010400930008004200000000003900f2002a24f562177c03dc62e2e49e94aac568579617bd71dda001a791af30d0da02a07bb20d547d938c3eb4eb8fc7c6723a83c322ab191e1730c1fc056bce0000002f00f200d95cb4401f11451755880c70fc486c000000008097a580ffe17a1f90902d1ad2c16a81bf0563978b732e1f5e150a2b80d95c907ddfc345f1a89b90b2b639af43e6c79922f9ffffffffffffff94546f402fa545e90dcfdeae7ac4978f110d800e244855638018d5838e10b2f3da187f22feffbe8400b099fdb2b60504f3a3"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1f4, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd1d6}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff9b}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x3, 0x4, 0x1, 0x81, 0x8001, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x16, 0x30, 0x1b, 0x1f, 0x12, 0x5, 0x3c, 0x6, 0x5, 0x5, 0xc, 0x9, 0x1, 0x60, 0x48, 0x3, 0xb, 0xc, 0x3, 0x5, 0x9, 0x18, 0xc, 0x24, 0x60, 0x48, 0xc, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x2, 0x3, 0x9, 0x16, 0x15, 0x24, 0x60, 0x1b, 0x18, 0x24, 0x48, 0x4, 0x1b, 0x36, 0x30, 0x3, 0xb, 0xb, 0x6, 0x12, 0x6c, 0x16, 0x45, 0x24, 0x48, 0x0, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x5, 0x36, 0x0, 0x1b, 0x36, 0x30, 0x5, 0x6c, 0x36, 0x6, 0x1, 0x1, 0x5, 0x48, 0x16, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x4}, {0x0, 0x4}, {}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x9}, {}, {0x5}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x7, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x8}, {0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x9}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x4, 0xe, 0x1b, 0x48, 0x2, 0x12, 0xb, 0x16, 0xb, 0x2, 0x2, 0x5, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x60, 0x1b, 0x24, 0xb, 0x24, 0x5e, 0x36, 0xb, 0x24, 0xb, 0x2915d69c2ee1f6b7, 0x6, 0x9, 0x1, 0x36, 0x6, 0x60, 0x3, 0x5, 0x1b, 0x6c, 0x18, 0x48, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x5, 0x6, 0xc6b, 0x20, 0xa7bb, 0x2]}}]}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xcbdf}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xf194}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) (async) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x29}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x200400c0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1f4, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd1d6}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff9b}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x3, 0x4, 0x1, 0x81, 0x8001, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x16, 0x30, 0x1b, 0x1f, 0x12, 0x5, 0x3c, 0x6, 0x5, 0x5, 0xc, 0x9, 0x1, 0x60, 0x48, 0x3, 0xb, 0xc, 0x3, 0x5, 0x9, 0x18, 0xc, 0x24, 0x60, 0x48, 0xc, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x2, 0x3, 0x9, 0x16, 0x15, 0x24, 0x60, 0x1b, 0x18, 0x24, 0x48, 0x4, 0x1b, 0x36, 0x30, 0x3, 0xb, 0xb, 0x6, 0x12, 0x6c, 0x16, 0x45, 0x24, 0x48, 0x0, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x5, 0x36, 0x0, 0x1b, 0x36, 0x30, 0x5, 0x6c, 0x36, 0x6, 0x1, 0x1, 0x5, 0x48, 0x16, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x4}, {0x0, 0x4}, {}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x9}, {}, {0x5}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x7, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x8}, {0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x9}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x4, 0xe, 0x1b, 0x48, 0x2, 0x12, 0xb, 0x16, 0xb, 0x2, 0x2, 0x5, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x60, 0x1b, 0x24, 0xb, 0x24, 0x5e, 0x36, 0xb, 0x24, 0xb, 0x2915d69c2ee1f6b7, 0x6, 0x9, 0x1, 0x36, 0x6, 0x60, 0x3, 0x5, 0x1b, 0x6c, 0x18, 0x48, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x5, 0x6, 0xc6b, 0x20, 0xa7bb, 0x2]}}]}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xcbdf}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xf194}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) 00:37:16 executing program 3: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, r0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x29}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x200400c0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1f4, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd1d6}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff9b}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x3, 0x4, 0x1, 0x81, 0x8001, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x16, 0x30, 0x1b, 0x1f, 0x12, 0x5, 0x3c, 0x6, 0x5, 0x5, 0xc, 0x9, 0x1, 0x60, 0x48, 0x3, 0xb, 0xc, 0x3, 0x5, 0x9, 0x18, 0xc, 0x24, 0x60, 0x48, 0xc, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x2, 0x3, 0x9, 0x16, 0x15, 0x24, 0x60, 0x1b, 0x18, 0x24, 0x48, 0x4, 0x1b, 0x36, 0x30, 0x3, 0xb, 0xb, 0x6, 0x12, 0x6c, 0x16, 0x45, 0x24, 0x48, 0x0, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x5, 0x36, 0x0, 0x1b, 0x36, 0x30, 0x5, 0x6c, 0x36, 0x6, 0x1, 0x1, 0x5, 0x48, 0x16, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x4}, {0x0, 0x4}, {}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x9}, {}, {0x5}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x7, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x8}, {0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x9}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x4, 0xe, 0x1b, 0x48, 0x2, 0x12, 0xb, 0x16, 0xb, 0x2, 0x2, 0x5, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x60, 0x1b, 0x24, 0xb, 0x24, 0x5e, 0x36, 0xb, 0x24, 0xb, 0x2915d69c2ee1f6b7, 0x6, 0x9, 0x1, 0x36, 0x6, 0x60, 0x3, 0x5, 0x1b, 0x6c, 0x18, 0x48, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x5, 0x6, 0xc6b, 0x20, 0xa7bb, 0x2]}}]}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xcbdf}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xf194}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1f4, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd1d6}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff9b}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x3, 0x4, 0x1, 0x81, 0x8001, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x16, 0x30, 0x1b, 0x1f, 0x12, 0x5, 0x3c, 0x6, 0x5, 0x5, 0xc, 0x9, 0x1, 0x60, 0x48, 0x3, 0xb, 0xc, 0x3, 0x5, 0x9, 0x18, 0xc, 0x24, 0x60, 0x48, 0xc, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x2, 0x3, 0x9, 0x16, 0x15, 0x24, 0x60, 0x1b, 0x18, 0x24, 0x48, 0x4, 0x1b, 0x36, 0x30, 0x3, 0xb, 0xb, 0x6, 0x12, 0x6c, 0x16, 0x45, 0x24, 0x48, 0x0, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x5, 0x36, 0x0, 0x1b, 0x36, 0x30, 0x5, 0x6c, 0x36, 0x6, 0x1, 0x1, 0x5, 0x48, 0x16, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x4}, {0x0, 0x4}, {}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x9}, {}, {0x5}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x7, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x8}, {0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x9}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x4, 0xe, 0x1b, 0x48, 0x2, 0x12, 0xb, 0x16, 0xb, 0x2, 0x2, 0x5, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x60, 0x1b, 0x24, 0xb, 0x24, 0x5e, 0x36, 0xb, 0x24, 0xb, 0x2915d69c2ee1f6b7, 0x6, 0x9, 0x1, 0x36, 0x6, 0x60, 0x3, 0x5, 0x1b, 0x6c, 0x18, 0x48, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x5, 0x6, 0xc6b, 0x20, 0xa7bb, 0x2]}}]}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xcbdf}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xf194}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, r0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000e5a2fbe091b2ea9eb26946b86da0cd76c9b9174d097ec230752da1348bd6aab1e935c9f1c5810a3888c86364e2679747e9b20d6c6adfcc2640defd4965311b912bdf1133c0db119dd0afda5f65f5d73095f9e8b5a40484cc62daae9c425f23"], 0x28}}, 0x0) 00:37:16 executing program 1: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:16 executing program 3: socketpair(0x2, 0x6, 0x0, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, r0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000e5a2fbe091b2ea9eb26946b86da0cd76c9b9174d097ec230752da1348bd6aab1e935c9f1c5810a3888c86364e2679747e9b20d6c6adfcc2640defd4965311b912bdf1133c0db119dd0afda5f65f5d73095f9e8b5a40484cc62daae9c425f23"], 0x28}}, 0x0) 00:37:16 executing program 3: socketpair(0x2, 0x6, 0x0, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: socketpair(0x2, 0x6, 0x0, 0x0) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000e5a2fbe091b2ea9eb26946b86da0cd76c9b9174d097ec230752da1348bd6aab1e935c9f1c5810a3888c86364e2679747e9b20d6c6adfcc2640defd4965311b912bdf1133c0db119dd0afda5f65f5d73095f9e8b5a40484cc62daae9c425f23"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000e5a2fbe091b2ea9eb26946b86da0cd76c9b9174d097ec230752da1348bd6aab1e935c9f1c5810a3888c86364e2679747e9b20d6c6adfcc2640defd4965311b912bdf1133c0db119dd0afda5f65f5d73095f9e8b5a40484cc62daae9c425f23"], 0x28}}, 0x0) (async) 00:37:16 executing program 1: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900f400000000000000"], 0x28}}, 0x0) 00:37:16 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) socketpair(0x2, 0x6, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: socketpair(0x2, 0x6, 0x0, 0x0) 00:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0xa}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 0: openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x2c, 0x3, 0x2, &(0x7f0000000300)) r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "1807aabd806c89ecbd826017077f3299"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4e48dfff27770faf87e1677357725798"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "583c9bd429253f3de9588d1e7f0fd80e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d9e0fce36447672bc1c0e102a1673964"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e79d94c0e9803a023648612249452146"}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x4000050) 00:37:16 executing program 1: socketpair(0x2, 0x6, 0x0, 0x0) 00:37:16 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r5, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) r8 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r15, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r16}, {0x4}}]}, 0x20}}, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r17, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r18, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r19}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x118, r10, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r13}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x6e7d3794c8a3f2c5}, 0x20000001) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="30000e00", @ANYRES16=r2, @ANYBLOB="1814e648465095465d34056fb48afd482ffe1983df6b43f5d5a077ca0873a079f58ad443191c6c61", @ANYRES32=r6, @ANYBLOB="1000b000000080030200d60c0000020004009300"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x4000050) 00:37:16 executing program 1: socketpair(0x2, 0x6, 0x0, 0x0) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x9effffff, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x4000050) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x3f000000, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x4000050) 00:37:16 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r5, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) r8 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r15, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r16}, {0x4}}]}, 0x20}}, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r17, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r18, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r19}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x118, r10, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r13}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x6e7d3794c8a3f2c5}, 0x20000001) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="30000e00", @ANYRES16=r2, @ANYBLOB="1814e648465095465d34056fb48afd482ffe1983df6b43f5d5a077ca0873a079f58ad443191c6c61", @ANYRES32=r6, @ANYBLOB="1000b000000080030200d60c0000020004009300"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0xffffff9e, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x60044040) socketpair(0x2, 0x3, 0x3, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000001a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000580)={0x1440, r7, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "df5fdafd9f82e8fa"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "c5c3db284a1a8be3"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "8c9fa9a5faaa9ee1"}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x0, 0x4, 0x2, 0x2, 0x200, 0x2, 0x26]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x3, 0x4, 0x24, 0x1b, 0x1b, 0x35, 0x5, 0x2, 0x60, 0x1b, 0x12, 0x6c, 0x12, 0x12, 0xb, 0x1d, 0x30, 0x1b, 0x1, 0x12, 0xc, 0x5, 0x5, 0xd, 0x18, 0xb, 0x9, 0x5, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x401, 0x100, 0x8, 0x400, 0x5, 0x77, 0x7ff]}}]}]}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x80c, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @random="25f39fd64d21", {0x7, 0xc}}, 0xf4, @default, 0x5118, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0x1, 0x5d, 0x9, 0x1}}, @void, @val={0x5, 0xe6, {0x81, 0xe5, 0x9, "a0768d82249d2a4ef5998129390f16b756a2254814343c8f5036b69099c7fe6dcc2f1534faef8778a032e946224f7cb8851a69c839c394d97c407967f4685786411a5e9c288d0a8afe9c9d4a86cfbac5984f6a4e253947a5eecfe35fae1b9b5c096902bf94a503f8e10cd6682b733e03e8e1e2e5b1c11681f0cf5f05a8cbe252495c5e9563ab53860d40763a555e190716712705e7a9fa518ab029f7a4b4013c2d3c0aeecab5862c5560ddb93887298f9a63eccbe63c5edc2d0a9c7093c47759ed32cd46c7208477504efdc2b1a34cf27ba85cadbc1bfbca961e5f93e6269d1fa525c7"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x4, 0x4, 0x2}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x1}}, @void, [{0xdd, 0xeb, "c01182dcf0e92835a23c63b4cfacf696a3bfeeb3223bffc205256a98688f077df0b07a9d7a1379572eddc1682b6b3bd6d0d57461757bc582849c043ffde9abb8dc9d384833c1cb3b30ea0f55a5d8ff7ec45d25aad504f1facec34a7479bfe3bdeb269029f5324deec958c470ec7d4fc8ed565e9ae3bd912681a1302aab6d23c2f958a335a2702cc865d014547d5cf0a7ef64605ac39781dc21317d9d99e8bd19e2b8ca59deb79b1bdfea12d5d83c52492420e5a985c7088722b5b1252cb9b80a06fa662f2e1ddb969c02002b4f81a06d0f4cf97ea801233252fc7822b9fc8d72910838651b9f30e254533b"}, {0xdd, 0x2c, "47957e44b476fbdf12494685303b8be3ce71da9b23b23a963d4885f2a0cf2858bb330776a11ca3ef57f465b7"}, {0xdd, 0xfa, "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"}, {0xdd, 0xc7, "a523cc5384a0961eca590174007ea83cbbdca6f6caff596a903c58069a7665639fa4b204ce535c730b3ed6aea29168887a326a72770f34eb99a08124130db68de307565c164fab0a9ceed08c03c01208e77a51f13e74a0794de88c1ed60dff4648108b3e0d308408e8a64c6e2fb3730d9019935716d4327ec5062fbf7e4a449ce9a401805e9c4aab6b8308b6dfdc4414c564b709834da32d77f39cd2e7f5df8a827623beb6b110b5a91e8f6b44dae1121d1d584525a1f9f6bdc655ddf83b2460a90edb64ea7ca7"}, {0xdd, 0xf4, "bd8294a152cfb8c0a841214ba759baad35e28bf664ec4b7d0a524946e16f8284362a4dfb9eed2105151a257c3587d820751e12ac92cf4d2c461c8d2744112af7165ad60faae9b9f4a56dc193ed909c725a25a6527b205e75d934695c0891d0acdb89e8eecaa0d600d4fa9a4c9711ea061de9f8e91798c3051538e452ab589dd336be6d9800575c0c6012901dc64c273fdd2781687883668cd177890702a78a508680a3b37ceee9a50df5c3cb9a9c77ee78e528a140edf78650899089435279f636701d503a2fc662e9911ae65c4792cf51268b8410efb8c00d88ea0ee7697f9607a5acc3a58786b806639243fc3dee9ef6150190"}, {0xdd, 0xd9, "395d5ca22e058aabb6c21a8690e4cb787eb49b115d9ff61285d469dc991111afc2c531872918c5f19c9a5cfdcb0361512675cf3c6dc50acca0db47b39ba8cec81762c9bcbd9e181e25f22ea1422af53d8e53ca6ab68dd25e80c252dc9173ed350a6e01b0baf4d72efd21305815005e42f3a43d5c0e85ae115fdef73cc33af8799edb2c0f3c7c32bf0091a7c616111725278836828f4e74511c13a9675626a57b2960e5b3263c90a629b3dda629a533600d839c77e27293e3e35621f708171c939ca9db491f3fa5db4e9d1a77912aba1f61f9c899c575dcf2fa"}, {0xdd, 0x98, "d4dd1d371cbfffe1c6f1f836625c55e69d8df86909b24bfd8b8834520bb4deb3ac09ee9812f71494174be4e33a0c25c8759d92e8ce907431d5acca91db754165ca2dcd6f7aff13385c080a7a1b3bb34621add77566cc497e2b5690b88e6e8151dc5685d874e42b804d226f295c0b202194adc5ec205c876bb6b45bde7303ea69c5a2d40319f33e47118128031c0257f42e612baedd4b8f4d"}, {0xdd, 0x8d, "8563dfad26bc024bdb4d45ed833d7e073348892cf2dab15bfd8eb900a844c35452341ea35358e65e436c44165ec7a1786b6777e9b91240df9a20972179a0b6d803014e5930224a03a83a41ecf87f74433fbf6c3f10c2a9ed1c68964428e03129acf83795048e29edbf3599de1a451d13af28b888e27e2b3a2a982f4f1da7121837138addbe5e21f4843a803c53"}, {0xdd, 0x61, "85d88c5891309af293a507badf2eb4c3d35b2035c709639418385821fe742725c1c84b93919ffaf330590b19f994a49adacb42c7385610669782efb6586595d526c0331b44f764dc3eded8776f7d8a100d20710db02363e8ff497cffb670405f12"}, {0xdd, 0x91, "7b4e911b52b8b4049be60894aed885dff0063f10ee740ed3b8661c054b20c0dd782a1e5372511d825a49484ba80e8f3cc79aa97972605876bd475de17a4562bfe57d4e23ed9736aecceb9a00f92eba537b2c0075e9082147dc6d78e5d62431a66f30818df74d789efb7d2d85a21eb6a9034aba238cf794a580a413f0293d9ffdac15a54f15486c1c6e68b96e30c3d220df"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x7d, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x22}, 0x9, 0x1, @device_a, 0x1, 0x22d, 0x3}}, @rann={0x7e, 0x15, {{0x0, 0x24}, 0xff, 0xfa, @broadcast, 0xffffffff, 0xee, 0x80000000}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x18, {0xb81, "616d4b19463a", @long="b790bdaed4623bd23a88e2f353a81c00"}}, @ht={0x2d, 0x1a, {0x1, 0x2, 0x6, 0x0, {0x200, 0x3f, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8, 0x1, 0xff}}, @dsss={0x3, 0x1, 0x4a}, @peer_mgmt={0x75, 0x8, {0x1, 0x5, @val=0x2, @val=0x35, @void}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x174, 0x7f, [@supported_rates={0x1, 0x6, [{0xb}, {0x30, 0x1}, {}, {0x12}, {0x24}, {0x12}]}, @perr={0x84, 0xf5, {0x3, 0xf, [@not_ext={{}, @device_a, 0x5, "", 0x1c}, @ext={{}, @broadcast, 0x9, @device_a, 0x22}, @not_ext={{}, @device_a, 0x3f, "", 0x28}, @ext={{}, @device_a, 0x3e93, @device_a, 0x34}, @ext={{}, @broadcast, 0x2, @broadcast, 0x1b}, @ext={{}, @device_b, 0x1f, @device_b, 0x18}, @not_ext={{}, @broadcast, 0x4, "", 0x16}, @not_ext={{}, @broadcast, 0x1, "", 0x2c}, @not_ext={{}, @broadcast, 0xc20f, "", 0x1a}, @ext={{}, @device_b, 0x1, @broadcast, 0x6}, @ext={{}, @device_a, 0x6, @device_b, 0x40}, @ext={{}, @device_b, 0x1, @device_b, 0x7}, @not_ext={{}, @broadcast, 0x741, "", 0x15}, @ext={{}, @broadcast, 0xb67, @device_a, 0x2b}, @not_ext={{}, @device_a, 0x1, "", 0x11}]}}, @random_vendor={0xdd, 0x6f, "8835e1f04ca518abf08c0c1f54012d22602acb024d45fc71be2746b390cc3ff4cb24ac5d84f172b7c315f844fd6c3a0e724722b6cfccac46afdfb71b421908bcdb8be8a5e87f8beafcbaf295d9638fcfb62346c9f170d290a53f0315fe0769d8df8503982f7215a7d9ac5083e45080"}]}, @NL80211_ATTR_FTM_RESPONDER={0x124, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xe3, 0x3, "3b026f1b158b728a73bf0554b3f68d7cc6f935af9d34ee1a9924c80d5ca77cc8d8dfd854442d898016f09dc4a3016f3f0c3dbfd75a54371738f6d6df4614554c92ac016fdc1491766502e1ee0860cb918a22bf1b4c1934788e442b968f12fe966ce09e0d3a88a4c4c7e701cde82726837af0db548c4ec3f6f441566fc979ca1b2dd7da3e7c0511e1e7065f57e37881f85bbd31449b26ce30ba9cc331bc6ad106e5d73b3591d4f9b9df675867b54647ab21b99f1a9c4604b5fa4e29ee8f6d6516485e70a12b64e52b010a1e3ea5e3010766d7f4000a6daa54c5ffd05a6038f1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3c, 0x3, "a070cb25f538cc77d53af15ad8acba2905dd8a2167cfa03a9cb67358803fa199178e384aed7b28213eb5d2ccc1164fa29b46453f64462740"}]}, @NL80211_ATTR_BEACON_HEAD={0x77d, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @device_b, @initial, {0x4, 0x4e}}, 0x9, @random=0x9, 0x2074, @val={0x0, 0x18, @random="a17de16fe604a3deb6a00055f9db605df7876fa3f16800e6"}, @val={0x1, 0x8, [{0x6}, {0x9}, {0x36, 0x1}, {0x24}, {0x60}, {0x4}, {0x4}, {0x2, 0x1}]}, @val={0x3, 0x1, 0x38}, @val={0x4, 0x6, {0xab, 0x7e, 0xb85a}}, @void, @val={0x5, 0x50, {0x81, 0x7c, 0xff, "9cab920f31f7edebfc82ab793192bba30320ca4deb0fc0b3d4a9f726c340298f441edfd5de8c1871b657d04743e49f94e7378a2a3a895ab5314585e3dc18bb299ec02366ae4c6e2a8e230aa073"}}, @val={0x25, 0x3, {0x1, 0x95, 0xff}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x9, 0x1, 0x9}}, @val={0x2d, 0x1a, {0x8, 0x1, 0x6, 0x0, {0x100, 0x1fff, 0x0, 0x7, 0x0, 0x1}, 0x401, 0x9, 0xfe}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xd3, "aacf210e07a6a02c9d2a770b36757d23eb0c12f3adfa84b875816168f2654f9cbba64eab3f217f33a39b8a4258cda70ea4e8833152a7c9d0b515f8f551d376ac839e3c106902f024ad2301111521c1bc5f64b0f5b53957ac4db4c60acb8f048b7148c22ab54f062b65d740cd0db185277cf3a6f4748c3b4c88ed0241f6503a5a420f994ab8ef0cda614fd71c563f10c4c9944f7c42ed5db1e50de7e043bcd1e77210bac3f524979a8af92bdb6d9871549ffacd2a2c04c17225b72f497a739759d27e7c8c6124cfdd18b455e0594c047ca60759"}, {0xdd, 0x44, "1323fbd60b39a022809231ebbd2328a9af74b7612feee043a3ba6df0a5b637d7cc522fb329fbba7ccd950a1491c54428cb036cd08d0db0b617135fc8bcddedba02f9a37e"}, {0xdd, 0xe7, "78b6cb9dab0e24c6971d93a472ec1cbf9b26b428fca2b3e12c78d4d8b119cbad30273f6902e13a243cf56f73550b025ca4e220ff61eb45ed63e3b1cbb2749e53037cf9d49932422105fa92c6098673b94dae64d5678d9480fb62345091e7ae047a2a0ac58245439f069c6d4376d8fec3a2c96becfeb39c6a823cf8ea2103abc54e66d405f323949a21c33c3dfe7f9d38140415cb12a5a1fa804ed224e5ae5c21f37b4e6d5b236cea506b6fbf93e1bd6d85140bacd6f707521445f7ca87cd61c2b74f9957ba8db768fbe782e4298984dda1fc663d9ddbba18694c081627f535070078f49613abd0"}, {0xdd, 0xbe, "382f579318344dbc5efa90c8e9212b5fe314630186188638b4a85b5e37def803ef6518f6f55496c932a1bc2fd91d9a4e29c9b7f2d2c8f2987468763393596c8899a246dac6e5f248fdded541c1f7767d268e97ee5dcaf43b8def206ff2eb8d9081db42bdaa13d0276705e78de03da5be6f13287278d809e9690a2312cdb6002f06cfdad33f7bab89cff249b497ea69d751833c6b29d23a4f4c0a280f1c9f5ba7e91beb3318cd870ac538b5e8d8cef2ce10f004084a2d3c9f765e8d3c5af0"}, {0xdd, 0xe8, "aa64b2bb0ea71bf741135097f8269cf35cc1d4d80da7df571b4620b0f75fefa747a2a324a0d37b192da636cfa5c5accc90cb09cc41af886f76f760d1dfaf04d701420363cd795518ef633ed7d4d680c2ef5ea10d8ccca78edd761c290ef10877976a445ad31d03debc017b43e1f21cffc671529617d428fb1d5fe05882cc0f068af9a5d3156bac06640e2d6a6b25bfb84dcc419442b28753116f9b86eac279e9f61ba49e14e1079a55acfd5dadee8633ff34b83f23ca9bc513140b53785a3962e2ff453114ffbe1165add6f3fa2ed407b7e8a68070a3ebf2d1d484d8d3e0d84ba68f3fc7cdb55a4e"}, {0xdd, 0x94, "fc80830c729c908a861c4980df5f6bf80adec884951a7678c297dba175ddeb22bc555336fc459112b63639b1e07a8657ef9e9594df6934c0987bd612cb55cee38b323457d9c94a4d687206a7800c513bd1f16801eacb0f6942e145c454811b985b512e8228bcb09f255748c7c27312cf29273f463f56d11b0e93a0d85465d57e6f3d53e9d3fe65cb061122b65b9849b9e33ec874"}, {0xdd, 0x8f, "f53037133a6598f81af8c1ced5262e802fadd48d60431910df4378075eee10e0e476e2ff1082e3d958bcb149a68e4df8a1bd254c96aff5b4e3dc56b1deec4cf52a0dd5ecfc3d8243ed29eec7840319d5d20d24ad7327889841306083c8774d92ae8b73b8a0c9c813957b4f510667e295ec09bb09424a6e1ee859891004e8b5593a9d5743b185c6ed4c35af9c3797bd"}, {0xdd, 0xeb, "cc8145ab98f0b9d8bc845905d618d08e61bf08a42a2e1e425976e7171cd45e92d2ca231df464eb82e7da1e73c5fc631af07dcce036f52909c4bf79f2efd45a967e81bb22e2bd76895dfde22c8c6f6badcc724009d6c4aac84fc333a2002aa928b572f7f49a868575ce2cfa3075a28a6bd98d3ce302cf195fa8eb9505cc321c36dfc083b15cf9caf9a8c6a6d76832e4fc2629a64fa758e8b419f8c94e4cb1ed7042898eedf8000366aebac13df8915374da292a52b170f7c4ce73b0a45d9f8c41e1fee7199c629b6ff6fdcd0ffcbfa8e779d1b3d836b603ac56203b15448f27f13dfb0bb23863997f3ec93a"}, {0xdd, 0xde, "3300ebc3a398f66c7b96481043031d6e995e67f308c49ad240c490e9fe1a9703be03508a92aa596fe4b307918b11ee7d9941314cb2da78af07f22231c18ea65b9c2c482c18d11362616b05f44dba034f837f64705c2c4b2eff07d1485494686797f1721ff6990e047accdc93fa27bd9f25a2e67d53bb902db3495ee3a39dd7c1c324ffc83e4dc27d11b8a92606c37ac30bfd72810d49353da10bc8aad561143674fe7ca41504cdf5551b272aee628707573b45eeec1a6276810ff460381f1f68c080111bddf3c2766f40ba978ec0a3c49864979084c39c6b53368d4374d9"}]}}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_TX_RATES={0xec, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff01, 0x8001, 0x8, 0x8, 0x5, 0x5, 0x8, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x9}, {0x2, 0x5}, {0x5, 0x3}, {0x3, 0x7}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x1}, {0x6, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x2, 0x9}, {0x3, 0x7}, {0x0, 0x7}, {0x7}, {0x4, 0x7}, {0x0, 0x1}, {0x5}, {0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x6, 0x3}, {0x4, 0x6}, {0x6, 0x5}, {}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x7c, 0x6, 0x1f, 0x2, 0x16, 0xbba1b05a4c9f4f9a, 0x6c, 0xe, 0x3, 0x1, 0x18, 0x6c, 0x1, 0x4, 0x24, 0x60, 0x9, 0x18, 0x18, 0x5, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x4, 0xc, 0x1, 0x2, 0xc, 0x6c, 0x60, 0x30, 0x2, 0x6c, 0x6c, 0x6, 0x16, 0x0, 0x77, 0x5, 0x5, 0x36, 0x4, 0x30, 0x16, 0x0, 0x1b, 0xc, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0xa}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x1}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x5, 0x2}, {0x2, 0x4}]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x1440}, 0x1, 0x0, 0x0, 0x24040001}, 0x20000004) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r12}, {0x4}}]}, 0x20}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r13, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r14, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r15}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001b40)={'lo\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001b80)={0x2b4, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc176}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe6c}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x2b4}}, 0x20000000) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x104, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "960dbe47f5e64ef51544e9061c1b1f0a"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c08e756c6c95a13701c6536dbb86d658"}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x94) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r19, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r20, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r20, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008014}, 0x20) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x3c000000, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x3c00, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x28000000, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") socketpair(0x5, 0x2, 0x0, &(0x7f0000000300)) 00:37:16 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r5, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) r8 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r15, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r16}, {0x4}}]}, 0x20}}, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r17, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r18, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r19}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x118, r10, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r13}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x6e7d3794c8a3f2c5}, 0x20000001) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="30000e00", @ANYRES16=r2, @ANYBLOB="1814e648465095465d34056fb48afd482ffe1983df6b43f5d5a077ca0873a079f58ad443191c6c61", @ANYRES32=r6, @ANYBLOB="1000b000000080030200d60c0000020004009300"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 00:37:16 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") socketpair(0x5, 0x2, 0x0, &(0x7f0000000300)) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x360, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x360, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:16 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) r6 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r10, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r11}, {0x4}}]}, 0x20}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r13, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r14}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x118, r8, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x6e7d3794c8a3f2c5}, 0x20000001) 00:37:17 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") socketpair(0x5, 0x2, 0x0, &(0x7f0000000300)) 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x360, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:17 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") socketpair(0x5, 0x2, 0x0, &(0x7f0000000300)) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r15, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r16}, {0x4}}]}, 0x20}}, 0x0) 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) 00:37:17 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") socketpair(0x5, 0x2, 0x0, &(0x7f0000000300)) 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x360, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 00:37:17 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") socketpair(0x5, 0x2, 0x0, &(0x7f0000000300)) 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x174, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x81, 0x80, 0x9, 0x3f}, {0x7e5, 0xfa, 0x80, 0x4}, {0x528, 0x3, 0xda, 0x8001}, {0x0, 0x7, 0x0, 0xff}, {0x3f, 0x76, 0x5, 0x81}, {0x3, 0x4, 0x1, 0xb3b}, {0x7, 0x20, 0x0, 0x6111da04}]}}}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r1, 0x1}, 0x14}}, 0x4000050) 00:37:17 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") 00:37:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) 00:37:17 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") 00:37:17 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 00:37:17 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r12, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 00:37:17 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:37:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") 00:37:17 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) 00:37:17 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:37:18 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 00:37:18 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:18 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) 00:37:18 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:18 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r3, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:18 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r3, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:18 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:18 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r3, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r3, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:18 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r3, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 1: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 1: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 1: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 2: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 2: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 2: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:19 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x20000080) 00:37:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x20000080) 00:37:20 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x20000080) 00:37:20 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 0: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x20000080) 00:37:20 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:20 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:20 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:20 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:20 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 1: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:21 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 0: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:21 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:21 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:21 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 0: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 1: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 0: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:21 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:22 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:22 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x20000080) 00:37:22 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:22 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:22 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000040)="11f8a12ea7d700ea74160b8488e459512f8a5a9e96") 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) 00:37:22 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) r6 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r10, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r11}, {0x4}}]}, 0x20}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r13, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r14}, {0x4}}]}, 0x20}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x20, r16, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r17}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x118, r8, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x6e7d3794c8a3f2c5}, 0x20000001) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x20000080) 00:37:23 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:23 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r2, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:23 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:23 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:23 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:23 executing program 1: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 1: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:24 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 1: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:24 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:24 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:24 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:24 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:24 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:25 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:25 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:25 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:25 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:25 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:25 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:25 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:25 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:25 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0xe00, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x181004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:25 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:25 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:25 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:25 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:25 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) 00:37:25 executing program 3: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:25 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:25 executing program 3: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:25 executing program 3: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:37:25 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:25 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:25 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:25 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:25 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 00:37:25 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) 00:37:25 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) 00:37:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x3c, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x3c, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x3000000, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x8, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x800, {0x3, 0x800, 0x7f}}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400, {0x0, 0x4f3, 0x200, 0x6}}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="de28221a2498"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x3ff, 0x1, 0x5, 0x8, 0xffeb, 0x1, 0x7, 0x401, 0x42e, 0xe680, 0x3, 0x8000, 0x5, 0x200, 0x8, 0x6]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 00:37:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x14000000, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 658.595950][T27956] validate_nla: 11 callbacks suppressed [ 658.595960][T27956] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 00:37:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x2800, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) 00:37:25 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x800, {0x3, 0x800, 0x7f}}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400, {0x0, 0x4f3, 0x200, 0x6}}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="de28221a2498"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x3ff, 0x1, 0x5, 0x8, 0xffeb, 0x1, 0x7, 0x401, 0x42e, 0xe680, 0x3, 0x8000, 0x5, 0x200, 0x8, 0x6]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 00:37:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x33fe0, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 0: socketpair(0x2, 0x3, 0x21, &(0x7f0000000300)) 00:37:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x3, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x402, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 658.790278][T27967] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 00:37:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x471, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x800, {0x3, 0x800, 0x7f}}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400, {0x0, 0x4f3, 0x200, 0x6}}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="de28221a2498"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x3ff, 0x1, 0x5, 0x8, 0xffeb, 0x1, 0x7, 0x401, 0x42e, 0xe680, 0x3, 0x8000, 0x5, 0x200, 0x8, 0x6]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8810}, 0x0) [ 658.858276][T27986] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 00:37:25 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) 00:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) [ 658.951101][T27992] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 00:37:26 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x400300, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) 00:37:26 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f0000000300)) 00:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x1400, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x4418, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 659.040943][T28013] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 00:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f0000000300)) 00:37:26 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f0000000300)) 00:37:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 1) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) [ 659.174391][T28060] FAULT_INJECTION: forcing a failure. [ 659.174391][T28060] name failslab, interval 1, probability 0, space 0, times 0 00:37:26 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 659.179614][T28060] CPU: 3 PID: 28060 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 659.184056][T28060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 659.188269][T28060] Call Trace: [ 659.189748][T28060] [ 659.190825][T28060] dump_stack_lvl+0x125/0x1b0 [ 659.192863][T28060] should_fail_ex+0x496/0x5b0 [ 659.194544][T28060] should_failslab+0x9/0x20 [ 659.196267][T28060] __kmem_cache_alloc_node+0x2fd/0x350 [ 659.198689][T28060] ? tomoyo_realpath_from_path+0xb9/0x710 [ 659.201027][T28060] ? lock_acquire+0x464/0x510 [ 659.203056][T28060] ? tomoyo_realpath_from_path+0xb9/0x710 [ 659.205531][T28060] __kmalloc+0x4f/0x100 [ 659.207303][T28060] tomoyo_realpath_from_path+0xb9/0x710 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 659.209319][T28060] ? tomoyo_profile+0x47/0x60 [ 659.211299][T28060] tomoyo_path_number_perm+0x243/0x590 [ 659.213343][T28060] ? tomoyo_path_number_perm+0x1eb/0x590 [ 659.215341][T28060] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 659.217434][T28060] ? ksys_write+0x12f/0x250 [ 659.219056][T28060] ? reacquire_held_locks+0x4b0/0x4b0 [ 659.220990][T28060] ? reacquire_held_locks+0x4b0/0x4b0 [ 659.222889][T28060] ? bit_wait_timeout+0x160/0x160 [ 659.224710][T28060] ? __fget_files+0x279/0x410 [ 659.226392][T28060] ? __fget_files+0x279/0x410 [ 659.228066][T28060] security_file_ioctl+0x72/0xb0 [ 659.229858][T28060] __do_compat_sys_ioctl+0x5d/0x330 [ 659.231724][T28060] __do_fast_syscall_32+0x61/0xe0 [ 659.233625][T28060] do_fast_syscall_32+0x33/0x70 [ 659.235373][T28060] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 659.237670][T28060] RIP: 0023:0xf7f81579 [ 659.239127][T28060] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 659.245975][T28060] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 659.248950][T28060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 659.251710][T28060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.254479][T28060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.257320][T28060] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 659.260145][T28060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.262995][T28060] 00:37:26 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:26 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 659.265925][T28060] ERROR: Out of memory at tomoyo_realpath_from_path. 00:37:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 2) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:26 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:26 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000300)) 00:37:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 659.437322][T28097] FAULT_INJECTION: forcing a failure. [ 659.437322][T28097] name failslab, interval 1, probability 0, space 0, times 0 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x0) [ 659.442970][T28097] CPU: 0 PID: 28097 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 659.447596][T28097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 659.452011][T28097] Call Trace: [ 659.453396][T28097] [ 659.454689][T28097] dump_stack_lvl+0x125/0x1b0 [ 659.456562][T28097] should_fail_ex+0x496/0x5b0 [ 659.458668][T28097] should_failslab+0x9/0x20 [ 659.460787][T28097] __kmem_cache_alloc_node+0x2fd/0x350 [ 659.463300][T28097] ? tomoyo_encode2+0x100/0x3d0 00:37:26 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 659.465239][T28097] ? tomoyo_encode2+0x100/0x3d0 [ 659.467163][T28097] __kmalloc+0x4f/0x100 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x0) [ 659.468809][T28097] tomoyo_encode2+0x100/0x3d0 [ 659.470721][T28097] ? rcu_is_watching+0x12/0xb0 [ 659.472494][T28097] tomoyo_encode+0x29/0x50 [ 659.474440][T28097] tomoyo_realpath_from_path+0x196/0x710 [ 659.476888][T28097] tomoyo_path_number_perm+0x243/0x590 [ 659.479238][T28097] ? tomoyo_path_number_perm+0x1eb/0x590 [ 659.481724][T28097] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 659.484335][T28097] ? ksys_write+0x12f/0x250 [ 659.486273][T28097] ? reacquire_held_locks+0x4b0/0x4b0 [ 659.488221][T28097] ? reacquire_held_locks+0x4b0/0x4b0 [ 659.490479][T28097] ? bit_wait_timeout+0x160/0x160 [ 659.492679][T28097] ? __fget_files+0x279/0x410 [ 659.494558][T28097] ? __fget_files+0x279/0x410 [ 659.496243][T28097] security_file_ioctl+0x72/0xb0 [ 659.498065][T28097] __do_compat_sys_ioctl+0x5d/0x330 [ 659.499942][T28097] __do_fast_syscall_32+0x61/0xe0 [ 659.501773][T28097] do_fast_syscall_32+0x33/0x70 [ 659.503595][T28097] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 659.505960][T28097] RIP: 0023:0xf7f81579 [ 659.507654][T28097] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 659.516035][T28097] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 659.519423][T28097] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 659.522271][T28097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.525129][T28097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.527998][T28097] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 659.531138][T28097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.534103][T28097] [ 659.536411][T28097] ERROR: Out of memory at tomoyo_realpath_from_path. 00:37:26 executing program 0: socketpair(0x2, 0x2, 0x0, 0x0) 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x0) 00:37:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:26 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 3) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:26 executing program 0: socketpair(0x2, 0x2, 0x0, 0x0) [ 659.683486][T28121] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 659.694752][T28123] FAULT_INJECTION: forcing a failure. 00:37:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 659.694752][T28123] name failslab, interval 1, probability 0, space 0, times 0 [ 659.699734][T28123] CPU: 3 PID: 28123 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 659.703366][T28123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 659.707094][T28123] Call Trace: [ 659.708422][T28123] [ 659.709838][T28123] dump_stack_lvl+0x125/0x1b0 [ 659.711565][T28123] should_fail_ex+0x496/0x5b0 [ 659.713301][T28123] should_failslab+0x9/0x20 [ 659.714953][T28123] __kmem_cache_alloc_node+0x2fd/0x350 [ 659.716956][T28123] ? __get_vm_area_node+0xe1/0x3d0 [ 659.718830][T28123] kmalloc_node_trace+0x22/0xd0 [ 659.720610][T28123] __get_vm_area_node+0xe1/0x3d0 [ 659.722427][T28123] __vmalloc_node_range+0x27a/0x1540 [ 659.724346][T28123] ? kvm_dev_ioctl+0x210/0x1c20 [ 659.726130][T28123] ? kvm_dev_ioctl+0x210/0x1c20 [ 659.727909][T28123] ? reacquire_held_locks+0x4b0/0x4b0 [ 659.729862][T28123] ? delayed_vfree_work+0x70/0x70 [ 659.731693][T28123] ? vsprintf+0x30/0x30 [ 659.733232][T28123] ? _raw_spin_unlock+0x28/0x40 [ 659.735009][T28123] ? alloc_fd+0x2da/0x6c0 [ 659.736600][T28123] ? kvm_dev_ioctl+0x210/0x1c20 [ 659.738474][T28123] __vmalloc+0x6d/0x90 [ 659.740298][T28123] ? kvm_dev_ioctl+0x210/0x1c20 [ 659.742169][T28123] kvm_dev_ioctl+0x210/0x1c20 [ 659.743887][T28123] ? reacquire_held_locks+0x4b0/0x4b0 [ 659.745843][T28123] ? bit_wait_timeout+0x160/0x160 [ 659.747668][T28123] ? __fget_files+0x279/0x410 [ 659.749576][T28123] ? kvm_vcpu_stats_release+0x80/0x80 [ 659.751518][T28123] ? __fget_files+0x279/0x410 [ 659.753234][T28123] ? bpf_lsm_file_ioctl+0x9/0x10 [ 659.755025][T28123] ? kvm_vcpu_stats_release+0x80/0x80 [ 659.756985][T28123] __do_compat_sys_ioctl+0x2bf/0x330 [ 659.758893][T28123] __do_fast_syscall_32+0x61/0xe0 [ 659.760724][T28123] do_fast_syscall_32+0x33/0x70 [ 659.762494][T28123] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 659.764788][T28123] RIP: 0023:0xf7f81579 [ 659.766275][T28123] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 659.773177][T28123] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 659.776173][T28123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 659.779233][T28123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.782118][T28123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.784990][T28123] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 659.787854][T28123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.790711][T28123] [ 659.793402][T28123] syz-executor.1: vmalloc error: size 39320, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 659.799287][T28123] CPU: 3 PID: 28123 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 659.802922][T28123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 659.806546][T28123] Call Trace: [ 659.807764][T28123] [ 659.808878][T28123] dump_stack_lvl+0x125/0x1b0 [ 659.810580][T28123] warn_alloc+0x24a/0x3a0 [ 659.812135][T28123] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 659.814119][T28123] ? __kmem_cache_alloc_node+0x2fd/0x350 [ 659.816131][T28123] ? __kasan_kmalloc+0x86/0xb0 [ 659.817889][T28123] ? __get_vm_area_node+0x281/0x3d0 [ 659.820173][T28123] __vmalloc_node_range+0xc13/0x1540 [ 659.822168][T28123] ? kvm_dev_ioctl+0x210/0x1c20 [ 659.823953][T28123] ? reacquire_held_locks+0x4b0/0x4b0 [ 659.825972][T28123] ? delayed_vfree_work+0x70/0x70 [ 659.827845][T28123] ? vsprintf+0x30/0x30 [ 659.829400][T28123] ? _raw_spin_unlock+0x28/0x40 [ 659.831226][T28123] ? alloc_fd+0x2da/0x6c0 [ 659.832842][T28123] ? kvm_dev_ioctl+0x210/0x1c20 [ 659.834671][T28123] __vmalloc+0x6d/0x90 [ 659.836181][T28123] ? kvm_dev_ioctl+0x210/0x1c20 [ 659.838045][T28123] kvm_dev_ioctl+0x210/0x1c20 [ 659.839806][T28123] ? reacquire_held_locks+0x4b0/0x4b0 [ 659.841804][T28123] ? bit_wait_timeout+0x160/0x160 [ 659.843682][T28123] ? __fget_files+0x279/0x410 [ 659.845427][T28123] ? kvm_vcpu_stats_release+0x80/0x80 [ 659.847407][T28123] ? __fget_files+0x279/0x410 [ 659.849164][T28123] ? bpf_lsm_file_ioctl+0x9/0x10 [ 659.851000][T28123] ? kvm_vcpu_stats_release+0x80/0x80 [ 659.853007][T28123] __do_compat_sys_ioctl+0x2bf/0x330 [ 659.854969][T28123] __do_fast_syscall_32+0x61/0xe0 [ 659.856840][T28123] do_fast_syscall_32+0x33/0x70 [ 659.858824][T28123] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 659.861215][T28123] RIP: 0023:0xf7f81579 [ 659.862723][T28123] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 659.869771][T28123] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 659.872838][T28123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 659.875719][T28123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.878656][T28123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.881703][T28123] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 659.884517][T28123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.887350][T28123] [ 659.888932][T28123] Mem-Info: [ 659.890176][T28123] active_anon:16458 inactive_anon:517 isolated_anon:0 [ 659.890176][T28123] active_file:0 inactive_file:45258 isolated_file:0 [ 659.890176][T28123] unevictable:768 dirty:0 writeback:0 [ 659.890176][T28123] slab_reclaimable:12824 slab_unreclaimable:52382 [ 659.890176][T28123] mapped:15179 shmem:1770 pagetables:445 [ 659.890176][T28123] sec_pagetables:0 bounce:0 [ 659.890176][T28123] kernel_misc_reclaimable:0 [ 659.890176][T28123] free:112767 free_pcp:9043 free_cma:0 [ 659.906840][T28123] Node 0 active_anon:31924kB inactive_anon:1812kB active_file:0kB inactive_file:83104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:22040kB dirty:0kB writeback:0kB shmem:3492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9180kB pagetables:940kB sec_pagetables:0kB all_unreclaimable? no [ 659.918989][T28123] Node 1 active_anon:33908kB inactive_anon:256kB active_file:0kB inactive_file:97928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:38676kB dirty:0kB writeback:0kB shmem:3588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1548kB pagetables:840kB sec_pagetables:0kB all_unreclaimable? no [ 659.930701][T28123] Node 0 DMA free:2564kB boost:0kB min:740kB low:924kB high:1108kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12696kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 659.940480][T28123] lowmem_reserve[]: 0 419 419 419 419 [ 659.942492][T28123] Node 0 DMA32 free:27952kB boost:2048kB min:22780kB low:27960kB high:33140kB reserved_highatomic:0KB active_anon:31924kB inactive_anon:1812kB active_file:0kB inactive_file:70408kB unevictable:1536kB writepending:0kB present:1032192kB managed:433264kB mlocked:0kB bounce:0kB free_pcp:19952kB local_pcp:5348kB free_cma:0kB [ 659.953430][T28123] lowmem_reserve[]: 0 0 0 0 0 [ 659.955196][T28123] Node 1 DMA32 free:420552kB boost:0kB min:46104kB low:57628kB high:69152kB reserved_highatomic:0KB active_anon:33908kB inactive_anon:256kB active_file:0kB inactive_file:97928kB unevictable:1536kB writepending:0kB present:1048436kB managed:954416kB mlocked:0kB bounce:0kB free_pcp:17412kB local_pcp:2736kB free_cma:0kB [ 659.966027][T28123] lowmem_reserve[]: 0 0 0 0 0 [ 659.967807][T28123] Node 0 DMA: 1*4kB (M) 0*8kB 0*16kB 0*32kB 2*64kB (UM) 1*128kB (U) 1*256kB (U) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 2564kB [ 659.973851][T28123] Node 0 DMA32: 212*4kB (UME) 490*8kB (UME) 395*16kB (UME) 137*32kB (UM) 125*64kB (UME) 15*128kB (UME) 4*256kB (UME) 3*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 27952kB [ 659.980290][T28123] Node 1 DMA32: 938*4kB (ME) 818*8kB (UM) 993*16kB (UME) 748*32kB (UME) 336*64kB (UME) 114*128kB (UME) 30*256kB (UME) 14*512kB (ME) 2*1024kB (M) 1*2048kB (U) 77*4096kB (M) = 420552kB [ 659.987121][T28123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.990696][T28123] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 659.994125][T28123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.997620][T28123] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 660.001073][T28123] 47028 total pagecache pages [ 660.002823][T28123] 0 pages in swap cache [ 660.004343][T28123] Free swap = 124996kB [ 660.005918][T28123] Total swap = 124996kB [ 660.007434][T28123] 524155 pages RAM [ 660.008838][T28123] 0 pages HighMem/MovableOnly [ 660.010647][T28123] 173395 pages reserved [ 660.012179][T28123] 0 pages cma reserved 00:37:27 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 4) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:27 executing program 0: socketpair(0x2, 0x2, 0x0, 0x0) 00:37:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:37:27 executing program 0: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 660.118843][T28144] FAULT_INJECTION: forcing a failure. [ 660.118843][T28144] name failslab, interval 1, probability 0, space 0, times 0 [ 660.124322][T28144] CPU: 1 PID: 28144 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 660.128500][T28144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 660.132767][T28144] Call Trace: [ 660.134192][T28144] [ 660.135446][T28144] dump_stack_lvl+0x125/0x1b0 [ 660.137457][T28144] should_fail_ex+0x496/0x5b0 [ 660.139221][T28144] should_failslab+0x9/0x20 [ 660.140910][T28144] kmem_cache_alloc_node+0x389/0x3f0 [ 660.143255][T28144] ? alloc_vmap_area+0x1af/0x2060 [ 660.145639][T28144] alloc_vmap_area+0x1af/0x2060 [ 660.147939][T28144] ? free_vmap_area+0x1c40/0x1c40 [ 660.150284][T28144] __get_vm_area_node+0x132/0x3d0 [ 660.152639][T28144] __vmalloc_node_range+0x27a/0x1540 [ 660.155124][T28144] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.157429][T28144] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.159714][T28144] ? reacquire_held_locks+0x4b0/0x4b0 [ 660.162219][T28144] ? delayed_vfree_work+0x70/0x70 [ 660.164594][T28144] ? vsprintf+0x30/0x30 [ 660.166583][T28144] ? _raw_spin_unlock+0x28/0x40 [ 660.168808][T28144] ? alloc_fd+0x2da/0x6c0 [ 660.170803][T28144] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.172782][T28144] __vmalloc+0x6d/0x90 [ 660.174276][T28144] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.176036][T28144] kvm_dev_ioctl+0x210/0x1c20 [ 660.177760][T28144] ? reacquire_held_locks+0x4b0/0x4b0 [ 660.179701][T28144] ? bit_wait_timeout+0x160/0x160 [ 660.181730][T28144] ? __fget_files+0x279/0x410 [ 660.183456][T28144] ? kvm_vcpu_stats_release+0x80/0x80 [ 660.185446][T28144] ? __fget_files+0x279/0x410 [ 660.187171][T28144] ? bpf_lsm_file_ioctl+0x9/0x10 [ 660.189000][T28144] ? kvm_vcpu_stats_release+0x80/0x80 [ 660.191136][T28144] __do_compat_sys_ioctl+0x2bf/0x330 [ 660.193384][T28144] __do_fast_syscall_32+0x61/0xe0 [ 660.195735][T28144] do_fast_syscall_32+0x33/0x70 [ 660.198080][T28144] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 660.201029][T28144] RIP: 0023:0xf7f81579 [ 660.202921][T28144] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 660.211755][T28144] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 660.215541][T28144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 660.219063][T28144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.222610][T28144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.226167][T28144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 660.229694][T28144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.233211][T28144] 00:37:27 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 5) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:37:27 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:27 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 1) 00:37:27 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 660.335688][T28168] FAULT_INJECTION: forcing a failure. [ 660.335688][T28168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 660.340911][T28168] CPU: 3 PID: 28168 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 660.344549][T28168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 660.348984][T28168] Call Trace: [ 660.350449][T28168] [ 660.351788][T28168] dump_stack_lvl+0x125/0x1b0 [ 660.353972][T28168] should_fail_ex+0x496/0x5b0 [ 660.355699][T28168] __should_fail_alloc_page+0xe7/0x130 [ 660.357679][T28168] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 660.360349][T28168] ? lock_acquire+0x464/0x510 [ 660.362513][T28168] __alloc_pages+0x14e/0x4a0 [ 660.364590][T28168] ? page_ext_get+0x182/0x310 [ 660.366263][T28168] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 660.368645][T28168] ? reacquire_held_locks+0x4b0/0x4b0 [ 660.370618][T28168] ? rcu_is_watching+0x12/0xb0 [ 660.372735][T28168] ? rcu_is_watching+0x12/0xb0 [ 660.374425][T28168] alloc_pages+0x1a9/0x270 [ 660.376119][T28168] pte_alloc_one+0x20/0x370 [ 660.378259][T28168] __pte_alloc+0x6e/0x3b0 [ 660.380282][T28168] ? pmd_install+0x170/0x170 [ 660.381994][T28174] FAULT_INJECTION: forcing a failure. [ 660.381994][T28174] name failslab, interval 1, probability 0, space 0, times 0 [ 660.382441][T28168] __handle_mm_fault+0x33a0/0x3e20 [ 660.390232][T28168] ? vm_iomap_memory+0x170/0x170 [ 660.391985][T28168] ? find_vma+0x10e/0x1b0 [ 660.393753][T28168] ? can_vma_merge_before+0x3a0/0x3a0 [ 660.396095][T28168] ? rcu_is_watching+0x12/0xb0 [ 660.398304][T28168] handle_mm_fault+0x47a/0xa00 [ 660.400502][T28168] ? lock_mm_and_find_vma+0xa6/0x760 [ 660.402890][T28168] do_user_addr_fault+0x3d1/0x1010 [ 660.405102][T28168] ? rcu_is_watching+0x12/0xb0 [ 660.407211][T28168] exc_page_fault+0x5c/0xd0 [ 660.409334][T28168] asm_exc_page_fault+0x26/0x30 [ 660.411542][T28168] RIP: 0010:__put_user_4+0x11/0x20 [ 660.413916][T28168] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 660.421283][T28168] RSP: 0018:ffffc9000f367e20 EFLAGS: 00050206 [ 660.423709][T28168] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 660.426529][T28168] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 660.429380][T28168] RBP: 1ffff92001e6cfc8 R08: 0000000000000000 R09: fffffbfff1d9c43a [ 660.432186][T28168] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 660.435048][T28168] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 660.438042][T28168] ? __sys_socketpair+0x115/0x5a0 [ 660.440239][T28168] __sys_socketpair+0x121/0x5a0 [ 660.442513][T28168] ? __ia32_sys_socket+0xb0/0xb0 [ 660.444775][T28168] ? __ia32_sys_read+0xb0/0xb0 [ 660.446919][T28168] __ia32_sys_socketpair+0x95/0x100 [ 660.449298][T28168] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 660.452244][T28168] __do_fast_syscall_32+0x61/0xe0 [ 660.454482][T28168] do_fast_syscall_32+0x33/0x70 [ 660.456639][T28168] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 660.459389][T28168] RIP: 0023:0xf7f1f579 [ 660.461204][T28168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 660.469453][T28168] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 660.473252][T28168] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 660.476895][T28168] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 660.479830][T28168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.482888][T28168] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 660.486497][T28168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.489538][T28168] [ 660.490622][T28174] CPU: 1 PID: 28174 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 660.494427][T28174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 660.498324][T28174] Call Trace: [ 660.499540][T28174] [ 660.500637][T28174] dump_stack_lvl+0x125/0x1b0 [ 660.502362][T28174] should_fail_ex+0x496/0x5b0 [ 660.504117][T28174] should_failslab+0x9/0x20 [ 660.505789][T28174] kmem_cache_alloc_node+0x389/0x3f0 [ 660.507639][T28174] ? alloc_vmap_area+0x1af/0x2060 [ 660.509415][T28174] alloc_vmap_area+0x1af/0x2060 [ 660.511193][T28174] ? free_vmap_area+0x1c40/0x1c40 [ 660.513049][T28174] __get_vm_area_node+0x132/0x3d0 [ 660.515002][T28174] __vmalloc_node_range+0x27a/0x1540 [ 660.516978][T28174] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.518930][T28174] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.520694][T28174] ? reacquire_held_locks+0x4b0/0x4b0 [ 660.522609][T28174] ? delayed_vfree_work+0x70/0x70 [ 660.524391][T28174] ? vsprintf+0x30/0x30 [ 660.525891][T28174] ? _raw_spin_unlock+0x28/0x40 [ 660.527661][T28174] ? alloc_fd+0x2da/0x6c0 [ 660.529264][T28174] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.531047][T28174] __vmalloc+0x6d/0x90 [ 660.532547][T28174] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.534350][T28174] kvm_dev_ioctl+0x210/0x1c20 [ 660.536079][T28174] ? reacquire_held_locks+0x4b0/0x4b0 [ 660.538119][T28174] ? bit_wait_timeout+0x160/0x160 [ 660.540184][T28174] ? __fget_files+0x279/0x410 [ 660.542067][T28174] ? kvm_vcpu_stats_release+0x80/0x80 [ 660.544034][T28174] ? __fget_files+0x279/0x410 [ 660.545802][T28174] ? bpf_lsm_file_ioctl+0x9/0x10 [ 660.547640][T28174] ? kvm_vcpu_stats_release+0x80/0x80 [ 660.549665][T28174] __do_compat_sys_ioctl+0x2bf/0x330 [ 660.551611][T28174] __do_fast_syscall_32+0x61/0xe0 [ 660.553514][T28174] do_fast_syscall_32+0x33/0x70 [ 660.555342][T28174] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 660.557722][T28174] RIP: 0023:0xf7f81579 [ 660.559269][T28174] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 660.566374][T28174] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 660.569459][T28174] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 660.572347][T28174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.575241][T28174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.578218][T28174] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 660.581165][T28174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.584074][T28174] 00:37:27 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 6) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:27 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:27 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 2) [ 660.675547][T28180] FAULT_INJECTION: forcing a failure. [ 660.675547][T28180] name failslab, interval 1, probability 0, space 0, times 0 00:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 660.680197][T28180] CPU: 3 PID: 28180 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 660.684869][T28180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 660.689054][T28180] Call Trace: [ 660.690263][T28180] [ 660.691460][T28180] dump_stack_lvl+0x125/0x1b0 [ 660.693687][T28180] should_fail_ex+0x496/0x5b0 [ 660.695914][T28180] should_failslab+0x9/0x20 00:37:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x20000080) 00:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 660.698060][T28180] kmem_cache_alloc+0x33a/0x3b0 [ 660.700437][T28180] ? rcu_is_watching+0x12/0xb0 [ 660.702667][T28180] ptlock_alloc+0x1f/0x70 [ 660.704692][T28180] pte_alloc_one+0x74/0x370 [ 660.706823][T28180] __pte_alloc+0x6e/0x3b0 [ 660.708843][T28180] ? pmd_install+0x170/0x170 [ 660.710962][T28180] __handle_mm_fault+0x33a0/0x3e20 [ 660.713361][T28180] ? vm_iomap_memory+0x170/0x170 [ 660.715672][T28180] ? find_vma+0x10e/0x1b0 [ 660.717710][T28180] ? can_vma_merge_before+0x3a0/0x3a0 [ 660.720182][T28180] ? rcu_is_watching+0x12/0xb0 [ 660.722374][T28180] handle_mm_fault+0x47a/0xa00 [ 660.724578][T28180] ? lock_mm_and_find_vma+0xa6/0x760 [ 660.726645][T28180] do_user_addr_fault+0x3d1/0x1010 [ 660.728482][T28180] ? rcu_is_watching+0x12/0xb0 [ 660.730215][T28180] exc_page_fault+0x5c/0xd0 [ 660.731941][T28180] asm_exc_page_fault+0x26/0x30 [ 660.733714][T28180] RIP: 0010:__put_user_4+0x11/0x20 [ 660.735551][T28180] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 660.736591][T28193] FAULT_INJECTION: forcing a failure. [ 660.736591][T28193] name failslab, interval 1, probability 0, space 0, times 0 [ 660.742586][T28180] RSP: 0018:ffffc9000d0afe20 EFLAGS: 00050206 [ 660.742597][T28180] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 660.742604][T28180] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 660.742610][T28180] RBP: 1ffff92001a15fc8 R08: 0000000000000000 R09: fffffbfff1d9c43a [ 660.742617][T28180] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 660.742623][T28180] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 660.742632][T28180] ? __sys_socketpair+0x115/0x5a0 [ 660.766852][T28180] __sys_socketpair+0x121/0x5a0 [ 660.769110][T28180] ? __ia32_sys_socket+0xb0/0xb0 [ 660.771413][T28180] ? __ia32_sys_read+0xb0/0xb0 [ 660.773644][T28180] __ia32_sys_socketpair+0x95/0x100 [ 660.776096][T28180] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 660.779171][T28180] __do_fast_syscall_32+0x61/0xe0 [ 660.781507][T28180] do_fast_syscall_32+0x33/0x70 [ 660.783800][T28180] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 660.786779][T28180] RIP: 0023:0xf7f1f579 [ 660.788680][T28180] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 660.797515][T28180] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 660.801374][T28180] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 660.805018][T28180] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 660.808431][T28180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.812100][T28180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 660.815505][T28180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.818469][T28180] [ 660.819630][T28193] CPU: 1 PID: 28193 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 660.823508][T28193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 660.827366][T28193] Call Trace: [ 660.828668][T28193] 00:37:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x20000080) [ 660.829806][T28193] dump_stack_lvl+0x125/0x1b0 [ 660.831802][T28193] should_fail_ex+0x496/0x5b0 [ 660.833852][T28193] should_failslab+0x9/0x20 [ 660.835600][T28193] __kmem_cache_alloc_node+0x2fd/0x350 [ 660.837646][T28193] ? __vmalloc_node_range+0x3e9/0x1540 [ 660.839575][T28193] ? __vmalloc_node_range+0x3e9/0x1540 [ 660.841570][T28193] __kmalloc_node+0x52/0x110 [ 660.843285][T28193] __vmalloc_node_range+0x3e9/0x1540 [ 660.845561][T28193] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.847701][T28193] ? reacquire_held_locks+0x4b0/0x4b0 [ 660.850061][T28193] ? delayed_vfree_work+0x70/0x70 [ 660.852274][T28193] ? vsprintf+0x30/0x30 [ 660.854110][T28193] ? _raw_spin_unlock+0x28/0x40 [ 660.856265][T28193] ? alloc_fd+0x2da/0x6c0 [ 660.858190][T28193] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.860328][T28193] __vmalloc+0x6d/0x90 [ 660.862122][T28193] ? kvm_dev_ioctl+0x210/0x1c20 [ 660.864040][T28193] kvm_dev_ioctl+0x210/0x1c20 [ 660.865865][T28193] ? reacquire_held_locks+0x4b0/0x4b0 [ 660.867945][T28193] ? bit_wait_timeout+0x160/0x160 [ 660.869924][T28193] ? __fget_files+0x279/0x410 [ 660.871738][T28193] ? kvm_vcpu_stats_release+0x80/0x80 [ 660.873996][T28193] ? __fget_files+0x279/0x410 [ 660.875654][T28193] ? bpf_lsm_file_ioctl+0x9/0x10 [ 660.877752][T28193] ? kvm_vcpu_stats_release+0x80/0x80 [ 660.880085][T28193] __do_compat_sys_ioctl+0x2bf/0x330 [ 660.882381][T28193] __do_fast_syscall_32+0x61/0xe0 [ 660.884586][T28193] do_fast_syscall_32+0x33/0x70 [ 660.886694][T28193] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 660.889426][T28193] RIP: 0023:0xf7f81579 [ 660.891175][T28193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 660.899402][T28193] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 660.902947][T28193] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 660.906299][T28193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.909626][T28193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.913083][T28193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 660.916472][T28193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.919649][T28193] 00:37:28 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 7) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:28 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 3) 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x20000080) [ 661.028961][T28201] FAULT_INJECTION: forcing a failure. [ 661.028961][T28201] name failslab, interval 1, probability 0, space 0, times 0 [ 661.036141][T28201] CPU: 3 PID: 28201 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 661.040796][T28201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 661.045374][T28201] Call Trace: [ 661.047061][T28201] [ 661.048491][T28201] dump_stack_lvl+0x125/0x1b0 [ 661.050417][T28201] should_fail_ex+0x496/0x5b0 [ 661.052354][T28201] should_failslab+0x9/0x20 [ 661.053538][T28207] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 661.054385][T28201] kmem_cache_alloc+0x33a/0x3b0 [ 661.054416][T28201] ? _raw_spin_unlock+0x28/0x40 [ 661.061525][T28201] __anon_vma_prepare+0x64/0x550 [ 661.063391][T28201] __handle_mm_fault+0x394d/0x3e20 [ 661.065514][T28201] ? vm_iomap_memory+0x170/0x170 [ 661.067803][T28201] ? find_vma+0x10e/0x1b0 [ 661.069807][T28201] ? can_vma_merge_before+0x3a0/0x3a0 [ 661.072031][T28201] ? rcu_is_watching+0x12/0xb0 [ 661.073721][T28201] handle_mm_fault+0x47a/0xa00 [ 661.075409][T28201] ? lock_mm_and_find_vma+0xa6/0x760 [ 661.077341][T28201] do_user_addr_fault+0x3d1/0x1010 [ 661.079166][T28201] ? rcu_is_watching+0x12/0xb0 [ 661.080273][T28209] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 661.081146][T28201] exc_page_fault+0x5c/0xd0 [ 661.081174][T28201] asm_exc_page_fault+0x26/0x30 [ 661.081196][T28201] RIP: 0010:__put_user_4+0x11/0x20 [ 661.090981][T28201] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 661.099769][T28201] RSP: 0018:ffffc9000cc87e20 EFLAGS: 00050206 [ 661.102581][T28201] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 661.106195][T28201] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 661.108648][T28214] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 661.109819][T28201] RBP: 1ffff92001990fc8 R08: 0000000000000000 R09: fffffbfff1d9c43a [ 661.109835][T28201] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 661.109846][T28201] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 661.109862][T28201] ? __sys_socketpair+0x115/0x5a0 [ 661.124361][T28201] __sys_socketpair+0x121/0x5a0 [ 661.126262][T28201] ? __ia32_sys_socket+0xb0/0xb0 [ 661.128222][T28201] ? __ia32_sys_read+0xb0/0xb0 [ 661.130290][T28201] __ia32_sys_socketpair+0x95/0x100 [ 661.132668][T28201] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 661.135045][T28216] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 661.135328][T28201] __do_fast_syscall_32+0x61/0xe0 [ 661.135345][T28201] do_fast_syscall_32+0x33/0x70 [ 661.135360][T28201] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 661.135381][T28201] RIP: 0023:0xf7f1f579 [ 661.135395][T28201] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.155462][T28201] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 661.159094][T28201] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 661.162569][T28201] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 661.166022][T28201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.169473][T28201] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.172950][T28201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.176430][T28201] 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:28 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 8) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:28 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 4) 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 661.349112][T28223] FAULT_INJECTION: forcing a failure. [ 661.349112][T28223] name failslab, interval 1, probability 0, space 0, times 0 00:37:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 661.357644][T28223] CPU: 3 PID: 28223 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 661.362279][T28223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 661.366561][T28223] Call Trace: [ 661.367998][T28223] [ 661.369275][T28223] dump_stack_lvl+0x125/0x1b0 [ 661.371317][T28223] should_fail_ex+0x496/0x5b0 [ 661.373348][T28223] should_failslab+0x9/0x20 [ 661.375478][T28223] kmem_cache_alloc+0x33a/0x3b0 [ 661.377716][T28223] ? _raw_spin_unlock+0x28/0x40 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 1) [ 661.379951][T28223] __anon_vma_prepare+0x2bf/0x550 [ 661.382142][T28223] __handle_mm_fault+0x394d/0x3e20 [ 661.384317][T28223] ? vm_iomap_memory+0x170/0x170 [ 661.386528][T28223] ? find_vma+0x10e/0x1b0 [ 661.388506][T28223] ? can_vma_merge_before+0x3a0/0x3a0 [ 661.390945][T28223] ? rcu_is_watching+0x12/0xb0 [ 661.391369][T28235] FAULT_INJECTION: forcing a failure. [ 661.391369][T28235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.393130][T28223] handle_mm_fault+0x47a/0xa00 [ 661.393153][T28223] ? lock_mm_and_find_vma+0xa6/0x760 [ 661.402378][T28223] do_user_addr_fault+0x3d1/0x1010 [ 661.404733][T28223] ? rcu_is_watching+0x12/0xb0 [ 661.405196][T28236] FAULT_INJECTION: forcing a failure. [ 661.405196][T28236] name failslab, interval 1, probability 0, space 0, times 0 [ 661.406922][T28223] exc_page_fault+0x5c/0xd0 [ 661.406952][T28223] asm_exc_page_fault+0x26/0x30 [ 661.406974][T28223] RIP: 0010:__put_user_4+0x11/0x20 [ 661.419175][T28223] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 661.425967][T28223] RSP: 0018:ffffc900223f7e20 EFLAGS: 00050206 [ 661.428090][T28223] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 661.431029][T28223] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 661.433868][T28223] RBP: 1ffff9200447efc8 R08: 0000000000000000 R09: fffffbfff1d9c43a [ 661.436983][T28223] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 661.439917][T28223] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 661.442750][T28223] ? __sys_socketpair+0x115/0x5a0 [ 661.444580][T28223] __sys_socketpair+0x121/0x5a0 [ 661.446322][T28223] ? __ia32_sys_socket+0xb0/0xb0 [ 661.448251][T28223] ? __ia32_sys_read+0xb0/0xb0 [ 661.450011][T28223] __ia32_sys_socketpair+0x95/0x100 [ 661.451896][T28223] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 661.454250][T28223] __do_fast_syscall_32+0x61/0xe0 [ 661.456034][T28223] do_fast_syscall_32+0x33/0x70 [ 661.457787][T28223] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 661.460021][T28223] RIP: 0023:0xf7f1f579 [ 661.461505][T28223] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.470043][T28223] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 661.473814][T28223] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 661.477456][T28223] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 661.481183][T28223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.484836][T28223] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.488437][T28223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.491967][T28223] [ 661.493332][T28235] CPU: 2 PID: 28235 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 661.497178][T28235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 661.500761][T28235] Call Trace: [ 661.502129][T28235] [ 661.503226][T28235] dump_stack_lvl+0x125/0x1b0 [ 661.505105][T28235] should_fail_ex+0x496/0x5b0 [ 661.507135][T28235] _copy_from_user+0x30/0xf0 [ 661.509189][T28235] get_compat_msghdr+0xa8/0x170 [ 661.511249][T28235] ? __get_compat_msghdr+0x4d0/0x4d0 [ 661.513243][T28235] ? kstrtouint+0xde/0x130 [ 661.514878][T28235] ? rcu_is_watching+0x12/0xb0 [ 661.516633][T28235] ___sys_sendmsg+0x1ac/0x1d0 [ 661.518378][T28235] ? do_recvmmsg+0x740/0x740 [ 661.520192][T28235] ? rcu_is_watching+0x12/0xb0 [ 661.522357][T28235] ? proc_task_getattr+0x240/0x240 [ 661.524650][T28235] ? ksys_write+0x214/0x250 [ 661.526343][T28235] ? __fget_light+0xe6/0x260 [ 661.528061][T28235] __sys_sendmsg+0x117/0x1e0 [ 661.529812][T28235] ? __sys_sendmsg_sock+0x30/0x30 [ 661.531680][T28235] ? rcu_is_watching+0x12/0xb0 [ 661.533473][T28235] __do_fast_syscall_32+0x61/0xe0 [ 661.535287][T28235] do_fast_syscall_32+0x33/0x70 [ 661.537084][T28235] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 661.539380][T28235] RIP: 0023:0xf7fb5579 [ 661.540885][T28235] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.547822][T28235] RSP: 002b:00000000f7fb05ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 661.550854][T28235] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 661.553687][T28235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.556573][T28235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.559466][T28235] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.562378][T28235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.565273][T28235] [ 661.566427][T28236] CPU: 1 PID: 28236 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 661.570627][T28236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 661.574823][T28236] Call Trace: [ 661.576266][T28236] [ 661.577470][T28236] dump_stack_lvl+0x125/0x1b0 [ 661.579536][T28236] should_fail_ex+0x496/0x5b0 [ 661.581430][T28236] should_failslab+0x9/0x20 [ 661.583063][T28236] __kmem_cache_alloc_node+0x2fd/0x350 [ 661.585022][T28236] ? __vmalloc_node_range+0x3e9/0x1540 [ 661.586979][T28236] ? __vmalloc_node_range+0x3e9/0x1540 [ 661.588936][T28236] __kmalloc_node+0x52/0x110 [ 661.590593][T28236] __vmalloc_node_range+0x3e9/0x1540 [ 661.592487][T28236] ? kvm_dev_ioctl+0x210/0x1c20 [ 661.594233][T28236] ? reacquire_held_locks+0x4b0/0x4b0 [ 661.596150][T28236] ? delayed_vfree_work+0x70/0x70 [ 661.597970][T28236] ? vsprintf+0x30/0x30 [ 661.599461][T28236] ? _raw_spin_unlock+0x28/0x40 [ 661.601212][T28236] ? alloc_fd+0x2da/0x6c0 [ 661.602765][T28236] ? kvm_dev_ioctl+0x210/0x1c20 [ 661.604498][T28236] __vmalloc+0x6d/0x90 [ 661.605970][T28236] ? kvm_dev_ioctl+0x210/0x1c20 [ 661.607716][T28236] kvm_dev_ioctl+0x210/0x1c20 [ 661.609408][T28236] ? reacquire_held_locks+0x4b0/0x4b0 [ 661.611339][T28236] ? bit_wait_timeout+0x160/0x160 [ 661.613214][T28236] ? __fget_files+0x279/0x410 [ 661.614910][T28236] ? kvm_vcpu_stats_release+0x80/0x80 [ 661.616859][T28236] ? __fget_files+0x279/0x410 [ 661.618565][T28236] ? bpf_lsm_file_ioctl+0x9/0x10 [ 661.620311][T28236] ? kvm_vcpu_stats_release+0x80/0x80 [ 661.622207][T28236] __do_compat_sys_ioctl+0x2bf/0x330 [ 661.624086][T28236] __do_fast_syscall_32+0x61/0xe0 [ 661.625880][T28236] do_fast_syscall_32+0x33/0x70 [ 661.627628][T28236] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 661.629886][T28236] RIP: 0023:0xf7f81579 [ 661.631326][T28236] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.638124][T28236] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 661.641049][T28236] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 661.643819][T28236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.646602][T28236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.649389][T28236] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.652158][T28236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.654962][T28236] 00:37:28 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 9) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:28 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 5) 00:37:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 2) [ 661.736775][T28241] FAULT_INJECTION: forcing a failure. [ 661.736775][T28241] name failslab, interval 1, probability 0, space 0, times 0 [ 661.737025][T28242] FAULT_INJECTION: forcing a failure. 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 661.737025][T28242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 661.742017][T28241] CPU: 1 PID: 28241 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 661.742032][T28241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 661.742039][T28241] Call Trace: [ 661.742044][T28241] [ 661.742048][T28241] dump_stack_lvl+0x125/0x1b0 [ 661.742068][T28241] should_fail_ex+0x496/0x5b0 [ 661.742086][T28241] should_failslab+0x9/0x20 [ 661.742096][T28241] kmem_cache_alloc_node+0x389/0x3f0 [ 661.742110][T28241] ? __alloc_skb+0x287/0x330 [ 661.742125][T28241] __alloc_skb+0x287/0x330 [ 661.742138][T28241] ? __napi_build_skb+0x50/0x50 [ 661.742152][T28241] ? __netlink_dump_start+0x920/0x9c0 [ 661.742167][T28241] ? __sanitizer_cov_trace_switch+0x54/0x90 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 661.742182][T28241] ? apparmor_socket_getpeersec_dgram+0x9/0x10 [ 661.742197][T28241] netlink_sendmsg+0x9c6/0xe40 [ 661.742207][T28241] ? netlink_unicast+0x810/0x810 [ 661.742216][T28241] ? __might_fault+0xe5/0x190 [ 661.742226][T28241] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 661.742240][T28241] ? netlink_unicast+0x810/0x810 [ 661.742249][T28241] sock_sendmsg+0xd9/0x180 [ 661.742263][T28241] ____sys_sendmsg+0x6ac/0x940 [ 661.742276][T28241] ? kernel_sendmsg+0x50/0x50 [ 661.742288][T28241] ? get_compat_msghdr+0x11b/0x170 [ 661.742300][T28241] ? rcu_is_watching+0x12/0xb0 [ 661.742312][T28241] ___sys_sendmsg+0x135/0x1d0 [ 661.804464][T28241] ? do_recvmmsg+0x740/0x740 [ 661.806301][T28241] ? rcu_is_watching+0x12/0xb0 [ 661.808442][T28241] ? proc_task_getattr+0x240/0x240 [ 661.810304][T28241] ? ksys_write+0x214/0x250 [ 661.811940][T28241] ? __fget_light+0xe6/0x260 [ 661.813619][T28241] __sys_sendmsg+0x117/0x1e0 [ 661.815288][T28241] ? __sys_sendmsg_sock+0x30/0x30 [ 661.817140][T28241] ? rcu_is_watching+0x12/0xb0 [ 661.818850][T28241] __do_fast_syscall_32+0x61/0xe0 [ 661.820659][T28241] do_fast_syscall_32+0x33/0x70 [ 661.822417][T28241] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 661.824668][T28241] RIP: 0023:0xf7fb5579 [ 661.826156][T28241] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.833091][T28241] RSP: 002b:00000000f7fb05ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 661.836280][T28241] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 661.839106][T28241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.841966][T28241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.844912][T28241] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.847704][T28241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.850503][T28241] [ 661.851644][T28242] CPU: 3 PID: 28242 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 661.855171][T28242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 661.858643][T28242] Call Trace: [ 661.859839][T28242] [ 661.860896][T28242] dump_stack_lvl+0x125/0x1b0 00:37:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 661.862608][T28242] should_fail_ex+0x496/0x5b0 [ 661.864665][T28242] __should_fail_alloc_page+0xe7/0x130 [ 661.866756][T28242] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 661.869077][T28242] ? lock_release+0x4bf/0x680 [ 661.870806][T28242] __alloc_pages+0x14e/0x4a0 [ 661.872434][T28242] ? lock_acquire+0x464/0x510 [ 661.874537][T28242] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 661.877265][T28242] ? lock_sync+0x190/0x190 [ 661.879219][T28242] ? rcu_is_watching+0x12/0xb0 [ 661.881085][T28242] ? reacquire_held_locks+0x4b0/0x4b0 [ 661.883235][T28242] ? lock_release+0x4bf/0x680 [ 661.884903][T28242] ? __anon_vma_prepare+0x26a/0x550 [ 661.887159][T28242] __folio_alloc+0x16/0x40 [ 661.888949][T28242] vma_alloc_folio+0x156/0x890 [ 661.891089][T28242] ? policy_nodemask+0x1d0/0x1d0 [ 661.893294][T28242] ? __anon_vma_prepare+0x298/0x550 [ 661.895586][T28242] __handle_mm_fault+0xe6c/0x3e20 [ 661.897678][T28242] ? vm_iomap_memory+0x170/0x170 [ 661.899483][T28242] ? find_vma+0x10e/0x1b0 [ 661.901096][T28242] ? can_vma_merge_before+0x3a0/0x3a0 [ 661.903333][T28242] ? rcu_is_watching+0x12/0xb0 [ 661.905490][T28242] handle_mm_fault+0x47a/0xa00 [ 661.907394][T28242] ? lock_mm_and_find_vma+0xa6/0x760 [ 661.909320][T28242] do_user_addr_fault+0x3d1/0x1010 [ 661.911170][T28242] ? rcu_is_watching+0x12/0xb0 [ 661.912960][T28242] exc_page_fault+0x5c/0xd0 [ 661.914583][T28242] asm_exc_page_fault+0x26/0x30 [ 661.916311][T28242] RIP: 0010:__put_user_4+0x11/0x20 [ 661.918193][T28242] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 661.925009][T28242] RSP: 0018:ffffc9002184fe20 EFLAGS: 00050206 [ 661.927219][T28242] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 661.930078][T28242] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 661.932929][T28242] RBP: 1ffff92004309fc8 R08: 0000000000000000 R09: fffffbfff1d9c43a [ 661.935764][T28242] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 661.938680][T28242] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 661.941578][T28242] ? __sys_socketpair+0x115/0x5a0 [ 661.943419][T28242] __sys_socketpair+0x121/0x5a0 [ 661.945193][T28242] ? __ia32_sys_socket+0xb0/0xb0 [ 661.947005][T28242] ? __ia32_sys_read+0xb0/0xb0 [ 661.948753][T28242] __ia32_sys_socketpair+0x95/0x100 [ 661.950637][T28242] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 661.953016][T28242] __do_fast_syscall_32+0x61/0xe0 [ 661.954832][T28242] do_fast_syscall_32+0x33/0x70 [ 661.956610][T28242] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 661.958887][T28242] RIP: 0023:0xf7f1f579 [ 661.960380][T28242] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.967241][T28242] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 661.970223][T28242] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 661.973096][T28242] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 661.975928][T28242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.978790][T28242] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.981673][T28242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.984571][T28242] 00:37:29 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 10) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 3) 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:29 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 6) [ 662.163380][T28264] FAULT_INJECTION: forcing a failure. 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.163380][T28264] name failslab, interval 1, probability 0, space 0, times 0 00:37:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 4) [ 662.169046][T28264] CPU: 2 PID: 28264 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 662.173288][T28264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 662.177723][T28264] Call Trace: [ 662.179082][T28264] [ 662.180170][T28264] dump_stack_lvl+0x125/0x1b0 [ 662.181962][T28264] should_fail_ex+0x496/0x5b0 [ 662.182657][T28271] FAULT_INJECTION: forcing a failure. [ 662.182657][T28271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.183782][T28264] ? sock_alloc_inode+0x25/0x1c0 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.183800][T28264] should_failslab+0x9/0x20 [ 662.183813][T28264] kmem_cache_alloc_lru+0x3e6/0x630 [ 662.194587][T28264] ? preempt_count_sub+0x150/0x150 [ 662.196521][T28264] ? rcu_is_watching+0x12/0xb0 [ 662.198487][T28264] ? sock_free_inode+0x30/0x30 [ 662.200364][T28264] ? sock_alloc_inode+0x25/0x1c0 [ 662.202251][T28264] sock_alloc_inode+0x25/0x1c0 [ 662.204037][T28264] alloc_inode+0x5d/0x220 [ 662.205686][T28264] new_inode_pseudo+0x16/0x80 [ 662.207448][T28264] sock_alloc+0x40/0x270 [ 662.209169][T28264] __sock_create+0xbc/0x810 [ 662.210889][T28264] __sys_socketpair+0x1da/0x5a0 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.212766][T28264] ? __ia32_sys_socket+0xb0/0xb0 [ 662.214791][T28264] ? __ia32_sys_read+0xb0/0xb0 [ 662.216619][T28264] __ia32_sys_socketpair+0x95/0x100 [ 662.218611][T28264] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 662.221098][T28264] __do_fast_syscall_32+0x61/0xe0 [ 662.223073][T28264] do_fast_syscall_32+0x33/0x70 [ 662.225157][T28264] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 662.227567][T28264] RIP: 0023:0xf7f1f579 [ 662.229170][T28264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 662.236511][T28264] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 662.239680][T28264] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 662.242562][T28264] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 662.245428][T28264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.248329][T28264] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.251246][T28264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.254192][T28264] [ 662.255356][T28271] CPU: 1 PID: 28271 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 662.256655][T28264] socket: no more sockets [ 662.259258][T28271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 662.259270][T28271] Call Trace: [ 662.259276][T28271] [ 662.259283][T28271] dump_stack_lvl+0x125/0x1b0 [ 662.259314][T28271] should_fail_ex+0x496/0x5b0 [ 662.259335][T28271] copyin+0x1b/0xa0 [ 662.259350][T28271] _copy_from_iter+0x1e5/0x1270 [ 662.274260][T28271] ? __build_skb_around+0x278/0x3b0 [ 662.276202][T28271] ? iov_iter_extract_pages+0x1870/0x1870 [ 662.278365][T28271] ? __napi_build_skb+0x50/0x50 [ 662.280175][T28271] ? __netlink_dump_start+0x920/0x9c0 [ 662.282163][T28271] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 662.284344][T28271] ? __virt_addr_valid+0x5e/0x2d0 [ 662.286224][T28271] ? __phys_addr_symbol+0x30/0x70 [ 662.288367][T28271] ? __check_object_size+0x323/0x730 [ 662.290732][T28271] netlink_sendmsg+0x897/0xe40 [ 662.292574][T28271] ? netlink_unicast+0x810/0x810 [ 662.294432][T28271] ? __might_fault+0xe5/0x190 [ 662.296146][T28271] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 662.298142][T28271] ? netlink_unicast+0x810/0x810 [ 662.299982][T28271] sock_sendmsg+0xd9/0x180 [ 662.301657][T28271] ____sys_sendmsg+0x6ac/0x940 [ 662.303438][T28271] ? kernel_sendmsg+0x50/0x50 [ 662.305197][T28271] ? get_compat_msghdr+0x11b/0x170 [ 662.307097][T28271] ? rcu_is_watching+0x12/0xb0 [ 662.308901][T28271] ___sys_sendmsg+0x135/0x1d0 [ 662.310663][T28271] ? do_recvmmsg+0x740/0x740 [ 662.312389][T28271] ? rcu_is_watching+0x12/0xb0 [ 662.314152][T28271] ? proc_task_getattr+0x240/0x240 [ 662.316026][T28271] ? ksys_write+0x214/0x250 [ 662.317771][T28271] ? __fget_light+0xe6/0x260 [ 662.319672][T28271] __sys_sendmsg+0x117/0x1e0 [ 662.321600][T28271] ? __sys_sendmsg_sock+0x30/0x30 [ 662.323472][T28271] ? rcu_is_watching+0x12/0xb0 [ 662.325261][T28271] __do_fast_syscall_32+0x61/0xe0 [ 662.327135][T28271] do_fast_syscall_32+0x33/0x70 [ 662.328980][T28271] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 662.331350][T28271] RIP: 0023:0xf7fb5579 [ 662.332871][T28271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 662.339930][T28271] RSP: 002b:00000000f7fb05ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 662.342961][T28271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 662.346262][T28271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.349623][T28271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.352522][T28271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.355444][T28271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.358836][T28271] 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:29 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 7) 00:37:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 5) 00:37:29 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 11) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) [ 662.454619][T28282] FAULT_INJECTION: forcing a failure. [ 662.454619][T28282] name failslab, interval 1, probability 0, space 0, times 0 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.460591][T28286] FAULT_INJECTION: forcing a failure. [ 662.460591][T28286] name failslab, interval 1, probability 0, space 0, times 0 [ 662.462157][T28282] CPU: 3 PID: 28282 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 662.470271][T28282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 662.473949][T28282] Call Trace: [ 662.475181][T28282] [ 662.476275][T28282] dump_stack_lvl+0x125/0x1b0 [ 662.478314][T28282] should_fail_ex+0x496/0x5b0 [ 662.480610][T28282] should_failslab+0x9/0x20 [ 662.482765][T28282] kmem_cache_alloc+0x33a/0x3b0 [ 662.485082][T28282] security_inode_alloc+0x38/0x180 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.487654][T28282] inode_init_always+0xbef/0xee0 [ 662.489622][T28282] alloc_inode+0x7a/0x220 [ 662.491208][T28282] new_inode_pseudo+0x16/0x80 [ 662.492957][T28282] sock_alloc+0x40/0x270 [ 662.494518][T28282] __sock_create+0xbc/0x810 [ 662.496185][T28282] __sys_socketpair+0x1da/0x5a0 [ 662.497987][T28282] ? __ia32_sys_socket+0xb0/0xb0 [ 662.499800][T28282] ? __ia32_sys_read+0xb0/0xb0 [ 662.501553][T28282] __ia32_sys_socketpair+0x95/0x100 [ 662.503463][T28282] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 662.505930][T28282] __do_fast_syscall_32+0x61/0xe0 [ 662.508011][T28282] do_fast_syscall_32+0x33/0x70 [ 662.509898][T28282] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 662.512284][T28282] RIP: 0023:0xf7f1f579 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.513853][T28282] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 662.521182][T28282] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 662.524347][T28282] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 662.527312][T28282] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 662.530283][T28282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.533270][T28282] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.536227][T28282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.539143][T28282] 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.540282][T28286] CPU: 0 PID: 28286 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 662.544575][T28286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 662.545726][T28282] socket: no more sockets [ 662.548478][T28286] Call Trace: [ 662.548486][T28286] [ 662.548491][T28286] dump_stack_lvl+0x125/0x1b0 [ 662.548519][T28286] should_fail_ex+0x496/0x5b0 [ 662.556344][T28286] should_failslab+0x9/0x20 [ 662.558210][T28286] kmem_cache_alloc+0x69/0x3b0 00:37:29 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 8) [ 662.560162][T28286] skb_clone+0x171/0x3c0 [ 662.562105][T28286] netlink_deliver_tap+0xb3c/0xd10 [ 662.564202][T28286] netlink_unicast+0x5f0/0x810 [ 662.566150][T28286] ? netlink_attachskb+0x870/0x870 [ 662.567601][T28301] FAULT_INJECTION: forcing a failure. [ 662.567601][T28301] name failslab, interval 1, probability 0, space 0, times 0 [ 662.568200][T28286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 662.575254][T28286] ? __phys_addr_symbol+0x30/0x70 [ 662.577335][T28286] ? __check_object_size+0x323/0x730 [ 662.579426][T28286] netlink_sendmsg+0x93c/0xe40 [ 662.581383][T28286] ? netlink_unicast+0x810/0x810 [ 662.583400][T28286] ? __might_fault+0xe5/0x190 [ 662.585324][T28286] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 662.587470][T28286] ? netlink_unicast+0x810/0x810 [ 662.589473][T28286] sock_sendmsg+0xd9/0x180 [ 662.591304][T28286] ____sys_sendmsg+0x6ac/0x940 [ 662.593246][T28286] ? kernel_sendmsg+0x50/0x50 [ 662.595118][T28286] ? get_compat_msghdr+0x11b/0x170 [ 662.597161][T28286] ? rcu_is_watching+0x12/0xb0 [ 662.599060][T28286] ___sys_sendmsg+0x135/0x1d0 [ 662.600989][T28286] ? do_recvmmsg+0x740/0x740 [ 662.602878][T28286] ? rcu_is_watching+0x12/0xb0 [ 662.604809][T28286] ? proc_task_getattr+0x240/0x240 [ 662.606869][T28286] ? ksys_write+0x214/0x250 [ 662.608831][T28286] ? __fget_light+0xe6/0x260 [ 662.610662][T28286] __sys_sendmsg+0x117/0x1e0 [ 662.612593][T28286] ? __sys_sendmsg_sock+0x30/0x30 [ 662.614679][T28286] ? rcu_is_watching+0x12/0xb0 [ 662.616685][T28286] __do_fast_syscall_32+0x61/0xe0 [ 662.618738][T28286] do_fast_syscall_32+0x33/0x70 [ 662.620716][T28286] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 662.623217][T28286] RIP: 0023:0xf7fb5579 [ 662.624915][T28286] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 662.632714][T28286] RSP: 002b:00000000f7fb05ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 662.636084][T28286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 662.639305][T28286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.642561][T28286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.645705][T28286] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.648915][T28286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.651985][T28286] [ 662.653187][T28301] CPU: 2 PID: 28301 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 662.656842][T28301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 662.660484][T28301] Call Trace: 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.661851][T28301] [ 662.663306][T28301] dump_stack_lvl+0x125/0x1b0 [ 662.665238][T28301] should_fail_ex+0x496/0x5b0 [ 662.667181][T28301] should_failslab+0x9/0x20 [ 662.669111][T28301] kmem_cache_alloc+0x33a/0x3b0 [ 662.671096][T28301] ? lock_release+0x4bf/0x680 [ 662.673088][T28301] ? rcu_is_watching+0x12/0xb0 [ 662.675110][T28301] sk_prot_alloc+0x60/0x2a0 [ 662.677046][T28301] sk_alloc+0x3a/0x7f0 [ 662.678775][T28301] inet_create+0x3a0/0x1030 [ 662.680689][T28301] __sock_create+0x334/0x810 [ 662.682638][T28301] __sys_socketpair+0x1da/0x5a0 [ 662.684693][T28301] ? __ia32_sys_socket+0xb0/0xb0 [ 662.686719][T28301] ? __ia32_sys_read+0xb0/0xb0 [ 662.688718][T28301] __ia32_sys_socketpair+0x95/0x100 [ 662.690869][T28301] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 662.693600][T28301] __do_fast_syscall_32+0x61/0xe0 [ 662.695729][T28301] do_fast_syscall_32+0x33/0x70 [ 662.697803][T28301] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 662.700326][T28301] RIP: 0023:0xf7f1f579 [ 662.701952][T28301] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 662.709765][T28301] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 662.713245][T28301] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 662.716564][T28301] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 662.719843][T28301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.723078][T28301] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.726329][T28301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.729601][T28301] 00:37:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 6) 00:37:29 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 9) 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:29 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 12) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) [ 662.803991][T28306] FAULT_INJECTION: forcing a failure. [ 662.803991][T28306] name failslab, interval 1, probability 0, space 0, times 0 [ 662.807842][T28308] FAULT_INJECTION: forcing a failure. [ 662.807842][T28308] name failslab, interval 1, probability 0, space 0, times 0 [ 662.808687][T28306] CPU: 3 PID: 28306 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 662.817979][T28306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 662.821863][T28306] Call Trace: [ 662.823347][T28306] [ 662.824703][T28306] dump_stack_lvl+0x125/0x1b0 [ 662.826852][T28306] should_fail_ex+0x496/0x5b0 [ 662.828963][T28306] should_failslab+0x9/0x20 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.831024][T28306] __kmem_cache_alloc_node+0x2fd/0x350 [ 662.833660][T28306] ? apparmor_sk_alloc_security+0x87/0x150 [ 662.836301][T28306] kmalloc_trace+0x25/0xe0 [ 662.838327][T28306] apparmor_sk_alloc_security+0x87/0x150 [ 662.840682][T28306] security_sk_alloc+0x72/0xb0 [ 662.842840][T28306] sk_prot_alloc+0xfb/0x2a0 [ 662.844842][T28306] sk_alloc+0x3a/0x7f0 [ 662.846326][T28306] inet_create+0x3a0/0x1030 [ 662.848247][T28306] __sock_create+0x334/0x810 [ 662.850309][T28306] __sys_socketpair+0x1da/0x5a0 [ 662.852122][T28306] ? __ia32_sys_socket+0xb0/0xb0 [ 662.853895][T28306] ? __ia32_sys_read+0xb0/0xb0 [ 662.855829][T28306] __ia32_sys_socketpair+0x95/0x100 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 662.857722][T28306] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 662.860214][T28306] __do_fast_syscall_32+0x61/0xe0 [ 662.862036][T28306] do_fast_syscall_32+0x33/0x70 [ 662.863762][T28306] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 662.866054][T28306] RIP: 0023:0xf7f1f579 [ 662.867504][T28306] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 662.874532][T28306] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 662.877523][T28306] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 662.880520][T28306] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 662.883326][T28306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.886132][T28306] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.888934][T28306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.891755][T28306] [ 662.893016][T28308] CPU: 2 PID: 28308 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 662.896566][T28308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 662.900467][T28308] Call Trace: [ 662.901813][T28308] [ 662.902795][T28308] dump_stack_lvl+0x125/0x1b0 [ 662.904559][T28308] should_fail_ex+0x496/0x5b0 [ 662.906283][T28308] should_failslab+0x9/0x20 [ 662.907828][T28308] __kmem_cache_alloc_node+0x2fd/0x350 00:37:29 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 10) [ 662.909763][T28308] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x280 [ 662.912427][T28308] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x280 [ 662.914920][T28308] __kmalloc+0x4f/0x100 [ 662.916398][T28308] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x280 [ 662.919271][T28308] genl_family_rcv_msg_doit+0xbf/0x2e0 [ 662.921012][T28322] FAULT_INJECTION: forcing a failure. [ 662.921012][T28322] name failslab, interval 1, probability 0, space 0, times 0 [ 662.921570][T28308] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 662.921604][T28308] ? ns_capable+0xd5/0x110 [ 662.931447][T28308] genl_rcv_msg+0x55c/0x800 [ 662.933003][T28308] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 662.935292][T28308] ? __dev_queue_xmit+0xa8f/0x3d80 [ 662.937176][T28308] ? nl80211_post_doit+0x2f0/0x2f0 [ 662.938982][T28308] ? nl80211_set_channel+0x1c0/0x1c0 [ 662.940832][T28308] ? nl80211_parse_sta_wme+0x3d0/0x3d0 [ 662.943131][T28308] netlink_rcv_skb+0x16b/0x440 [ 662.945148][T28308] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 662.947607][T28308] ? netlink_ack+0x1370/0x1370 [ 662.949532][T28308] ? down_write+0x200/0x200 [ 662.951432][T28308] ? netlink_deliver_tap+0x1b1/0xd10 [ 662.953662][T28308] genl_rcv+0x28/0x40 [ 662.955406][T28308] netlink_unicast+0x536/0x810 [ 662.957499][T28308] ? netlink_attachskb+0x870/0x870 [ 662.959712][T28308] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 662.962268][T28308] ? __phys_addr_symbol+0x30/0x70 [ 662.964441][T28308] ? __check_object_size+0x323/0x730 [ 662.966729][T28308] netlink_sendmsg+0x93c/0xe40 [ 662.968821][T28308] ? netlink_unicast+0x810/0x810 [ 662.970958][T28308] ? __might_fault+0xe5/0x190 [ 662.972980][T28308] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 662.975282][T28308] ? netlink_unicast+0x810/0x810 [ 662.977462][T28308] sock_sendmsg+0xd9/0x180 [ 662.979410][T28308] ____sys_sendmsg+0x6ac/0x940 [ 662.981489][T28308] ? kernel_sendmsg+0x50/0x50 [ 662.983522][T28308] ? get_compat_msghdr+0x11b/0x170 [ 662.985744][T28308] ? rcu_is_watching+0x12/0xb0 [ 662.987814][T28308] ___sys_sendmsg+0x135/0x1d0 [ 662.989796][T28308] ? do_recvmmsg+0x740/0x740 [ 662.991732][T28308] ? rcu_is_watching+0x12/0xb0 [ 662.993821][T28308] ? proc_task_getattr+0x240/0x240 [ 662.995993][T28308] ? ksys_write+0x214/0x250 [ 662.997962][T28308] ? __fget_light+0xe6/0x260 [ 662.999902][T28308] __sys_sendmsg+0x117/0x1e0 [ 663.001902][T28308] ? __sys_sendmsg_sock+0x30/0x30 [ 663.004036][T28308] ? rcu_is_watching+0x12/0xb0 [ 663.006032][T28308] __do_fast_syscall_32+0x61/0xe0 [ 663.008070][T28308] do_fast_syscall_32+0x33/0x70 [ 663.010051][T28308] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 663.012592][T28308] RIP: 0023:0xf7fb5579 [ 663.014267][T28308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.022162][T28308] RSP: 002b:00000000f7fb05ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 663.025682][T28308] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 663.029082][T28308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.032462][T28308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.035865][T28308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 663.038965][T28308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.041845][T28308] [ 663.042996][T28322] CPU: 0 PID: 28322 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 663.046634][T28322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 663.050253][T28322] Call Trace: [ 663.051776][T28322] [ 663.052936][T28322] dump_stack_lvl+0x125/0x1b0 [ 663.054635][T28322] should_fail_ex+0x496/0x5b0 [ 663.056426][T28322] ? sock_alloc_inode+0x25/0x1c0 [ 663.058209][T28322] should_failslab+0x9/0x20 [ 663.059860][T28322] kmem_cache_alloc_lru+0x3e6/0x630 [ 663.061759][T28322] ? preempt_count_sub+0x150/0x150 [ 663.063596][T28322] ? sock_free_inode+0x30/0x30 [ 663.065391][T28322] ? sock_alloc_inode+0x25/0x1c0 [ 663.067196][T28322] ? apparmor_socket_post_create+0x294/0xd50 [ 663.069354][T28322] sock_alloc_inode+0x25/0x1c0 [ 663.071037][T28322] alloc_inode+0x5d/0x220 [ 663.072586][T28322] new_inode_pseudo+0x16/0x80 [ 663.074274][T28322] sock_alloc+0x40/0x270 [ 663.075778][T28322] __sock_create+0xbc/0x810 [ 663.077444][T28322] __sys_socketpair+0x25f/0x5a0 [ 663.079183][T28322] ? __ia32_sys_socket+0xb0/0xb0 [ 663.080959][T28322] ? __ia32_sys_read+0xb0/0xb0 [ 663.082668][T28322] __ia32_sys_socketpair+0x95/0x100 [ 663.084512][T28322] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 663.086870][T28322] __do_fast_syscall_32+0x61/0xe0 [ 663.088683][T28322] do_fast_syscall_32+0x33/0x70 [ 663.090454][T28322] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 663.092716][T28322] RIP: 0023:0xf7f1f579 [ 663.094157][T28322] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.101046][T28322] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 663.104050][T28322] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 663.106926][T28322] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 663.109789][T28322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.112667][T28322] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 663.115567][T28322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.118429][T28322] [ 663.121384][T28322] socket: no more sockets 00:37:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 7) 00:37:30 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 13) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:30 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 11) 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.185372][T28324] FAULT_INJECTION: forcing a failure. [ 663.185372][T28324] name failslab, interval 1, probability 0, space 0, times 0 [ 663.188491][T28327] FAULT_INJECTION: forcing a failure. [ 663.188491][T28327] name failslab, interval 1, probability 0, space 0, times 0 [ 663.190223][T28324] CPU: 0 PID: 28324 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 663.200021][T28324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 663.204362][T28324] Call Trace: [ 663.205922][T28324] [ 663.207283][T28324] dump_stack_lvl+0x125/0x1b0 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.209449][T28324] should_fail_ex+0x496/0x5b0 [ 663.211711][T28324] should_failslab+0x9/0x20 [ 663.213690][T28324] kmem_cache_alloc_node+0x389/0x3f0 [ 663.216006][T28324] ? __alloc_skb+0x287/0x330 [ 663.217916][T28324] __alloc_skb+0x287/0x330 [ 663.219787][T28324] ? __napi_build_skb+0x50/0x50 [ 663.221907][T28324] ? ns_capable+0xd5/0x110 [ 663.223826][T28324] netlink_ack+0x3bb/0x1370 [ 663.225796][T28324] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.228362][T28324] ? netlink_sendmsg+0xe40/0xe40 [ 663.230702][T28324] netlink_rcv_skb+0x345/0x440 [ 663.232853][T28324] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 663.235288][T28324] ? netlink_ack+0x1370/0x1370 [ 663.237231][T28324] ? down_write+0x200/0x200 [ 663.239061][T28324] ? netlink_deliver_tap+0x1b1/0xd10 [ 663.241280][T28324] genl_rcv+0x28/0x40 [ 663.243005][T28324] netlink_unicast+0x536/0x810 [ 663.245078][T28324] ? netlink_attachskb+0x870/0x870 [ 663.247162][T28324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 663.249554][T28324] ? __phys_addr_symbol+0x30/0x70 [ 663.251670][T28324] ? __check_object_size+0x323/0x730 [ 663.253954][T28324] netlink_sendmsg+0x93c/0xe40 [ 663.256042][T28324] ? netlink_unicast+0x810/0x810 [ 663.258195][T28324] ? __might_fault+0xe5/0x190 [ 663.260272][T28324] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 663.262649][T28324] ? netlink_unicast+0x810/0x810 [ 663.264946][T28324] sock_sendmsg+0xd9/0x180 [ 663.266969][T28324] ____sys_sendmsg+0x6ac/0x940 [ 663.269163][T28324] ? kernel_sendmsg+0x50/0x50 [ 663.271270][T28324] ? get_compat_msghdr+0x11b/0x170 [ 663.273460][T28324] ? rcu_is_watching+0x12/0xb0 [ 663.275496][T28324] ___sys_sendmsg+0x135/0x1d0 [ 663.277575][T28324] ? do_recvmmsg+0x740/0x740 [ 663.279218][T28324] ? rcu_is_watching+0x12/0xb0 [ 663.280947][T28324] ? proc_task_getattr+0x240/0x240 [ 663.282940][T28324] ? ksys_write+0x214/0x250 [ 663.284604][T28324] ? __fget_light+0xe6/0x260 [ 663.286269][T28324] __sys_sendmsg+0x117/0x1e0 [ 663.287942][T28324] ? __sys_sendmsg_sock+0x30/0x30 [ 663.289768][T28324] ? rcu_is_watching+0x12/0xb0 [ 663.291502][T28324] __do_fast_syscall_32+0x61/0xe0 [ 663.293368][T28324] do_fast_syscall_32+0x33/0x70 [ 663.295120][T28324] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 663.297418][T28324] RIP: 0023:0xf7fb5579 [ 663.298902][T28324] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.305699][T28324] RSP: 002b:00000000f7fb05ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 663.308686][T28324] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 663.311529][T28324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.314413][T28324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.317271][T28324] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 663.320106][T28324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.322972][T28324] [ 663.324099][T28327] CPU: 2 PID: 28327 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.328660][T28327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 663.333462][T28327] Call Trace: [ 663.335020][T28327] [ 663.336362][T28327] dump_stack_lvl+0x125/0x1b0 [ 663.338578][T28327] should_fail_ex+0x496/0x5b0 [ 663.340849][T28327] should_failslab+0x9/0x20 00:37:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 8) [ 663.343037][T28327] kmem_cache_alloc+0x33a/0x3b0 [ 663.345446][T28327] security_inode_alloc+0x38/0x180 [ 663.347830][T28327] inode_init_always+0xbef/0xee0 [ 663.350167][T28327] alloc_inode+0x7a/0x220 [ 663.352176][T28327] new_inode_pseudo+0x16/0x80 [ 663.354413][T28327] sock_alloc+0x40/0x270 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.356434][T28327] __sock_create+0xbc/0x810 [ 663.358675][T28327] __sys_socketpair+0x25f/0x5a0 [ 663.360990][T28327] ? __ia32_sys_socket+0xb0/0xb0 [ 663.363346][T28327] ? __ia32_sys_read+0xb0/0xb0 [ 663.365599][T28327] __ia32_sys_socketpair+0x95/0x100 [ 663.367962][T28327] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 663.370761][T28327] __do_fast_syscall_32+0x61/0xe0 [ 663.373032][T28327] do_fast_syscall_32+0x33/0x70 [ 663.375320][T28327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 663.378268][T28327] RIP: 0023:0xf7f1f579 [ 663.380148][T28327] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.388987][T28327] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 663.392222][T28327] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 663.395112][T28327] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 663.398034][T28327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.400933][T28327] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 663.403788][T28327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.406649][T28327] [ 663.409560][T28327] socket: no more sockets 00:37:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 9) 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:30 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 14) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:30 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 12) [ 663.520879][T28347] FAULT_INJECTION: forcing a failure. [ 663.520879][T28347] name failslab, interval 1, probability 0, space 0, times 0 [ 663.522255][T28348] FAULT_INJECTION: forcing a failure. 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.522255][T28348] name failslab, interval 1, probability 0, space 0, times 0 [ 663.526150][T28347] CPU: 0 PID: 28347 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 663.526165][T28347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 663.526171][T28347] Call Trace: [ 663.526175][T28347] [ 663.526180][T28347] dump_stack_lvl+0x125/0x1b0 [ 663.544831][T28347] should_fail_ex+0x496/0x5b0 [ 663.546528][T28347] should_failslab+0x9/0x20 [ 663.548583][T28347] kmem_cache_alloc+0x33a/0x3b0 [ 663.550818][T28347] ? lock_release+0x4bf/0x680 [ 663.552984][T28347] ? rcu_is_watching+0x12/0xb0 [ 663.555196][T28347] sk_prot_alloc+0x60/0x2a0 [ 663.556911][T28347] sk_alloc+0x3a/0x7f0 [ 663.558414][T28347] inet_create+0x3a0/0x1030 [ 663.560496][T28347] __sock_create+0x334/0x810 [ 663.562543][T28347] __sys_socketpair+0x25f/0x5a0 [ 663.564654][T28347] ? __ia32_sys_socket+0xb0/0xb0 [ 663.566445][T28347] ? __ia32_sys_read+0xb0/0xb0 [ 663.568120][T28347] __ia32_sys_socketpair+0x95/0x100 [ 663.570146][T28347] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.572646][T28347] __do_fast_syscall_32+0x61/0xe0 [ 663.574672][T28347] do_fast_syscall_32+0x33/0x70 [ 663.576450][T28347] entry_SYSENTER_compat_after_hwframe+0x70/0x82 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.578734][T28347] RIP: 0023:0xf7f1f579 [ 663.580347][T28347] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.588041][T28347] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 663.591016][T28347] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 663.594022][T28347] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 663.597202][T28347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.600764][T28347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 663.604340][T28347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.606092][T28359] validate_nla: 19 callbacks suppressed [ 663.606104][T28359] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 663.607937][T28347] [ 663.607947][T28348] CPU: 3 PID: 28348 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.607972][T28348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 663.607982][T28348] Call Trace: [ 663.607990][T28348] [ 663.607996][T28348] dump_stack_lvl+0x125/0x1b0 [ 663.627227][T28348] should_fail_ex+0x496/0x5b0 [ 663.629139][T28348] should_failslab+0x9/0x20 [ 663.630953][T28348] kmem_cache_alloc+0x69/0x3b0 [ 663.632954][T28348] skb_clone+0x171/0x3c0 [ 663.634747][T28348] netlink_deliver_tap+0xb3c/0xd10 [ 663.635998][T28362] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 663.636976][T28348] netlink_unicast+0x6a5/0x810 [ 663.642608][T28348] ? netlink_attachskb+0x870/0x870 [ 663.644948][T28348] ? ns_capable+0xd5/0x110 [ 663.647030][T28348] netlink_ack+0x870/0x1370 [ 663.649147][T28348] ? netlink_sendmsg+0xe40/0xe40 [ 663.651397][T28348] netlink_rcv_skb+0x345/0x440 [ 663.653610][T28348] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 663.655909][T28348] ? netlink_ack+0x1370/0x1370 [ 663.657786][T28348] ? down_write+0x200/0x200 [ 663.659515][T28348] ? netlink_deliver_tap+0x1b1/0xd10 [ 663.661417][T28348] genl_rcv+0x28/0x40 [ 663.663106][T28348] netlink_unicast+0x536/0x810 [ 663.665202][T28348] ? netlink_attachskb+0x870/0x870 [ 663.667458][T28348] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 663.669697][T28348] ? __phys_addr_symbol+0x30/0x70 [ 663.671509][T28348] ? __check_object_size+0x323/0x730 [ 663.673411][T28348] netlink_sendmsg+0x93c/0xe40 [ 663.675138][T28348] ? netlink_unicast+0x810/0x810 [ 663.676909][T28348] ? __might_fault+0xe5/0x190 [ 663.678572][T28348] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 663.680409][T28348] ? netlink_unicast+0x810/0x810 [ 663.682167][T28348] sock_sendmsg+0xd9/0x180 [ 663.683784][T28348] ____sys_sendmsg+0x6ac/0x940 [ 663.685538][T28348] ? kernel_sendmsg+0x50/0x50 [ 663.687302][T28348] ? get_compat_msghdr+0x11b/0x170 [ 663.689168][T28348] ? rcu_is_watching+0x12/0xb0 [ 663.690882][T28348] ___sys_sendmsg+0x135/0x1d0 [ 663.692604][T28348] ? do_recvmmsg+0x740/0x740 [ 663.694271][T28348] ? rcu_is_watching+0x12/0xb0 [ 663.696003][T28348] ? proc_task_getattr+0x240/0x240 [ 663.697879][T28348] ? ksys_write+0x214/0x250 [ 663.699517][T28348] ? __fget_light+0xe6/0x260 [ 663.701194][T28348] __sys_sendmsg+0x117/0x1e0 [ 663.702870][T28348] ? __sys_sendmsg_sock+0x30/0x30 [ 663.704695][T28348] ? rcu_is_watching+0x12/0xb0 [ 663.706417][T28348] __do_fast_syscall_32+0x61/0xe0 [ 663.708361][T28348] do_fast_syscall_32+0x33/0x70 [ 663.710118][T28348] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 663.712381][T28348] RIP: 0023:0xf7fb5579 [ 663.713868][T28348] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.720759][T28348] RSP: 002b:00000000f7fb05ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 663.723743][T28348] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 663.726568][T28348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.729405][T28348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.732226][T28348] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 663.735050][T28348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.737947][T28348] 00:37:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 10) 00:37:30 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 13) [ 663.749837][T28364] FAULT_INJECTION: forcing a failure. [ 663.749837][T28364] name failslab, interval 1, probability 0, space 0, times 0 [ 663.756344][T28366] FAULT_INJECTION: forcing a failure. [ 663.756344][T28366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.756487][T28364] CPU: 2 PID: 28364 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 663.765693][T28364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 663.770210][T28364] Call Trace: [ 663.771751][T28364] [ 663.773121][T28364] dump_stack_lvl+0x125/0x1b0 [ 663.775141][T28364] should_fail_ex+0x496/0x5b0 [ 663.777257][T28364] should_failslab+0x9/0x20 [ 663.779264][T28364] __kmem_cache_alloc_node+0x2fd/0x350 [ 663.781801][T28364] ? apparmor_sk_alloc_security+0x87/0x150 [ 663.784543][T28364] kmalloc_trace+0x25/0xe0 [ 663.786643][T28364] apparmor_sk_alloc_security+0x87/0x150 [ 663.789262][T28364] security_sk_alloc+0x72/0xb0 [ 663.791471][T28364] sk_prot_alloc+0xfb/0x2a0 [ 663.793485][T28364] sk_alloc+0x3a/0x7f0 [ 663.795107][T28364] inet_create+0x3a0/0x1030 [ 663.797018][T28364] __sock_create+0x334/0x810 [ 663.798961][T28364] __sys_socketpair+0x25f/0x5a0 [ 663.800859][T28364] ? __ia32_sys_socket+0xb0/0xb0 [ 663.802645][T28364] ? __ia32_sys_read+0xb0/0xb0 [ 663.804390][T28364] __ia32_sys_socketpair+0x95/0x100 [ 663.806451][T28364] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 663.809251][T28364] __do_fast_syscall_32+0x61/0xe0 [ 663.811345][T28364] do_fast_syscall_32+0x33/0x70 [ 663.813583][T28364] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 663.815988][T28364] RIP: 0023:0xf7f1f579 [ 663.817704][T28364] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.826156][T28364] RSP: 002b:00000000f7f1a5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 663.829430][T28364] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 663.832835][T28364] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 663.836459][T28364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.840067][T28364] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 663.843647][T28364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.847218][T28364] [ 663.848603][T28366] CPU: 1 PID: 28366 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 663.852438][T28366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 663.856219][T28366] Call Trace: [ 663.857524][T28366] [ 663.858795][T28366] dump_stack_lvl+0x125/0x1b0 [ 663.860921][T28366] should_fail_ex+0x496/0x5b0 [ 663.862638][T28366] _copy_to_user+0x30/0xb0 [ 663.864288][T28366] simple_read_from_buffer+0xd0/0x150 [ 663.866275][T28366] proc_fail_nth_read+0x1b0/0x290 [ 663.868138][T28366] ? proc_sessionid_read+0x290/0x290 [ 663.870081][T28366] ? security_file_permission+0xdc/0x100 [ 663.872122][T28366] ? proc_sessionid_read+0x290/0x290 [ 663.874191][T28366] vfs_read+0x1ce/0x930 [ 663.875767][T28366] ? kernel_read+0x1b0/0x1b0 [ 663.877502][T28366] ? __fget_files+0x279/0x410 [ 663.879298][T28366] ksys_read+0x12f/0x250 [ 663.880938][T28366] ? vfs_write+0xe40/0xe40 [ 663.882623][T28366] ? rcu_is_watching+0x12/0xb0 [ 663.884430][T28366] __do_fast_syscall_32+0x61/0xe0 [ 663.886327][T28366] do_fast_syscall_32+0x33/0x70 [ 663.888173][T28366] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 663.890575][T28366] RIP: 0023:0xf7fb5579 [ 663.892120][T28366] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.899519][T28366] RSP: 002b:00000000f7fb05e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 663.902853][T28366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f7fb0670 [ 663.905811][T28366] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 663.908873][T28366] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 663.912060][T28366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 663.915121][T28366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.918180][T28366] 00:37:31 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 15) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:31 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 14) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 663.931966][T28368] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 663.934486][T28370] FAULT_INJECTION: forcing a failure. [ 663.934486][T28370] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.942171][T28370] CPU: 3 PID: 28370 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 663.945812][T28370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 663.949329][T28370] Call Trace: [ 663.950566][T28370] [ 663.951651][T28370] dump_stack_lvl+0x125/0x1b0 [ 663.953345][T28370] should_fail_ex+0x496/0x5b0 [ 663.955057][T28370] _copy_to_user+0x30/0xb0 [ 663.956683][T28370] simple_read_from_buffer+0xd0/0x150 [ 663.958609][T28370] proc_fail_nth_read+0x1b0/0x290 [ 663.960416][T28370] ? proc_sessionid_read+0x290/0x290 [ 663.962305][T28370] ? security_file_permission+0xdc/0x100 [ 663.963753][T28378] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 663.964312][T28370] ? proc_sessionid_read+0x290/0x290 [ 663.969670][T28370] vfs_read+0x1ce/0x930 [ 663.971168][T28370] ? kernel_read+0x1b0/0x1b0 [ 663.972817][T28370] ? __fget_files+0x279/0x410 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 663.974577][T28370] ksys_read+0x12f/0x250 [ 663.976141][T28370] ? vfs_write+0xe40/0xe40 [ 663.977783][T28370] ? rcu_is_watching+0x12/0xb0 [ 663.979530][T28370] __do_fast_syscall_32+0x61/0xe0 [ 663.981360][T28370] do_fast_syscall_32+0x33/0x70 [ 663.983130][T28370] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 663.985472][T28370] RIP: 0023:0xf7f1f579 [ 663.986976][T28370] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 663.993938][T28370] RSP: 002b:00000000f7f1a5e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 663.996968][T28370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7f1a670 [ 663.999809][T28370] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 664.002678][T28370] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 664.005510][T28370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 664.008291][T28370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.011108][T28370] 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 664.015831][T28385] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:31 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 16) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 0: socketpair(0x3, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 0: socketpair(0x4, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x3c}}, 0x20000080) [ 664.130968][T28410] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 00:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9a6}]}, 0x3c}}, 0x0) 00:37:31 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 17) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 0: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) [ 664.176326][T28417] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 00:37:31 executing program 0: socketpair(0xe, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 664.192552][T28418] FAULT_INJECTION: forcing a failure. [ 664.192552][T28418] name failslab, interval 1, probability 0, space 0, times 0 [ 664.197529][T28418] CPU: 0 PID: 28418 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 664.201390][T28418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 664.205153][T28418] Call Trace: 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 664.206324][T28418] [ 664.207694][T28418] dump_stack_lvl+0x125/0x1b0 [ 664.209904][T28418] should_fail_ex+0x496/0x5b0 [ 664.212054][T28418] should_failslab+0x9/0x20 [ 664.214143][T28418] __kmem_cache_alloc_node+0x2fd/0x350 [ 664.216645][T28418] ? init_srcu_struct_fields+0x8da/0xdc0 [ 664.219227][T28418] ? vsprintf+0x30/0x30 [ 664.221212][T28418] kmalloc_trace+0x25/0xe0 [ 664.223268][T28418] init_srcu_struct_fields+0x8da/0xdc0 [ 664.225780][T28418] kvm_dev_ioctl+0x5be/0x1c20 [ 664.227942][T28418] ? reacquire_held_locks+0x4b0/0x4b0 [ 664.230400][T28418] ? bit_wait_timeout+0x160/0x160 [ 664.232715][T28418] ? __fget_files+0x279/0x410 [ 664.234903][T28418] ? kvm_vcpu_stats_release+0x80/0x80 [ 664.237340][T28418] ? __fget_files+0x279/0x410 [ 664.239487][T28418] ? bpf_lsm_file_ioctl+0x9/0x10 [ 664.241761][T28418] ? kvm_vcpu_stats_release+0x80/0x80 [ 664.244177][T28418] __do_compat_sys_ioctl+0x2bf/0x330 [ 664.246061][T28418] __do_fast_syscall_32+0x61/0xe0 [ 664.247860][T28418] do_fast_syscall_32+0x33/0x70 [ 664.249612][T28418] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 664.251852][T28418] RIP: 0023:0xf7f81579 [ 664.253318][T28418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 664.260025][T28418] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 664.263135][T28418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 664.265930][T28418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.268696][T28418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.271504][T28418] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 664.274339][T28418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.277125][T28418] 00:37:31 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 18) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:31 executing program 0: socketpair(0x2d, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x28, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 0: socketpair(0x7ffff, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 0: socketpair(0x2, 0x3, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 3: socketpair(0x0, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 19) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 3: socketpair(0x0, 0x2, 0x0, &(0x7f0000000300)) [ 664.465709][T28462] FAULT_INJECTION: forcing a failure. [ 664.465709][T28462] name failslab, interval 1, probability 0, space 0, times 0 [ 664.474239][T28462] CPU: 3 PID: 28462 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:31 executing program 0: socketpair(0x2, 0x4, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 664.478753][T28462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 664.483503][T28462] Call Trace: [ 664.485035][T28462] [ 664.486368][T28462] dump_stack_lvl+0x125/0x1b0 [ 664.488553][T28462] should_fail_ex+0x496/0x5b0 [ 664.490364][T28462] should_failslab+0x9/0x20 [ 664.491989][T28462] __kmem_cache_alloc_node+0x2fd/0x350 [ 664.493880][T28462] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 664.495560][T28462] kmalloc_trace+0x25/0xe0 [ 664.497140][T28462] kvm_dev_ioctl+0x9b6/0x1c20 [ 664.498775][T28462] ? bit_wait_timeout+0x160/0x160 [ 664.500539][T28462] ? __fget_files+0x279/0x410 [ 664.502153][T28462] ? kvm_vcpu_stats_release+0x80/0x80 [ 664.503984][T28462] ? __fget_files+0x279/0x410 [ 664.505607][T28462] ? bpf_lsm_file_ioctl+0x9/0x10 [ 664.507316][T28462] ? kvm_vcpu_stats_release+0x80/0x80 [ 664.509191][T28462] __do_compat_sys_ioctl+0x2bf/0x330 [ 664.511006][T28462] __do_fast_syscall_32+0x61/0xe0 [ 664.512748][T28462] do_fast_syscall_32+0x33/0x70 [ 664.514428][T28462] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 664.516622][T28462] RIP: 0023:0xf7f81579 [ 664.518033][T28462] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 664.525179][T28462] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 664.528474][T28462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 664.531344][T28462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.534105][T28462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.537205][T28462] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 664.540597][T28462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.543995][T28462] 00:37:31 executing program 3: socketpair(0x0, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 20) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:31 executing program 0: socketpair(0x2, 0xa, 0x0, &(0x7f0000000300)) 00:37:31 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x1400, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 0: socketpair(0x2, 0xe, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x2800, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 664.650983][T28492] FAULT_INJECTION: forcing a failure. [ 664.650983][T28492] name failslab, interval 1, probability 0, space 0, times 0 [ 664.656586][T28492] CPU: 1 PID: 28492 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 664.661243][T28492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 00:37:31 executing program 0: socketpair(0x2, 0x2d, 0x0, &(0x7f0000000300)) [ 664.665981][T28492] Call Trace: [ 664.667542][T28492] [ 664.668940][T28492] dump_stack_lvl+0x125/0x1b0 [ 664.671138][T28492] should_fail_ex+0x496/0x5b0 [ 664.673413][T28492] should_failslab+0x9/0x20 [ 664.675591][T28492] __kmem_cache_alloc_node+0x2fd/0x350 [ 664.678104][T28492] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 664.680349][T28492] kmalloc_trace+0x25/0xe0 [ 664.682443][T28492] kvm_dev_ioctl+0x9b6/0x1c20 [ 664.684601][T28492] ? bit_wait_timeout+0x160/0x160 [ 664.686792][T28492] ? __fget_files+0x279/0x410 [ 664.688532][T28492] ? kvm_vcpu_stats_release+0x80/0x80 [ 664.690490][T28492] ? __fget_files+0x279/0x410 [ 664.692345][T28492] ? bpf_lsm_file_ioctl+0x9/0x10 [ 664.694307][T28492] ? kvm_vcpu_stats_release+0x80/0x80 [ 664.696748][T28492] __do_compat_sys_ioctl+0x2bf/0x330 [ 664.699156][T28492] __do_fast_syscall_32+0x61/0xe0 [ 664.701156][T28492] do_fast_syscall_32+0x33/0x70 [ 664.703312][T28492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 664.706182][T28492] RIP: 0023:0xf7f81579 [ 664.707910][T28492] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 664.715378][T28492] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 664.719092][T28492] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 664.722048][T28492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.725441][T28492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.728215][T28492] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 664.730969][T28492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.734528][T28492] 00:37:31 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 21) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:31 executing program 0: socketpair(0x2, 0x7ffff, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x4ed1, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:31 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 00:37:31 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 664.834580][T28513] FAULT_INJECTION: forcing a failure. [ 664.834580][T28513] name failslab, interval 1, probability 0, space 0, times 0 [ 664.839218][T28513] CPU: 3 PID: 28513 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 664.842954][T28513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 664.846647][T28513] Call Trace: 00:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xd14e, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 664.847835][T28513] [ 664.849393][T28513] dump_stack_lvl+0x125/0x1b0 [ 664.851241][T28513] should_fail_ex+0x496/0x5b0 [ 664.853349][T28513] should_failslab+0x9/0x20 [ 664.855029][T28513] __kmem_cache_alloc_node+0x2fd/0x350 [ 664.857005][T28513] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 664.858745][T28513] kmalloc_trace+0x25/0xe0 [ 664.860313][T28513] kvm_dev_ioctl+0x9b6/0x1c20 [ 664.862109][T28513] ? bit_wait_timeout+0x160/0x160 [ 664.863864][T28513] ? __fget_files+0x279/0x410 [ 664.865609][T28513] ? kvm_vcpu_stats_release+0x80/0x80 [ 664.867537][T28513] ? __fget_files+0x279/0x410 [ 664.869145][T28513] ? bpf_lsm_file_ioctl+0x9/0x10 [ 664.870869][T28513] ? kvm_vcpu_stats_release+0x80/0x80 [ 664.872809][T28513] __do_compat_sys_ioctl+0x2bf/0x330 [ 664.874628][T28513] __do_fast_syscall_32+0x61/0xe0 [ 664.876438][T28513] do_fast_syscall_32+0x33/0x70 [ 664.878160][T28513] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 664.880381][T28513] RIP: 0023:0xf7f81579 [ 664.881843][T28513] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 664.888534][T28513] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 664.891351][T28513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 664.894278][T28513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.897108][T28513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.899873][T28513] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 664.902675][T28513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.905504][T28513] 00:37:31 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 00:37:32 executing program 3: socketpair(0xa, 0x2, 0x0, 0x0) 00:37:32 executing program 0: socketpair(0x2, 0x2, 0x2, &(0x7f0000000300)) 00:37:32 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 22) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:32 executing program 3: socketpair(0xa, 0x2, 0x0, 0x0) 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x30000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.014095][T28536] FAULT_INJECTION: forcing a failure. [ 665.014095][T28536] name failslab, interval 1, probability 0, space 0, times 0 [ 665.018510][T28536] CPU: 1 PID: 28536 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 665.021920][T28536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 665.025685][T28536] Call Trace: [ 665.026792][T28536] [ 665.027789][T28536] dump_stack_lvl+0x125/0x1b0 [ 665.029608][T28536] should_fail_ex+0x496/0x5b0 [ 665.031530][T28536] should_failslab+0x9/0x20 [ 665.033394][T28536] __kmem_cache_alloc_node+0x2fd/0x350 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x34000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.035571][T28536] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 665.037777][T28536] kmalloc_trace+0x25/0xe0 [ 665.039441][T28536] kvm_dev_ioctl+0x9b6/0x1c20 [ 665.041009][T28536] ? bit_wait_timeout+0x160/0x160 00:37:32 executing program 0: socketpair(0x2, 0x2, 0x3, &(0x7f0000000300)) [ 665.042862][T28536] ? __fget_files+0x279/0x410 [ 665.044596][T28536] ? kvm_vcpu_stats_release+0x80/0x80 [ 665.046560][T28536] ? __fget_files+0x279/0x410 [ 665.048377][T28536] ? bpf_lsm_file_ioctl+0x9/0x10 [ 665.050153][T28536] ? kvm_vcpu_stats_release+0x80/0x80 [ 665.052188][T28536] __do_compat_sys_ioctl+0x2bf/0x330 [ 665.054113][T28536] __do_fast_syscall_32+0x61/0xe0 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x400300, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.056056][T28536] do_fast_syscall_32+0x33/0x70 [ 665.058093][T28536] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 665.060371][T28536] RIP: 0023:0xf7f81579 [ 665.061865][T28536] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 665.069255][T28536] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 665.072306][T28536] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 665.075249][T28536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.078207][T28536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.081018][T28536] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 665.083953][T28536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.086802][T28536] 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:32 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 23) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:32 executing program 3: socketpair(0xa, 0x2, 0x0, 0x0) 00:37:32 executing program 0: socketpair(0x2, 0x2, 0x4, &(0x7f0000000300)) 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.181668][T28563] FAULT_INJECTION: forcing a failure. [ 665.181668][T28563] name failslab, interval 1, probability 0, space 0, times 0 00:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.186571][T28563] CPU: 1 PID: 28563 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 665.190400][T28563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 665.194116][T28563] Call Trace: [ 665.195312][T28563] [ 665.196534][T28563] dump_stack_lvl+0x125/0x1b0 [ 665.198218][T28563] should_fail_ex+0x496/0x5b0 [ 665.199917][T28563] should_failslab+0x9/0x20 [ 665.201717][T28563] __kmem_cache_alloc_node+0x2fd/0x350 [ 665.203764][T28563] ? kvm_dev_ioctl+0x9b6/0x1c20 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.205486][T28563] kmalloc_trace+0x25/0xe0 [ 665.207430][T28563] kvm_dev_ioctl+0x9b6/0x1c20 [ 665.209282][T28563] ? bit_wait_timeout+0x160/0x160 [ 665.211062][T28563] ? __fget_files+0x279/0x410 [ 665.212745][T28563] ? kvm_vcpu_stats_release+0x80/0x80 00:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.214801][T28563] ? __fget_files+0x279/0x410 [ 665.216652][T28563] ? bpf_lsm_file_ioctl+0x9/0x10 [ 665.218531][T28563] ? kvm_vcpu_stats_release+0x80/0x80 [ 665.220411][T28563] __do_compat_sys_ioctl+0x2bf/0x330 [ 665.222458][T28563] __do_fast_syscall_32+0x61/0xe0 [ 665.224225][T28563] do_fast_syscall_32+0x33/0x70 [ 665.226002][T28563] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 665.228364][T28563] RIP: 0023:0xf7f81579 [ 665.229842][T28563] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 665.237942][T28563] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 665.240989][T28563] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 665.244241][T28563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.247066][T28563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.249986][T28563] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 665.252797][T28563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.255682][T28563] 00:37:32 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 24) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:32 executing program 0: socketpair(0x2, 0x2, 0x5, &(0x7f0000000300)) 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000080) [ 665.346315][T28584] FAULT_INJECTION: forcing a failure. [ 665.346315][T28584] name failslab, interval 1, probability 0, space 0, times 0 [ 665.352142][T28584] CPU: 2 PID: 28584 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 665.356420][T28584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 665.360759][T28584] Call Trace: [ 665.362162][T28584] [ 665.363410][T28584] dump_stack_lvl+0x125/0x1b0 [ 665.363866][T28589] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 665.365419][T28584] should_fail_ex+0x496/0x5b0 [ 665.365448][T28584] should_failslab+0x9/0x20 [ 665.365464][T28584] __kmem_cache_alloc_node+0x2fd/0x350 00:37:32 executing program 0: socketpair(0x2, 0x2, 0x10, &(0x7f0000000300)) [ 665.375234][T28584] ? alloc_workqueue+0x16f/0x1490 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.377551][T28584] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 665.379760][T28584] ? do_fast_syscall_32+0x33/0x70 [ 665.381953][T28584] kmalloc_trace+0x25/0xe0 [ 665.383801][T28584] alloc_workqueue+0x16f/0x1490 [ 665.385511][T28584] ? workqueue_sysfs_register+0x400/0x400 [ 665.387654][T28584] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 665.389485][T28584] kvm_mmu_init_vm+0x248/0x2e0 [ 665.391182][T28584] kvm_arch_init_vm+0x39/0x720 [ 665.393042][T28584] ? __kasan_kmalloc+0xa2/0xb0 [ 665.394755][T28584] kvm_dev_ioctl+0xa31/0x1c20 [ 665.396432][T28584] ? bit_wait_timeout+0x160/0x160 [ 665.398454][T28584] ? __fget_files+0x279/0x410 [ 665.400198][T28584] ? kvm_vcpu_stats_release+0x80/0x80 [ 665.402318][T28584] ? __fget_files+0x279/0x410 [ 665.403983][T28584] ? bpf_lsm_file_ioctl+0x9/0x10 [ 665.405765][T28584] ? kvm_vcpu_stats_release+0x80/0x80 [ 665.407821][T28584] __do_compat_sys_ioctl+0x2bf/0x330 [ 665.409695][T28584] __do_fast_syscall_32+0x61/0xe0 [ 665.411492][T28584] do_fast_syscall_32+0x33/0x70 [ 665.413342][T28584] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 665.415543][T28584] RIP: 0023:0xf7f81579 [ 665.417177][T28584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 665.423973][T28584] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 665.427109][T28584] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 665.429885][T28584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.432777][T28584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.435764][T28584] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 665.438605][T28584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.441549][T28584] 00:37:32 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 1) 00:37:32 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 25) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:32 executing program 0: socketpair(0x2, 0x2, 0x11, &(0x7f0000000300)) 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.540218][T28604] FAULT_INJECTION: forcing a failure. 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.540218][T28604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:37:32 executing program 0: socketpair(0x2, 0x2, 0x21, &(0x7f0000000300)) [ 665.546841][T28604] CPU: 3 PID: 28604 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 665.551386][T28604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 665.555895][T28604] Call Trace: [ 665.557382][T28604] [ 665.558664][T28604] dump_stack_lvl+0x125/0x1b0 [ 665.560592][T28604] should_fail_ex+0x496/0x5b0 [ 665.562585][T28604] __should_fail_alloc_page+0xe7/0x130 [ 665.564959][T28604] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 665.567107][T28604] __alloc_pages+0x14e/0x4a0 [ 665.568706][T28604] ? page_ext_get+0x182/0x310 [ 665.570355][T28604] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 665.572658][T28604] ? rcu_is_watching+0x12/0xb0 [ 665.574304][T28604] alloc_pages+0x1a9/0x270 [ 665.575864][T28604] pte_alloc_one+0x20/0x370 [ 665.577465][T28604] __pte_alloc+0x6e/0x3b0 [ 665.578980][T28604] ? pmd_install+0x170/0x170 [ 665.580569][T28604] __handle_mm_fault+0x33a0/0x3e20 [ 665.582315][T28604] ? vm_iomap_memory+0x170/0x170 [ 665.584078][T28604] ? find_vma+0x10e/0x1b0 [ 665.585629][T28604] ? can_vma_merge_before+0x3a0/0x3a0 [ 665.587530][T28604] ? rcu_is_watching+0x12/0xb0 [ 665.589289][T28604] handle_mm_fault+0x47a/0xa00 [ 665.591010][T28604] ? lock_mm_and_find_vma+0xa6/0x760 [ 665.592896][T28604] do_user_addr_fault+0x3d1/0x1010 [ 665.594741][T28604] ? rcu_is_watching+0x12/0xb0 [ 665.596527][T28604] exc_page_fault+0x5c/0xd0 [ 665.598146][T28604] asm_exc_page_fault+0x26/0x30 [ 665.599870][T28604] RIP: 0010:__put_user_4+0x11/0x20 00:37:32 executing program 0: socketpair(0x2, 0x2, 0x106, &(0x7f0000000300)) 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x14000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.601741][T28604] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 665.608704][T28604] RSP: 0018:ffffc90002fc7e20 EFLAGS: 00050206 [ 665.610866][T28604] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 665.613651][T28604] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 665.616688][T28604] RBP: 1ffff920005f8fc8 R08: 0000000000000000 R09: fffffbfff1d9c43a [ 665.619468][T28604] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 665.622359][T28604] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 665.625181][T28604] ? __sys_socketpair+0x115/0x5a0 [ 665.626919][T28604] __sys_socketpair+0x121/0x5a0 [ 665.628809][T28604] ? __ia32_sys_socket+0xb0/0xb0 [ 665.630606][T28604] ? __ia32_sys_read+0xb0/0xb0 [ 665.632316][T28604] __ia32_sys_socketpair+0x95/0x100 [ 665.634191][T28604] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 665.636559][T28604] __do_fast_syscall_32+0x61/0xe0 [ 665.638357][T28604] do_fast_syscall_32+0x33/0x70 [ 665.640070][T28604] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 665.642355][T28604] RIP: 0023:0xf7fc7579 [ 665.643907][T28604] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 665.650701][T28604] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 665.653716][T28604] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 665.656549][T28604] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 665.659616][T28604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.662543][T28604] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 665.665239][T28604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.667966][T28604] [ 665.671237][T28620] FAULT_INJECTION: forcing a failure. [ 665.671237][T28620] name failslab, interval 1, probability 0, space 0, times 0 [ 665.675801][T28620] CPU: 1 PID: 28620 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:32 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 2) 00:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x28000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 665.679461][T28620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 665.683206][T28620] Call Trace: [ 665.684358][T28620] [ 665.685434][T28620] dump_stack_lvl+0x125/0x1b0 [ 665.687225][T28620] should_fail_ex+0x496/0x5b0 [ 665.688847][T28620] should_failslab+0x9/0x20 [ 665.690519][T28620] __kmem_cache_alloc_node+0x2fd/0x350 [ 665.692438][T28620] ? kasprintf+0xc8/0x100 [ 665.693959][T28620] ? kasprintf+0xc8/0x100 [ 665.695620][T28620] __kmalloc_node_track_caller+0x50/0x100 [ 665.697641][T28620] kvasprintf+0xbd/0x150 [ 665.698267][T28625] FAULT_INJECTION: forcing a failure. [ 665.698267][T28625] name failslab, interval 1, probability 0, space 0, times 0 [ 665.699110][T28620] ? bust_spinlocks+0xe0/0xe0 [ 665.706246][T28620] ? fill_ptr_key+0x30/0x30 [ 665.707840][T28620] ? preempt_count_add+0x72/0x140 [ 665.709639][T28620] kasprintf+0xc8/0x100 [ 665.711100][T28620] ? kvasprintf_const+0x190/0x190 [ 665.712873][T28620] ? free_zapped_rcu+0x290/0x290 [ 665.714574][T28620] ? lockdep_init_map_type+0x16d/0x7c0 [ 665.716469][T28620] alloc_workqueue+0x590/0x1490 [ 665.718184][T28620] ? workqueue_sysfs_register+0x400/0x400 [ 665.720378][T28620] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 665.722626][T28620] kvm_mmu_init_vm+0x248/0x2e0 [ 665.724722][T28620] kvm_arch_init_vm+0x39/0x720 [ 665.726797][T28620] ? __kasan_kmalloc+0xa2/0xb0 [ 665.728782][T28620] kvm_dev_ioctl+0xa31/0x1c20 [ 665.730777][T28620] ? bit_wait_timeout+0x160/0x160 [ 665.733053][T28620] ? __fget_files+0x279/0x410 [ 665.735179][T28620] ? kvm_vcpu_stats_release+0x80/0x80 [ 665.737581][T28620] ? __fget_files+0x279/0x410 [ 665.739678][T28620] ? bpf_lsm_file_ioctl+0x9/0x10 [ 665.741890][T28620] ? kvm_vcpu_stats_release+0x80/0x80 [ 665.744214][T28620] __do_compat_sys_ioctl+0x2bf/0x330 [ 665.746536][T28620] __do_fast_syscall_32+0x61/0xe0 [ 665.748736][T28620] do_fast_syscall_32+0x33/0x70 [ 665.750833][T28620] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 665.753659][T28620] RIP: 0023:0xf7f81579 [ 665.755483][T28620] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 665.763719][T28620] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 665.767162][T28620] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 665.770599][T28620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.774020][T28620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.777458][T28620] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 665.780848][T28620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.784222][T28620] [ 665.785556][T28625] CPU: 2 PID: 28625 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 665.789967][T28625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 665.794363][T28625] Call Trace: [ 665.795867][T28625] [ 665.797204][T28625] dump_stack_lvl+0x125/0x1b0 [ 665.799297][T28625] should_fail_ex+0x496/0x5b0 [ 665.801389][T28625] should_failslab+0x9/0x20 [ 665.803414][T28625] kmem_cache_alloc+0x33a/0x3b0 [ 665.805588][T28625] ? rcu_is_watching+0x12/0xb0 [ 665.807706][T28625] ptlock_alloc+0x1f/0x70 [ 665.809603][T28625] pte_alloc_one+0x74/0x370 [ 665.811655][T28625] __pte_alloc+0x6e/0x3b0 [ 665.813633][T28625] ? pmd_install+0x170/0x170 [ 665.815720][T28625] __handle_mm_fault+0x33a0/0x3e20 [ 665.818007][T28625] ? vm_iomap_memory+0x170/0x170 [ 665.820172][T28625] ? find_vma+0x10e/0x1b0 [ 665.822124][T28625] ? can_vma_merge_before+0x3a0/0x3a0 [ 665.824521][T28625] ? rcu_is_watching+0x12/0xb0 [ 665.826655][T28625] handle_mm_fault+0x47a/0xa00 [ 665.828793][T28625] ? lock_mm_and_find_vma+0xa6/0x760 [ 665.831158][T28625] do_user_addr_fault+0x3d1/0x1010 [ 665.833417][T28625] ? rcu_is_watching+0x12/0xb0 [ 665.835527][T28625] exc_page_fault+0x5c/0xd0 [ 665.837560][T28625] asm_exc_page_fault+0x26/0x30 [ 665.839720][T28625] RIP: 0010:__put_user_4+0x11/0x20 [ 665.842042][T28625] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 665.850552][T28625] RSP: 0018:ffffc90003447e20 EFLAGS: 00050206 [ 665.853335][T28625] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 665.856906][T28625] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 665.860428][T28625] RBP: 1ffff92000688fc8 R08: 0000000000000000 R09: fffffbfff1d9c43a [ 665.863910][T28625] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 665.867395][T28625] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 665.870848][T28625] ? __sys_socketpair+0x115/0x5a0 [ 665.873106][T28625] __sys_socketpair+0x121/0x5a0 [ 665.875294][T28625] ? __ia32_sys_socket+0xb0/0xb0 [ 665.877523][T28625] ? __ia32_sys_read+0xb0/0xb0 [ 665.879622][T28625] __ia32_sys_socketpair+0x95/0x100 [ 665.881913][T28625] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 665.884685][T28625] __do_fast_syscall_32+0x61/0xe0 [ 665.886831][T28625] do_fast_syscall_32+0x33/0x70 [ 665.888948][T28625] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 665.891661][T28625] RIP: 0023:0xf7fc7579 [ 665.893467][T28625] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 665.901820][T28625] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 665.905489][T28625] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 665.908937][T28625] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 665.912353][T28625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.915825][T28625] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 665.919263][T28625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.922714][T28625] 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x300, &(0x7f0000000300)) 00:37:33 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 26) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:33 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 3) 00:37:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x3f000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 666.116812][T28634] FAULT_INJECTION: forcing a failure. [ 666.116812][T28634] name failslab, interval 1, probability 0, space 0, times 0 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x500, &(0x7f0000000300)) 00:37:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 666.123018][T28634] CPU: 3 PID: 28634 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 666.127367][T28634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 666.131663][T28634] Call Trace: [ 666.133109][T28634] [ 666.134392][T28634] dump_stack_lvl+0x125/0x1b0 [ 666.136485][T28634] should_fail_ex+0x496/0x5b0 [ 666.138662][T28634] should_failslab+0x9/0x20 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x601, &(0x7f0000000300)) [ 666.140602][T28634] kmem_cache_alloc+0x33a/0x3b0 00:37:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 666.142803][T28634] ? _raw_spin_unlock+0x28/0x40 [ 666.144994][T28634] __anon_vma_prepare+0x64/0x550 [ 666.147096][T28634] __handle_mm_fault+0x394d/0x3e20 [ 666.149255][T28634] ? vm_iomap_memory+0x170/0x170 [ 666.151378][T28634] ? find_vma+0x10e/0x1b0 [ 666.153211][T28634] ? can_vma_merge_before+0x3a0/0x3a0 [ 666.155492][T28634] ? rcu_is_watching+0x12/0xb0 [ 666.157487][T28634] handle_mm_fault+0x47a/0xa00 [ 666.159176][T28634] ? lock_mm_and_find_vma+0xa6/0x760 [ 666.161009][T28634] do_user_addr_fault+0x3d1/0x1010 [ 666.162792][T28634] ? rcu_is_watching+0x12/0xb0 [ 666.164429][T28634] exc_page_fault+0x5c/0xd0 [ 666.165993][T28634] asm_exc_page_fault+0x26/0x30 [ 666.167712][T28634] RIP: 0010:__put_user_4+0x11/0x20 [ 666.169561][T28634] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 666.176163][T28634] RSP: 0018:ffffc90003297e20 EFLAGS: 00050206 [ 666.177019][T28647] FAULT_INJECTION: forcing a failure. [ 666.177019][T28647] name failslab, interval 1, probability 0, space 0, times 0 [ 666.178331][T28634] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 666.178340][T28634] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 666.178347][T28634] RBP: 1ffff92000652fc8 R08: 0000000000000000 R09: fffffbfff1d9c43a [ 666.178353][T28634] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 666.178359][T28634] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 666.178368][T28634] ? __sys_socketpair+0x115/0x5a0 [ 666.199210][T28634] __sys_socketpair+0x121/0x5a0 [ 666.201118][T28634] ? __ia32_sys_socket+0xb0/0xb0 [ 666.203245][T28634] ? __ia32_sys_read+0xb0/0xb0 [ 666.205137][T28634] __ia32_sys_socketpair+0x95/0x100 [ 666.206983][T28634] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 666.209507][T28634] __do_fast_syscall_32+0x61/0xe0 [ 666.211387][T28634] do_fast_syscall_32+0x33/0x70 [ 666.213204][T28634] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 666.215771][T28634] RIP: 0023:0xf7fc7579 [ 666.217545][T28634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 666.224265][T28634] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 666.227210][T28634] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 666.230005][T28634] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 666.232766][T28634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.235484][T28634] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 666.238289][T28634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.241166][T28634] 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x810, &(0x7f0000000300)) [ 666.242258][T28647] CPU: 0 PID: 28647 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 666.246008][T28647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 666.249635][T28647] Call Trace: [ 666.250806][T28647] [ 666.251830][T28647] dump_stack_lvl+0x125/0x1b0 [ 666.253510][T28647] should_fail_ex+0x496/0x5b0 [ 666.255170][T28647] should_failslab+0x9/0x20 [ 666.256722][T28647] __kmem_cache_alloc_node+0x2fd/0x350 [ 666.258582][T28647] ? apply_wqattrs_prepare+0xff/0xa90 [ 666.260597][T28647] ? apply_wqattrs_prepare+0xff/0xa90 [ 666.262431][T28647] __kmalloc+0x4f/0x100 [ 666.263897][T28647] apply_wqattrs_prepare+0xff/0xa90 [ 666.265718][T28647] ? preempt_count_sub+0x150/0x150 [ 666.267492][T28647] apply_workqueue_attrs_locked+0xcb/0x150 [ 666.269532][T28647] alloc_workqueue+0xdae/0x1490 [ 666.271306][T28647] ? workqueue_sysfs_register+0x400/0x400 [ 666.273623][T28647] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 666.275433][T28647] kvm_mmu_init_vm+0x248/0x2e0 [ 666.277149][T28647] kvm_arch_init_vm+0x39/0x720 [ 666.278835][T28647] ? __kasan_kmalloc+0xa2/0xb0 [ 666.280553][T28647] kvm_dev_ioctl+0xa31/0x1c20 [ 666.282268][T28647] ? bit_wait_timeout+0x160/0x160 [ 666.284256][T28647] ? __fget_files+0x279/0x410 [ 666.286200][T28647] ? kvm_vcpu_stats_release+0x80/0x80 [ 666.288079][T28647] ? __fget_files+0x279/0x410 [ 666.289786][T28647] ? bpf_lsm_file_ioctl+0x9/0x10 [ 666.291895][T28647] ? kvm_vcpu_stats_release+0x80/0x80 [ 666.294140][T28647] __do_compat_sys_ioctl+0x2bf/0x330 [ 666.296376][T28647] __do_fast_syscall_32+0x61/0xe0 [ 666.298534][T28647] do_fast_syscall_32+0x33/0x70 [ 666.300708][T28647] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 666.303152][T28647] RIP: 0023:0xf7f81579 [ 666.304658][T28647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 666.311526][T28647] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 666.314682][T28647] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 666.317644][T28647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.320679][T28647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.323655][T28647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 666.326702][T28647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.329543][T28647] 00:37:33 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 27) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xd14e0000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:33 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 4) 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x1008, &(0x7f0000000300)) [ 666.435624][T28653] FAULT_INJECTION: forcing a failure. [ 666.435624][T28653] name failslab, interval 1, probability 0, space 0, times 0 [ 666.440229][T28653] CPU: 2 PID: 28653 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x1100, &(0x7f0000000300)) 00:37:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 666.443910][T28653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 666.448091][T28653] Call Trace: [ 666.449306][T28653] [ 666.450380][T28653] dump_stack_lvl+0x125/0x1b0 [ 666.452117][T28653] should_fail_ex+0x496/0x5b0 [ 666.454104][T28653] should_failslab+0x9/0x20 [ 666.455925][T28653] kmem_cache_alloc+0x33a/0x3b0 [ 666.457915][T28653] ? _raw_spin_unlock+0x28/0x40 [ 666.459723][T28653] __anon_vma_prepare+0x2bf/0x550 [ 666.461529][T28653] __handle_mm_fault+0x394d/0x3e20 [ 666.463367][T28653] ? vm_iomap_memory+0x170/0x170 [ 666.465168][T28653] ? find_vma+0x10e/0x1b0 [ 666.466729][T28653] ? can_vma_merge_before+0x3a0/0x3a0 [ 666.468645][T28653] ? rcu_is_watching+0x12/0xb0 [ 666.470376][T28653] handle_mm_fault+0x47a/0xa00 [ 666.472081][T28653] ? lock_mm_and_find_vma+0xa6/0x760 [ 666.474048][T28653] do_user_addr_fault+0x3d1/0x1010 [ 666.475890][T28653] ? rcu_is_watching+0x12/0xb0 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x1f00, &(0x7f0000000300)) [ 666.477659][T28653] exc_page_fault+0x5c/0xd0 [ 666.479552][T28653] asm_exc_page_fault+0x26/0x30 [ 666.481331][T28653] RIP: 0010:__put_user_4+0x11/0x20 [ 666.483189][T28653] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 666.490063][T28653] RSP: 0018:ffffc90002b1fe20 EFLAGS: 00050206 [ 666.492279][T28653] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 666.495291][T28653] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 666.498213][T28653] RBP: 1ffff92000563fc8 R08: 0000000000000000 R09: fffffbfff1d9c43a 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x2000, &(0x7f0000000300)) [ 666.501123][T28653] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 666.504226][T28653] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 666.507201][T28653] ? __sys_socketpair+0x115/0x5a0 [ 666.509070][T28653] __sys_socketpair+0x121/0x5a0 [ 666.511050][T28653] ? __ia32_sys_socket+0xb0/0xb0 [ 666.512979][T28653] ? __ia32_sys_read+0xb0/0xb0 [ 666.514689][T28653] __ia32_sys_socketpair+0x95/0x100 [ 666.516550][T28653] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 666.518810][T28653] __do_fast_syscall_32+0x61/0xe0 [ 666.520613][T28653] do_fast_syscall_32+0x33/0x70 [ 666.522374][T28653] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 666.524643][T28653] RIP: 0023:0xf7fc7579 [ 666.526105][T28653] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 666.532902][T28653] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 666.535806][T28653] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 666.538630][T28653] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 666.541444][T28653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.544178][T28668] FAULT_INJECTION: forcing a failure. [ 666.544178][T28668] name failslab, interval 1, probability 0, space 0, times 0 [ 666.544340][T28653] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 666.552173][T28653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.555021][T28653] [ 666.556139][T28668] CPU: 0 PID: 28668 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 666.559830][T28668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 666.563405][T28668] Call Trace: [ 666.564564][T28668] [ 666.565664][T28668] dump_stack_lvl+0x125/0x1b0 [ 666.567375][T28668] should_fail_ex+0x496/0x5b0 [ 666.569105][T28668] should_failslab+0x9/0x20 [ 666.570749][T28668] __kmem_cache_alloc_node+0x2fd/0x350 [ 666.572709][T28668] ? apply_wqattrs_prepare+0x137/0xa90 [ 666.574682][T28668] kmalloc_trace+0x25/0xe0 [ 666.576308][T28668] apply_wqattrs_prepare+0x137/0xa90 [ 666.578269][T28668] ? preempt_count_sub+0x150/0x150 [ 666.580155][T28668] apply_workqueue_attrs_locked+0xcb/0x150 [ 666.582272][T28668] alloc_workqueue+0xdae/0x1490 [ 666.584002][T28668] ? workqueue_sysfs_register+0x400/0x400 [ 666.586009][T28668] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 666.587797][T28668] kvm_mmu_init_vm+0x248/0x2e0 [ 666.589489][T28668] kvm_arch_init_vm+0x39/0x720 [ 666.591168][T28668] ? __kasan_kmalloc+0xa2/0xb0 [ 666.592895][T28668] kvm_dev_ioctl+0xa31/0x1c20 [ 666.594552][T28668] ? bit_wait_timeout+0x160/0x160 [ 666.596370][T28668] ? __fget_files+0x279/0x410 [ 666.598046][T28668] ? kvm_vcpu_stats_release+0x80/0x80 [ 666.599925][T28668] ? __fget_files+0x279/0x410 [ 666.601607][T28668] ? bpf_lsm_file_ioctl+0x9/0x10 [ 666.603329][T28668] ? kvm_vcpu_stats_release+0x80/0x80 [ 666.605216][T28668] __do_compat_sys_ioctl+0x2bf/0x330 [ 666.607094][T28668] __do_fast_syscall_32+0x61/0xe0 [ 666.608874][T28668] do_fast_syscall_32+0x33/0x70 [ 666.610604][T28668] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 666.612820][T28668] RIP: 0023:0xf7f81579 [ 666.614260][T28668] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 666.621104][T28668] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 666.624064][T28668] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 666.626903][T28668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.629985][T28668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.633371][T28668] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 666.636584][T28668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.639955][T28668] 00:37:33 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 28) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x3f00, &(0x7f0000000300)) 00:37:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:33 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 5) [ 666.733771][T28674] FAULT_INJECTION: forcing a failure. [ 666.733771][T28674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x4000, &(0x7f0000000300)) [ 666.740070][T28674] CPU: 3 PID: 28674 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 666.744590][T28674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 666.748889][T28674] Call Trace: [ 666.750395][T28674] 00:37:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 666.751721][T28674] dump_stack_lvl+0x125/0x1b0 [ 666.753864][T28674] should_fail_ex+0x496/0x5b0 [ 666.755957][T28674] __should_fail_alloc_page+0xe7/0x130 [ 666.758310][T28674] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 666.760956][T28674] ? lock_release+0x4bf/0x680 [ 666.763035][T28674] __alloc_pages+0x14e/0x4a0 [ 666.765033][T28674] ? lock_acquire+0x464/0x510 [ 666.767071][T28674] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 666.769925][T28674] ? lock_sync+0x190/0x190 [ 666.771818][T28674] ? rcu_is_watching+0x12/0xb0 [ 666.773889][T28674] ? reacquire_held_locks+0x4b0/0x4b0 [ 666.776165][T28674] ? lock_release+0x4bf/0x680 [ 666.778221][T28674] ? __anon_vma_prepare+0x26a/0x550 [ 666.780398][T28674] __folio_alloc+0x16/0x40 [ 666.782333][T28674] vma_alloc_folio+0x156/0x890 [ 666.784392][T28674] ? policy_nodemask+0x1d0/0x1d0 [ 666.786529][T28674] ? __anon_vma_prepare+0x298/0x550 [ 666.788770][T28674] __handle_mm_fault+0xe6c/0x3e20 [ 666.790978][T28674] ? vm_iomap_memory+0x170/0x170 [ 666.793132][T28674] ? find_vma+0x10e/0x1b0 [ 666.795022][T28674] ? can_vma_merge_before+0x3a0/0x3a0 [ 666.797392][T28674] ? rcu_is_watching+0x12/0xb0 [ 666.799480][T28674] handle_mm_fault+0x47a/0xa00 [ 666.801579][T28674] ? lock_mm_and_find_vma+0xa6/0x760 [ 666.803844][T28674] do_user_addr_fault+0x3d1/0x1010 [ 666.806059][T28674] ? rcu_is_watching+0x12/0xb0 [ 666.808110][T28674] exc_page_fault+0x5c/0xd0 [ 666.810094][T28674] asm_exc_page_fault+0x26/0x30 [ 666.812208][T28674] RIP: 0010:__put_user_4+0x11/0x20 [ 666.814350][T28674] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 666.822434][T28674] RSP: 0018:ffffc90028927e20 EFLAGS: 00050206 [ 666.825023][T28674] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000300 [ 666.828377][T28674] RDX: 0000000000040000 RSI: ffffffff8827e8d5 RDI: 0000000000000000 [ 666.831718][T28674] RBP: 1ffff92005124fc8 R08: 0000000000000000 R09: fffffbfff1d9c43a [ 666.835053][T28674] R10: ffffffff8ece21d7 R11: 0000000000000000 R12: 0000000000000004 [ 666.838382][T28674] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 666.841756][T28674] ? __sys_socketpair+0x115/0x5a0 [ 666.843940][T28674] __sys_socketpair+0x121/0x5a0 [ 666.846055][T28674] ? __ia32_sys_socket+0xb0/0xb0 [ 666.848176][T28674] ? __ia32_sys_read+0xb0/0xb0 [ 666.850025][T28674] __ia32_sys_socketpair+0x95/0x100 [ 666.851868][T28674] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 666.854175][T28674] __do_fast_syscall_32+0x61/0xe0 [ 666.855949][T28674] do_fast_syscall_32+0x33/0x70 [ 666.857700][T28674] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 666.859995][T28674] RIP: 0023:0xf7fc7579 [ 666.861473][T28674] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 666.868456][T28674] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 666.871367][T28674] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 666.874018][T28674] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 666.876759][T28674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.879693][T28674] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 666.882459][T28674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.885249][T28674] 00:37:33 executing program 0: socketpair(0x2, 0x2, 0xff0f, &(0x7f0000000300)) [ 666.893590][T28683] FAULT_INJECTION: forcing a failure. 00:37:33 executing program 0: socketpair(0x2, 0x2, 0x200000, &(0x7f0000000300)) [ 666.893590][T28683] name failslab, interval 1, probability 0, space 0, times 0 [ 666.899679][T28683] CPU: 3 PID: 28683 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 666.903236][T28683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 666.906762][T28683] Call Trace: [ 666.908006][T28683] [ 666.909063][T28683] dump_stack_lvl+0x125/0x1b0 [ 666.910723][T28683] should_fail_ex+0x496/0x5b0 [ 666.912376][T28683] should_failslab+0x9/0x20 [ 666.913967][T28683] __kmem_cache_alloc_node+0x2fd/0x350 [ 666.915896][T28683] ? apply_wqattrs_prepare+0x137/0xa90 [ 666.917821][T28683] kmalloc_trace+0x25/0xe0 [ 666.919612][T28683] apply_wqattrs_prepare+0x137/0xa90 [ 666.921516][T28683] ? preempt_count_sub+0x150/0x150 [ 666.923331][T28683] apply_workqueue_attrs_locked+0xcb/0x150 [ 666.925429][T28683] alloc_workqueue+0xdae/0x1490 [ 666.927183][T28683] ? workqueue_sysfs_register+0x400/0x400 [ 666.929235][T28683] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 666.931092][T28683] kvm_mmu_init_vm+0x248/0x2e0 [ 666.932816][T28683] kvm_arch_init_vm+0x39/0x720 [ 666.934505][T28683] ? __kasan_kmalloc+0xa2/0xb0 [ 666.936172][T28683] kvm_dev_ioctl+0xa31/0x1c20 [ 666.937834][T28683] ? bit_wait_timeout+0x160/0x160 [ 666.939678][T28683] ? __fget_files+0x279/0x410 [ 666.941313][T28683] ? kvm_vcpu_stats_release+0x80/0x80 [ 666.943320][T28683] ? __fget_files+0x279/0x410 [ 666.945441][T28683] ? bpf_lsm_file_ioctl+0x9/0x10 [ 666.947651][T28683] ? kvm_vcpu_stats_release+0x80/0x80 [ 666.949999][T28683] __do_compat_sys_ioctl+0x2bf/0x330 [ 666.952395][T28683] __do_fast_syscall_32+0x61/0xe0 [ 666.954614][T28683] do_fast_syscall_32+0x33/0x70 [ 666.956798][T28683] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 666.959545][T28683] RIP: 0023:0xf7f81579 [ 666.961377][T28683] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 666.969779][T28683] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 666.973404][T28683] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 666.976978][T28683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.980517][T28683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.984118][T28683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 666.987755][T28683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.991353][T28683] 00:37:34 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 29) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:34 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 6) 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x1000000, &(0x7f0000000300)) 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x2000000, &(0x7f0000000300)) [ 667.064308][T28694] FAULT_INJECTION: forcing a failure. [ 667.064308][T28694] name failslab, interval 1, probability 0, space 0, times 0 [ 667.069945][T28694] CPU: 2 PID: 28694 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 667.074341][T28694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 667.078923][T28694] Call Trace: 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x3000000, &(0x7f0000000300)) [ 667.080452][T28694] [ 667.081921][T28694] dump_stack_lvl+0x125/0x1b0 [ 667.084040][T28694] should_fail_ex+0x496/0x5b0 [ 667.086158][T28694] ? sock_alloc_inode+0x25/0x1c0 [ 667.088408][T28694] should_failslab+0x9/0x20 [ 667.090444][T28694] kmem_cache_alloc_lru+0x3e6/0x630 [ 667.092840][T28694] ? preempt_count_sub+0x150/0x150 [ 667.095165][T28694] ? rcu_is_watching+0x12/0xb0 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x4000000, &(0x7f0000000300)) [ 667.097352][T28694] ? sock_free_inode+0x30/0x30 [ 667.099676][T28694] ? sock_alloc_inode+0x25/0x1c0 [ 667.101911][T28694] sock_alloc_inode+0x25/0x1c0 [ 667.104055][T28694] alloc_inode+0x5d/0x220 [ 667.106040][T28694] new_inode_pseudo+0x16/0x80 [ 667.108225][T28694] sock_alloc+0x40/0x270 [ 667.110111][T28694] __sock_create+0xbc/0x810 [ 667.112117][T28694] __sys_socketpair+0x1da/0x5a0 [ 667.114221][T28694] ? __ia32_sys_socket+0xb0/0xb0 [ 667.116364][T28694] ? __ia32_sys_read+0xb0/0xb0 [ 667.118493][T28694] __ia32_sys_socketpair+0x95/0x100 [ 667.120787][T28694] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 667.122069][T28707] FAULT_INJECTION: forcing a failure. [ 667.122069][T28707] name failslab, interval 1, probability 0, space 0, times 0 [ 667.123726][T28694] __do_fast_syscall_32+0x61/0xe0 [ 667.131240][T28694] do_fast_syscall_32+0x33/0x70 [ 667.133125][T28694] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 667.135856][T28694] RIP: 0023:0xf7fc7579 [ 667.137706][T28694] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 667.145982][T28694] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 667.149494][T28694] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 667.152837][T28694] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 667.156173][T28694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.159622][T28694] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 667.163043][T28694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.166399][T28694] [ 667.167745][T28707] CPU: 1 PID: 28707 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 667.169809][T28694] socket: no more sockets [ 667.171995][T28707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 667.172007][T28707] Call Trace: [ 667.172014][T28707] [ 667.172019][T28707] dump_stack_lvl+0x125/0x1b0 [ 667.172049][T28707] should_fail_ex+0x496/0x5b0 [ 667.172076][T28707] should_failslab+0x9/0x20 [ 667.187065][T28707] kmem_cache_alloc_node+0x389/0x3f0 [ 667.189293][T28707] ? alloc_unbound_pwq+0x41e/0xd00 [ 667.191534][T28707] alloc_unbound_pwq+0x41e/0xd00 [ 667.193732][T28707] apply_wqattrs_prepare+0x696/0xa90 [ 667.196037][T28707] apply_workqueue_attrs_locked+0xcb/0x150 [ 667.198645][T28707] alloc_workqueue+0xdae/0x1490 [ 667.200789][T28707] ? workqueue_sysfs_register+0x400/0x400 [ 667.203279][T28707] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 667.205559][T28707] kvm_mmu_init_vm+0x248/0x2e0 [ 667.207683][T28707] kvm_arch_init_vm+0x39/0x720 [ 667.209827][T28707] ? __kasan_kmalloc+0xa2/0xb0 [ 667.211934][T28707] kvm_dev_ioctl+0xa31/0x1c20 [ 667.214032][T28707] ? bit_wait_timeout+0x160/0x160 [ 667.216259][T28707] ? __fget_files+0x279/0x410 [ 667.218352][T28707] ? kvm_vcpu_stats_release+0x80/0x80 [ 667.220727][T28707] ? __fget_files+0x279/0x410 [ 667.222782][T28707] ? bpf_lsm_file_ioctl+0x9/0x10 [ 667.224959][T28707] ? kvm_vcpu_stats_release+0x80/0x80 [ 667.227315][T28707] __do_compat_sys_ioctl+0x2bf/0x330 [ 667.229691][T28707] __do_fast_syscall_32+0x61/0xe0 [ 667.231883][T28707] do_fast_syscall_32+0x33/0x70 [ 667.233996][T28707] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 667.236831][T28707] RIP: 0023:0xf7f81579 [ 667.238664][T28707] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 667.247101][T28707] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 667.250745][T28707] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 667.254236][T28707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.257750][T28707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.261203][T28707] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 667.264674][T28707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.268123][T28707] 00:37:34 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 30) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x5000000, &(0x7f0000000300)) 00:37:34 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 7) [ 667.347228][T28713] FAULT_INJECTION: forcing a failure. [ 667.347228][T28713] name failslab, interval 1, probability 0, space 0, times 0 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x6010000, &(0x7f0000000300)) 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0xf, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 667.353275][T28713] CPU: 0 PID: 28713 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 667.358021][T28713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 667.361884][T28713] Call Trace: [ 667.363378][T28713] [ 667.364727][T28713] dump_stack_lvl+0x125/0x1b0 [ 667.366864][T28713] should_fail_ex+0x496/0x5b0 [ 667.368616][T28713] should_failslab+0x9/0x20 [ 667.370562][T28713] kmem_cache_alloc+0x33a/0x3b0 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x8100000, &(0x7f0000000300)) [ 667.372795][T28713] security_inode_alloc+0x38/0x180 [ 667.375204][T28713] inode_init_always+0xbef/0xee0 [ 667.377510][T28713] alloc_inode+0x7a/0x220 [ 667.379459][T28713] new_inode_pseudo+0x16/0x80 [ 667.381603][T28713] sock_alloc+0x40/0x270 [ 667.383507][T28713] __sock_create+0xbc/0x810 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 667.385593][T28713] __sys_socketpair+0x1da/0x5a0 [ 667.387497][T28713] ? __ia32_sys_socket+0xb0/0xb0 [ 667.389260][T28713] ? __ia32_sys_read+0xb0/0xb0 [ 667.390980][T28713] __ia32_sys_socketpair+0x95/0x100 [ 667.393007][T28713] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 667.395318][T28713] __do_fast_syscall_32+0x61/0xe0 [ 667.397121][T28713] do_fast_syscall_32+0x33/0x70 [ 667.398858][T28713] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 667.401109][T28713] RIP: 0023:0xf7fc7579 [ 667.402881][T28713] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 667.411067][T28713] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 667.413209][T28727] FAULT_INJECTION: forcing a failure. [ 667.413209][T28727] name failslab, interval 1, probability 0, space 0, times 0 [ 667.414778][T28713] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 667.423647][T28713] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 667.427181][T28713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.430674][T28713] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 667.434169][T28713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.437728][T28713] [ 667.439130][T28727] CPU: 2 PID: 28727 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 667.440512][T28713] socket: no more sockets [ 667.442938][T28727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 667.442947][T28727] Call Trace: [ 667.442951][T28727] [ 667.442955][T28727] dump_stack_lvl+0x125/0x1b0 [ 667.442974][T28727] should_fail_ex+0x496/0x5b0 [ 667.442992][T28727] should_failslab+0x9/0x20 [ 667.443003][T28727] kmem_cache_alloc_node+0x389/0x3f0 [ 667.443018][T28727] ? alloc_unbound_pwq+0x41e/0xd00 [ 667.461045][T28727] alloc_unbound_pwq+0x41e/0xd00 [ 667.463133][T28727] ? kasan_set_track+0x25/0x30 [ 667.464979][T28727] apply_wqattrs_prepare+0x3be/0xa90 [ 667.466805][T28727] apply_workqueue_attrs_locked+0xcb/0x150 [ 667.468855][T28727] alloc_workqueue+0xdae/0x1490 [ 667.470636][T28727] ? workqueue_sysfs_register+0x400/0x400 [ 667.472642][T28727] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 667.474615][T28727] kvm_mmu_init_vm+0x248/0x2e0 [ 667.476322][T28727] kvm_arch_init_vm+0x39/0x720 [ 667.478012][T28727] ? __kasan_kmalloc+0xa2/0xb0 [ 667.479665][T28727] kvm_dev_ioctl+0xa31/0x1c20 [ 667.481335][T28727] ? bit_wait_timeout+0x160/0x160 [ 667.483084][T28727] ? __fget_files+0x279/0x410 [ 667.484776][T28727] ? kvm_vcpu_stats_release+0x80/0x80 [ 667.486680][T28727] ? __fget_files+0x279/0x410 [ 667.488334][T28727] ? bpf_lsm_file_ioctl+0x9/0x10 [ 667.490106][T28727] ? kvm_vcpu_stats_release+0x80/0x80 [ 667.491994][T28727] __do_compat_sys_ioctl+0x2bf/0x330 [ 667.493891][T28727] __do_fast_syscall_32+0x61/0xe0 [ 667.495672][T28727] do_fast_syscall_32+0x33/0x70 [ 667.497426][T28727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 667.499692][T28727] RIP: 0023:0xf7f81579 [ 667.501176][T28727] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 667.508074][T28727] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 667.511030][T28727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 667.513925][T28727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.516730][T28727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.519512][T28727] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 667.522468][T28727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.525184][T28727] 00:37:34 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 31) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x10000000, &(0x7f0000000300)) 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30008, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:34 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 8) 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x11000000, &(0x7f0000000300)) [ 667.626814][T28738] FAULT_INJECTION: forcing a failure. 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x402, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 667.626814][T28738] name failslab, interval 1, probability 0, space 0, times 0 [ 667.633029][T28738] CPU: 3 PID: 28738 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 667.634672][T28734] FAULT_INJECTION: forcing a failure. [ 667.634672][T28734] name failslab, interval 1, probability 0, space 0, times 0 [ 667.637091][T28738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x1f000000, &(0x7f0000000300)) [ 667.645688][T28738] Call Trace: [ 667.647155][T28738] 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x404, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 667.648386][T28738] dump_stack_lvl+0x125/0x1b0 [ 667.650391][T28738] should_fail_ex+0x496/0x5b0 [ 667.652335][T28738] should_failslab+0x9/0x20 [ 667.654223][T28738] kmem_cache_alloc+0x33a/0x3b0 [ 667.656228][T28738] ? lock_release+0x4bf/0x680 [ 667.658161][T28738] ? rcu_is_watching+0x12/0xb0 [ 667.660201][T28738] sk_prot_alloc+0x60/0x2a0 [ 667.662115][T28738] sk_alloc+0x3a/0x7f0 [ 667.663797][T28738] inet6_create+0x380/0x1200 [ 667.665860][T28738] __sock_create+0x334/0x810 [ 667.667775][T28738] __sys_socketpair+0x1da/0x5a0 [ 667.669819][T28738] ? __ia32_sys_socket+0xb0/0xb0 [ 667.671922][T28738] ? __ia32_sys_read+0xb0/0xb0 [ 667.674066][T28738] __ia32_sys_socketpair+0x95/0x100 [ 667.676549][T28738] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 667.679419][T28738] __do_fast_syscall_32+0x61/0xe0 [ 667.681498][T28738] do_fast_syscall_32+0x33/0x70 [ 667.683509][T28738] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 667.686154][T28738] RIP: 0023:0xf7fc7579 [ 667.687835][T28738] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 667.695720][T28738] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 667.699200][T28738] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 667.702446][T28738] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 667.705667][T28738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.708922][T28738] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 667.712165][T28738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.715369][T28738] [ 667.716663][T28734] CPU: 0 PID: 28734 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 667.720331][T28734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 667.723915][T28734] Call Trace: [ 667.725144][T28734] [ 667.726207][T28734] dump_stack_lvl+0x125/0x1b0 [ 667.727902][T28734] should_fail_ex+0x496/0x5b0 [ 667.729624][T28734] should_failslab+0x9/0x20 [ 667.731284][T28734] kmem_cache_alloc_node+0x389/0x3f0 [ 667.733235][T28734] ? alloc_unbound_pwq+0x41e/0xd00 [ 667.735097][T28734] alloc_unbound_pwq+0x41e/0xd00 [ 667.736918][T28734] apply_wqattrs_prepare+0x696/0xa90 [ 667.738852][T28734] apply_workqueue_attrs_locked+0xcb/0x150 [ 667.740942][T28734] alloc_workqueue+0xdae/0x1490 [ 667.742729][T28734] ? workqueue_sysfs_register+0x400/0x400 [ 667.744781][T28734] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 667.746662][T28734] kvm_mmu_init_vm+0x248/0x2e0 [ 667.748393][T28734] kvm_arch_init_vm+0x39/0x720 [ 667.750147][T28734] ? __kasan_kmalloc+0xa2/0xb0 [ 667.751977][T28734] kvm_dev_ioctl+0xa31/0x1c20 [ 667.753696][T28734] ? bit_wait_timeout+0x160/0x160 [ 667.755495][T28734] ? __fget_files+0x279/0x410 [ 667.757213][T28734] ? kvm_vcpu_stats_release+0x80/0x80 [ 667.759116][T28734] ? __fget_files+0x279/0x410 [ 667.760822][T28734] ? bpf_lsm_file_ioctl+0x9/0x10 [ 667.762584][T28734] ? kvm_vcpu_stats_release+0x80/0x80 [ 667.764470][T28734] __do_compat_sys_ioctl+0x2bf/0x330 [ 667.766370][T28734] __do_fast_syscall_32+0x61/0xe0 [ 667.768138][T28734] do_fast_syscall_32+0x33/0x70 [ 667.769976][T28734] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 667.772198][T28734] RIP: 0023:0xf7f81579 [ 667.773660][T28734] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 667.780397][T28734] RSP: 002b:00000000f7f7c5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 667.783287][T28734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 667.786091][T28734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.788874][T28734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.791656][T28734] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 667.794443][T28734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.797254][T28734] 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x20000000, &(0x7f0000000300)) 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:34 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 9) 00:37:34 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 32) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) [ 667.875409][T28754] FAULT_INJECTION: forcing a failure. [ 667.875409][T28754] name failslab, interval 1, probability 0, space 0, times 0 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x21000000, &(0x7f0000000300)) [ 667.880838][T28754] CPU: 2 PID: 28754 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 667.884600][T28754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x2, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 667.888218][T28754] Call Trace: [ 667.889565][T28754] [ 667.890773][T28754] dump_stack_lvl+0x125/0x1b0 [ 667.892659][T28754] should_fail_ex+0x496/0x5b0 [ 667.894503][T28754] should_failslab+0x9/0x20 [ 667.896127][T28754] __kmem_cache_alloc_node+0x2fd/0x350 [ 667.898091][T28754] ? apparmor_sk_alloc_security+0x87/0x150 [ 667.900293][T28754] kmalloc_trace+0x25/0xe0 [ 667.902006][T28754] apparmor_sk_alloc_security+0x87/0x150 [ 667.904017][T28754] security_sk_alloc+0x72/0xb0 [ 667.905753][T28754] sk_prot_alloc+0xfb/0x2a0 00:37:34 executing program 0: socketpair(0x2, 0x2, 0x3f000000, &(0x7f0000000300)) [ 667.907387][T28754] sk_alloc+0x3a/0x7f0 [ 667.909011][T28754] inet6_create+0x380/0x1200 [ 667.910673][T28754] __sock_create+0x334/0x810 00:37:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x3, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 667.912388][T28754] __sys_socketpair+0x1da/0x5a0 [ 667.914266][T28754] ? __ia32_sys_socket+0xb0/0xb0 [ 667.916015][T28754] ? __ia32_sys_read+0xb0/0xb0 [ 667.917767][T28754] __ia32_sys_socketpair+0x95/0x100 00:37:35 executing program 0: socketpair(0x2, 0x2, 0x40000000, &(0x7f0000000300)) [ 667.919625][T28754] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 667.922374][T28754] __do_fast_syscall_32+0x61/0xe0 [ 667.924200][T28754] do_fast_syscall_32+0x33/0x70 [ 667.925880][T28754] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 667.928123][T28754] RIP: 0023:0xf7fc7579 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x4, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 667.929581][T28754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 667.936752][T28754] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 667.937646][T28769] FAULT_INJECTION: forcing a failure. [ 667.937646][T28769] name failslab, interval 1, probability 0, space 0, times 0 [ 667.939888][T28754] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 667.939898][T28754] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 00:37:35 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 10) [ 667.939905][T28754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.939912][T28754] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 667.939919][T28754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.939929][T28754] [ 667.962605][T28769] CPU: 0 PID: 28769 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 667.964200][T28773] FAULT_INJECTION: forcing a failure. [ 667.964200][T28773] name failslab, interval 1, probability 0, space 0, times 0 [ 667.966218][T28769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 667.966227][T28769] Call Trace: [ 667.966232][T28769] [ 667.966236][T28769] dump_stack_lvl+0x125/0x1b0 [ 667.979123][T28769] should_fail_ex+0x496/0x5b0 [ 667.981110][T28769] should_failslab+0x9/0x20 [ 667.982826][T28769] kmem_cache_alloc_node+0x389/0x3f0 [ 667.984701][T28769] ? alloc_unbound_pwq+0x41e/0xd00 [ 667.986566][T28769] alloc_unbound_pwq+0x41e/0xd00 [ 667.988469][T28769] apply_wqattrs_prepare+0x696/0xa90 [ 667.990353][T28769] apply_workqueue_attrs_locked+0xcb/0x150 [ 667.992416][T28769] alloc_workqueue+0xdae/0x1490 [ 667.994153][T28769] ? workqueue_sysfs_register+0x400/0x400 [ 667.996162][T28769] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 667.998099][T28769] kvm_mmu_init_vm+0x248/0x2e0 [ 667.999820][T28769] kvm_arch_init_vm+0x39/0x720 [ 668.001535][T28769] ? __kasan_kmalloc+0xa2/0xb0 [ 668.003239][T28769] kvm_dev_ioctl+0xa31/0x1c20 [ 668.004889][T28769] ? bit_wait_timeout+0x160/0x160 [ 668.006639][T28769] ? __fget_files+0x279/0x410 [ 668.008306][T28769] ? kvm_vcpu_stats_release+0x80/0x80 [ 668.010214][T28769] ? __fget_files+0x279/0x410 [ 668.011882][T28769] ? bpf_lsm_file_ioctl+0x9/0x10 [ 668.013659][T28769] ? kvm_vcpu_stats_release+0x80/0x80 [ 668.015539][T28769] __do_compat_sys_ioctl+0x2bf/0x330 [ 668.017601][T28769] __do_fast_syscall_32+0x61/0xe0 [ 668.019404][T28769] do_fast_syscall_32+0x33/0x70 [ 668.021144][T28769] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 668.023530][T28769] RIP: 0023:0xf7f81579 [ 668.025021][T28769] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.031804][T28769] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 668.034738][T28769] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 668.037611][T28769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.040620][T28769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.043419][T28769] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.046373][T28769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.049208][T28769] [ 668.050320][T28773] CPU: 1 PID: 28773 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 668.054729][T28773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 668.059009][T28773] Call Trace: [ 668.060423][T28773] [ 668.061673][T28773] dump_stack_lvl+0x125/0x1b0 [ 668.063664][T28773] should_fail_ex+0x496/0x5b0 [ 668.065735][T28773] ? sock_alloc_inode+0x25/0x1c0 [ 668.067892][T28773] should_failslab+0x9/0x20 [ 668.069776][T28773] kmem_cache_alloc_lru+0x3e6/0x630 [ 668.071966][T28773] ? preempt_count_sub+0x150/0x150 [ 668.074169][T28773] ? sock_free_inode+0x30/0x30 [ 668.076206][T28773] ? sock_alloc_inode+0x25/0x1c0 [ 668.078326][T28773] ? apparmor_socket_post_create+0x294/0xd50 [ 668.080875][T28773] sock_alloc_inode+0x25/0x1c0 [ 668.082902][T28773] alloc_inode+0x5d/0x220 [ 668.084740][T28773] new_inode_pseudo+0x16/0x80 [ 668.086381][T28773] sock_alloc+0x40/0x270 [ 668.087813][T28773] __sock_create+0xbc/0x810 [ 668.089431][T28773] __sys_socketpair+0x25f/0x5a0 [ 668.091105][T28773] ? __ia32_sys_socket+0xb0/0xb0 [ 668.092831][T28773] ? __ia32_sys_read+0xb0/0xb0 [ 668.094490][T28773] __ia32_sys_socketpair+0x95/0x100 [ 668.096390][T28773] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 668.099306][T28773] __do_fast_syscall_32+0x61/0xe0 [ 668.101463][T28773] do_fast_syscall_32+0x33/0x70 [ 668.103261][T28773] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 668.105466][T28773] RIP: 0023:0xf7fc7579 [ 668.107008][T28773] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.114522][T28773] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 668.117382][T28773] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 668.120456][T28773] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 668.123816][T28773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.127165][T28773] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.130497][T28773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.133955][T28773] [ 668.136039][T28773] socket: no more sockets 00:37:35 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 33) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x7, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:35 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 11) 00:37:35 executing program 0: socketpair(0x2, 0x2, 0xfeffffff, &(0x7f0000000300)) [ 668.242416][T28778] FAULT_INJECTION: forcing a failure. 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x8, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 668.242416][T28778] name failslab, interval 1, probability 0, space 0, times 0 [ 668.248184][T28778] CPU: 2 PID: 28778 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 668.252404][T28778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 668.256544][T28778] Call Trace: [ 668.258009][T28778] 00:37:35 executing program 0: socketpair(0x2, 0x2, 0xff0f0000, &(0x7f0000000300)) [ 668.259303][T28778] dump_stack_lvl+0x125/0x1b0 [ 668.261587][T28778] should_fail_ex+0x496/0x5b0 [ 668.263674][T28778] should_failslab+0x9/0x20 [ 668.265674][T28778] kmem_cache_alloc+0x33a/0x3b0 [ 668.267798][T28778] security_inode_alloc+0x38/0x180 [ 668.270039][T28778] inode_init_always+0xbef/0xee0 [ 668.271832][T28778] alloc_inode+0x7a/0x220 [ 668.273381][T28778] new_inode_pseudo+0x16/0x80 [ 668.275066][T28778] sock_alloc+0x40/0x270 [ 668.276619][T28778] __sock_create+0xbc/0x810 [ 668.278258][T28778] __sys_socketpair+0x25f/0x5a0 [ 668.280028][T28778] ? __ia32_sys_socket+0xb0/0xb0 [ 668.281851][T28778] ? __ia32_sys_read+0xb0/0xb0 [ 668.283568][T28778] __ia32_sys_socketpair+0x95/0x100 [ 668.285487][T28778] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 668.287812][T28778] __do_fast_syscall_32+0x61/0xe0 [ 668.289598][T28778] do_fast_syscall_32+0x33/0x70 [ 668.291338][T28778] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 668.293623][T28778] RIP: 0023:0xf7fc7579 [ 668.295190][T28778] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.302389][T28778] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 668.305648][T28778] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 668.308743][T28778] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 668.311880][T28778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.314949][T28778] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.318198][T28778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.321609][T28778] [ 668.325503][T28785] FAULT_INJECTION: forcing a failure. [ 668.325503][T28785] name failslab, interval 1, probability 0, space 0, times 0 [ 668.331066][T28785] CPU: 0 PID: 28785 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 668.331605][T28778] socket: no more sockets 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x9, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 668.335308][T28785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 00:37:35 executing program 0: socketpair(0x2, 0x2, 0xfffffffe, &(0x7f0000000300)) [ 668.335321][T28785] Call Trace: [ 668.335328][T28785] [ 668.335335][T28785] dump_stack_lvl+0x125/0x1b0 [ 668.345990][T28785] should_fail_ex+0x496/0x5b0 [ 668.348039][T28785] should_failslab+0x9/0x20 [ 668.350020][T28785] kmem_cache_alloc_node+0x389/0x3f0 [ 668.352268][T28785] ? alloc_unbound_pwq+0x41e/0xd00 [ 668.354478][T28785] alloc_unbound_pwq+0x41e/0xd00 [ 668.356763][T28785] apply_wqattrs_prepare+0x696/0xa90 [ 668.359038][T28785] apply_workqueue_attrs_locked+0xcb/0x150 [ 668.361563][T28785] alloc_workqueue+0xdae/0x1490 [ 668.363589][T28785] ? workqueue_sysfs_register+0x400/0x400 [ 668.365950][T28785] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 668.367930][T28785] kvm_mmu_init_vm+0x248/0x2e0 [ 668.369871][T28785] kvm_arch_init_vm+0x39/0x720 [ 668.371713][T28785] ? __kasan_kmalloc+0xa2/0xb0 [ 668.373529][T28785] kvm_dev_ioctl+0xa31/0x1c20 [ 668.375240][T28785] ? bit_wait_timeout+0x160/0x160 [ 668.377246][T28785] ? __fget_files+0x279/0x410 [ 668.379086][T28785] ? kvm_vcpu_stats_release+0x80/0x80 [ 668.381399][T28785] ? __fget_files+0x279/0x410 [ 668.383409][T28785] ? bpf_lsm_file_ioctl+0x9/0x10 [ 668.385492][T28785] ? kvm_vcpu_stats_release+0x80/0x80 [ 668.387756][T28785] __do_compat_sys_ioctl+0x2bf/0x330 [ 668.390035][T28785] __do_fast_syscall_32+0x61/0xe0 [ 668.392189][T28785] do_fast_syscall_32+0x33/0x70 [ 668.394277][T28785] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 668.397029][T28785] RIP: 0023:0xf7f81579 [ 668.398783][T28785] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.406948][T28785] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 668.410564][T28785] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 668.413974][T28785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.417318][T28785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.420673][T28785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.424032][T28785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.427396][T28785] 00:37:35 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 34) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) 00:37:35 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 12) 00:37:35 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0xe, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 668.542693][T28797] FAULT_INJECTION: forcing a failure. [ 668.542693][T28797] name failslab, interval 1, probability 0, space 0, times 0 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x14, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 668.547629][T28797] CPU: 3 PID: 28797 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 668.551261][T28797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 668.555033][T28797] Call Trace: [ 668.556454][T28797] [ 668.557725][T28797] dump_stack_lvl+0x125/0x1b0 [ 668.559455][T28797] should_fail_ex+0x496/0x5b0 [ 668.561347][T28797] should_failslab+0x9/0x20 [ 668.563013][T28797] kmem_cache_alloc+0x33a/0x3b0 [ 668.564830][T28797] ? lock_release+0x4bf/0x680 00:37:35 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x28, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 668.566467][T28797] ? rcu_is_watching+0x12/0xb0 [ 668.568250][T28797] sk_prot_alloc+0x60/0x2a0 [ 668.569976][T28797] sk_alloc+0x3a/0x7f0 [ 668.571387][T28797] inet6_create+0x380/0x1200 [ 668.573455][T28797] __sock_create+0x334/0x810 [ 668.575504][T28797] __sys_socketpair+0x25f/0x5a0 [ 668.577427][T28797] ? __ia32_sys_socket+0xb0/0xb0 [ 668.579377][T28797] ? __ia32_sys_read+0xb0/0xb0 [ 668.581208][T28797] __ia32_sys_socketpair+0x95/0x100 [ 668.583026][T28797] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 668.585415][T28797] __do_fast_syscall_32+0x61/0xe0 [ 668.587167][T28797] do_fast_syscall_32+0x33/0x70 [ 668.588851][T28797] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 668.591118][T28797] RIP: 0023:0xf7fc7579 [ 668.592783][T28797] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.599985][T28797] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 668.602987][T28797] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 668.605828][T28797] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 668.608643][T28797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.611573][T28797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.614520][T28797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.617287][T28797] 00:37:35 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (async) socket$nl_generic(0x10, 0x3, 0x10) [ 668.620628][T28808] FAULT_INJECTION: forcing a failure. [ 668.620628][T28808] name failslab, interval 1, probability 0, space 0, times 0 [ 668.625464][T28808] CPU: 2 PID: 28808 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 668.629043][T28808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 668.632662][T28808] Call Trace: [ 668.633855][T28808] [ 668.634927][T28808] dump_stack_lvl+0x125/0x1b0 [ 668.636693][T28808] should_fail_ex+0x496/0x5b0 [ 668.638355][T28808] should_failslab+0x9/0x20 [ 668.639984][T28808] kmem_cache_alloc_node+0x389/0x3f0 [ 668.641855][T28808] ? alloc_unbound_pwq+0x41e/0xd00 [ 668.643680][T28808] alloc_unbound_pwq+0x41e/0xd00 [ 668.645497][T28808] apply_wqattrs_prepare+0x696/0xa90 [ 668.647406][T28808] apply_workqueue_attrs_locked+0xcb/0x150 [ 668.649439][T28808] alloc_workqueue+0xdae/0x1490 [ 668.651159][T28808] ? workqueue_sysfs_register+0x400/0x400 [ 668.653189][T28808] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 668.655012][T28808] kvm_mmu_init_vm+0x248/0x2e0 [ 668.656741][T28808] kvm_arch_init_vm+0x39/0x720 [ 668.658465][T28808] ? __kasan_kmalloc+0xa2/0xb0 [ 668.660176][T28808] kvm_dev_ioctl+0xa31/0x1c20 [ 668.661881][T28808] ? bit_wait_timeout+0x160/0x160 [ 668.663677][T28808] ? __fget_files+0x279/0x410 [ 668.665398][T28808] ? kvm_vcpu_stats_release+0x80/0x80 [ 668.667297][T28808] ? __fget_files+0x279/0x410 [ 668.668969][T28808] ? bpf_lsm_file_ioctl+0x9/0x10 [ 668.670712][T28808] ? kvm_vcpu_stats_release+0x80/0x80 [ 668.672615][T28808] __do_compat_sys_ioctl+0x2bf/0x330 [ 668.674503][T28808] __do_fast_syscall_32+0x61/0xe0 [ 668.676291][T28808] do_fast_syscall_32+0x33/0x70 [ 668.678027][T28808] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 668.680243][T28808] RIP: 0023:0xf7f81579 [ 668.681695][T28808] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.688596][T28808] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 668.691800][T28808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 668.694830][T28808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.697799][T28808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.700608][T28808] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.703529][T28808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.706450][T28808] 00:37:35 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 13) 00:37:35 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f00000000c0)={0x0, r0, 0x5, 0xffffff33, 0x401}) 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x60, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:35 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 35) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) [ 668.795673][T28817] FAULT_INJECTION: forcing a failure. [ 668.795673][T28817] name failslab, interval 1, probability 0, space 0, times 0 [ 668.800250][T28817] CPU: 0 PID: 28817 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 00:37:35 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f00000000c0)={0x0, r0, 0x5, 0xffffff33, 0x401}) socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f00000000c0)={0x0, r0, 0x5, 0xffffff33, 0x401}) (async) [ 668.803820][T28817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 668.808211][T28817] Call Trace: [ 668.809510][T28817] [ 668.810530][T28817] dump_stack_lvl+0x125/0x1b0 [ 668.812235][T28817] should_fail_ex+0x496/0x5b0 [ 668.813909][T28817] should_failslab+0x9/0x20 [ 668.815859][T28817] __kmem_cache_alloc_node+0x2fd/0x350 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0xf0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 668.817938][T28817] ? apparmor_sk_alloc_security+0x87/0x150 [ 668.820279][T28817] kmalloc_trace+0x25/0xe0 [ 668.821927][T28817] apparmor_sk_alloc_security+0x87/0x150 00:37:35 executing program 0: socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f00000000c0)={0x0, r0, 0x5, 0xffffff33, 0x401}) [ 668.823884][T28817] security_sk_alloc+0x72/0xb0 [ 668.825786][T28817] sk_prot_alloc+0xfb/0x2a0 [ 668.827764][T28817] sk_alloc+0x3a/0x7f0 [ 668.829480][T28817] inet6_create+0x380/0x1200 [ 668.831301][T28817] __sock_create+0x334/0x810 00:37:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x300, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 668.833160][T28817] __sys_socketpair+0x25f/0x5a0 [ 668.835054][T28817] ? __ia32_sys_socket+0xb0/0xb0 [ 668.836822][T28817] ? __ia32_sys_read+0xb0/0xb0 [ 668.838529][T28817] __ia32_sys_socketpair+0x95/0x100 [ 668.840495][T28817] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 668.842787][T28817] __do_fast_syscall_32+0x61/0xe0 [ 668.844780][T28817] do_fast_syscall_32+0x33/0x70 [ 668.846579][T28817] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 668.849329][T28817] RIP: 0023:0xf7fc7579 [ 668.851121][T28817] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.858748][T28817] RSP: 002b:00000000f7fc25ac EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 668.859405][T28833] FAULT_INJECTION: forcing a failure. [ 668.859405][T28833] name failslab, interval 1, probability 0, space 0, times 0 [ 668.861870][T28817] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 668.861879][T28817] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 668.861886][T28817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.861892][T28817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.861902][T28817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.861919][T28817] [ 668.882565][T28833] CPU: 2 PID: 28833 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 668.886988][T28833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 668.891472][T28833] Call Trace: [ 668.892911][T28833] [ 668.893965][T28833] dump_stack_lvl+0x125/0x1b0 [ 668.895641][T28833] should_fail_ex+0x496/0x5b0 [ 668.897346][T28833] should_failslab+0x9/0x20 [ 668.898961][T28833] kmem_cache_alloc_node+0x389/0x3f0 [ 668.900983][T28833] ? alloc_unbound_pwq+0x41e/0xd00 [ 668.902852][T28833] alloc_unbound_pwq+0x41e/0xd00 [ 668.904634][T28833] apply_wqattrs_prepare+0x696/0xa90 [ 668.906524][T28833] apply_workqueue_attrs_locked+0xcb/0x150 [ 668.908590][T28833] alloc_workqueue+0xdae/0x1490 [ 668.910316][T28833] ? workqueue_sysfs_register+0x400/0x400 [ 668.912341][T28833] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 668.914169][T28833] kvm_mmu_init_vm+0x248/0x2e0 [ 668.915893][T28833] kvm_arch_init_vm+0x39/0x720 [ 668.917613][T28833] ? __kasan_kmalloc+0xa2/0xb0 [ 668.919320][T28833] kvm_dev_ioctl+0xa31/0x1c20 [ 668.921167][T28833] ? bit_wait_timeout+0x160/0x160 [ 668.922970][T28833] ? __fget_files+0x279/0x410 [ 668.924649][T28833] ? kvm_vcpu_stats_release+0x80/0x80 [ 668.926554][T28833] ? __fget_files+0x279/0x410 [ 668.928246][T28833] ? bpf_lsm_file_ioctl+0x9/0x10 [ 668.930048][T28833] ? kvm_vcpu_stats_release+0x80/0x80 [ 668.931969][T28833] __do_compat_sys_ioctl+0x2bf/0x330 [ 668.933803][T28833] __do_fast_syscall_32+0x61/0xe0 [ 668.935594][T28833] do_fast_syscall_32+0x33/0x70 [ 668.937353][T28833] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 668.939557][T28833] RIP: 0023:0xf7f81579 [ 668.941205][T28833] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.949094][T28833] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 668.952527][T28833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 668.955939][T28833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.959327][T28833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.962795][T28833] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.966168][T28833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.969571][T28833] 00:37:36 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2040840) 00:37:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x700, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:36 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) (fail_nth: 14) 00:37:36 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 36) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) [ 669.021494][T28838] FAULT_INJECTION: forcing a failure. [ 669.021494][T28838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.026260][T28838] CPU: 0 PID: 28838 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 669.029967][T28838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 00:37:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x900, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:37:36 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2040840) [ 669.033610][T28838] Call Trace: [ 669.035024][T28838] [ 669.036212][T28838] dump_stack_lvl+0x125/0x1b0 [ 669.037878][T28838] should_fail_ex+0x496/0x5b0 [ 669.039628][T28838] _copy_to_user+0x30/0xb0 [ 669.041356][T28838] simple_read_from_buffer+0xd0/0x150 [ 669.043492][T28838] proc_fail_nth_read+0x1b0/0x290 [ 669.045265][T28838] ? proc_sessionid_read+0x290/0x290 [ 669.047238][T28838] ? security_file_permission+0xdc/0x100 [ 669.049155][T28838] ? proc_sessionid_read+0x290/0x290 [ 669.051202][T28838] vfs_read+0x1ce/0x930 [ 669.052710][T28838] ? kernel_read+0x1b0/0x1b0 [ 669.054293][T28838] ? spin_bug+0x1d0/0x1d0 [ 669.055828][T28838] ? __fget_files+0x279/0x410 [ 669.057638][T28838] ksys_read+0x12f/0x250 00:37:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0xe00, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 669.059114][T28838] ? vfs_write+0xe40/0xe40 00:37:36 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2040840) [ 669.060919][T28838] ? rcu_is_watching+0x12/0xb0 [ 669.062929][T28838] __do_fast_syscall_32+0x61/0xe0 [ 669.064784][T28838] do_fast_syscall_32+0x33/0x70 [ 669.066523][T28838] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 669.068775][T28838] RIP: 0023:0xf7fc7579 [ 669.070217][T28838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 669.077112][T28838] RSP: 002b:00000000f7fc25e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 00:37:36 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008090}, 0x20000000) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000180)=[0x4873, 0xfffa, 0x1, 0xff81, 0xc00, 0x5], &(0x7f00000001c0)=[0x200, 0x2, 0x40, 0x5], &(0x7f0000000200)=[0x20, 0x9, 0x7, 0x3ff, 0x401, 0x1, 0x5, 0xefaf, 0x731]}) socketpair(0x2, 0x2, 0x0, &(0x7f0000000300)) [ 669.080045][T28838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7fc2670 00:37:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x401, 0x1400, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 669.083310][T28838] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 669.086702][T28838] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 669.089939][T28838] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 669.093343][T28838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.096856][T28838] [ 669.097270][T28855] FAULT_INJECTION: forcing a failure. [ 669.097270][T28855] name failslab, interval 1, probability 0, space 0, times 0 [ 669.104228][T28855] CPU: 3 PID: 28855 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 669.108567][T28855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 669.112832][T28855] Call Trace: [ 669.114077][T28855] [ 669.115135][T28855] dump_stack_lvl+0x125/0x1b0 [ 669.116839][T28855] should_fail_ex+0x496/0x5b0 [ 669.118486][T28855] should_failslab+0x9/0x20 [ 669.120090][T28855] kmem_cache_alloc_node+0x389/0x3f0 [ 669.121955][T28855] ? alloc_unbound_pwq+0x41e/0xd00 [ 669.123776][T28855] alloc_unbound_pwq+0x41e/0xd00 00:37:36 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000300)) [ 669.125543][T28855] apply_wqattrs_prepare+0x696/0xa90 [ 669.127633][T28855] apply_workqueue_attrs_locked+0xcb/0x150 [ 669.129799][T28855] alloc_workqueue+0xdae/0x1490 [ 669.131551][T28855] ? workqueue_sysfs_register+0x400/0x400 [ 669.133664][T28855] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 669.135523][T28855] kvm_mmu_init_vm+0x248/0x2e0 [ 669.137453][T28855] kvm_arch_init_vm+0x39/0x720 [ 669.139573][T28855] ? __kasan_kmalloc+0xa2/0xb0 [ 669.141696][T28855] kvm_dev_ioctl+0xa31/0x1c20 [ 669.143796][T28855] ? bit_wait_timeout+0x160/0x160 [ 669.146028][T28855] ? __fget_files+0x279/0x410 [ 669.148089][T28855] ? kvm_vcpu_stats_release+0x80/0x80 [ 669.150469][T28855] ? __fget_files+0x279/0x410 [ 669.152523][T28855] ? bpf_lsm_file_ioctl+0x9/0x10 [ 669.154592][T28855] ? kvm_vcpu_stats_release+0x80/0x80 [ 669.156518][T28855] __do_compat_sys_ioctl+0x2bf/0x330 [ 669.158368][T28855] __do_fast_syscall_32+0x61/0xe0 [ 669.160118][T28855] do_fast_syscall_32+0x33/0x70 [ 669.161875][T28855] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 669.164070][T28855] RIP: 0023:0xf7f81579 [ 669.165689][T28855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 669.173474][T28855] RSP: 002b:00000000f7f5b5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 669.176758][T28855] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 669.179733][T28855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.183069][T28855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.186336][T28855] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 669.189570][T28855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.192970][T28855] [ 669.196110][ T3] ================================================================== [ 669.199565][ T3] BUG: KASAN: slab-use-after-free in pwq_release_workfn+0x339/0x380 [ 669.203231][ T3] Read of size 4 at addr ffff88805f710dc0 by task pool_workqueue_/3 [ 669.206884][ T3] [ 669.207999][ T3] CPU: 1 PID: 3 Comm: pool_workqueue_ Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 669.213428][ T3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 669.218162][ T3] Call Trace: [ 669.219710][ T3] [ 669.221119][ T3] dump_stack_lvl+0xd9/0x1b0 [ 669.223257][ T3] print_report+0xc4/0x620 [ 669.225355][ T3] ? __virt_addr_valid+0x5e/0x2d0 [ 669.227725][ T3] ? __phys_addr+0xc6/0x140 [ 669.229858][ T3] kasan_report+0xda/0x110 [ 669.231910][ T3] ? pwq_release_workfn+0x339/0x380 [ 669.234331][ T3] ? pwq_release_workfn+0x339/0x380 [ 669.236771][ T3] pwq_release_workfn+0x339/0x380 [ 669.239074][ T3] kthread_worker_fn+0x2fc/0xa80 [ 669.241460][ T3] ? put_unbound_pool+0x7c0/0x7c0 [ 669.243545][ T3] ? kthread_freezable_should_stop+0x190/0x190 [ 669.245764][ T3] kthread+0x33a/0x430 [ 669.247191][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 669.249181][ T3] ret_from_fork+0x45/0x80 [ 669.250785][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 669.252798][ T3] ret_from_fork_asm+0x11/0x20 [ 669.254533][ T3] [ 669.255672][ T3] [ 669.256572][ T3] Allocated by task 28855: [ 669.258188][ T3] kasan_save_stack+0x33/0x50 [ 669.259904][ T3] kasan_set_track+0x25/0x30 [ 669.261844][ T3] __kasan_kmalloc+0xa2/0xb0 [ 669.263894][ T3] alloc_workqueue+0x16f/0x1490 [ 669.266198][ T3] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 669.268530][ T3] kvm_mmu_init_vm+0x248/0x2e0 [ 669.270656][ T3] kvm_arch_init_vm+0x39/0x720 [ 669.272715][ T3] kvm_dev_ioctl+0xa31/0x1c20 [ 669.274268][ T3] __do_compat_sys_ioctl+0x2bf/0x330 [ 669.276339][ T3] __do_fast_syscall_32+0x61/0xe0 [ 669.278718][ T3] do_fast_syscall_32+0x33/0x70 [ 669.280847][ T3] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 669.283259][ T3] [ 669.284134][ T3] Freed by task 28855: [ 669.285631][ T3] kasan_save_stack+0x33/0x50 [ 669.287335][ T3] kasan_set_track+0x25/0x30 [ 669.288981][ T3] kasan_save_free_info+0x2b/0x40 [ 669.290764][ T3] ____kasan_slab_free+0x15b/0x1b0 [ 669.292745][ T3] slab_free_freelist_hook+0x114/0x1e0 [ 669.294921][ T3] __kmem_cache_free+0xb8/0x2f0 [ 669.296713][ T3] alloc_workqueue+0xe76/0x1490 [ 669.298578][ T3] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 669.300631][ T3] kvm_mmu_init_vm+0x248/0x2e0 [ 669.302336][ T3] kvm_arch_init_vm+0x39/0x720 [ 669.304017][ T3] kvm_dev_ioctl+0xa31/0x1c20 [ 669.305748][ T3] __do_compat_sys_ioctl+0x2bf/0x330 [ 669.307839][ T3] __do_fast_syscall_32+0x61/0xe0 [ 669.309641][ T3] do_fast_syscall_32+0x33/0x70 [ 669.311531][ T3] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 669.313803][ T3] [ 669.314699][ T3] Last potentially related work creation: [ 669.316733][ T3] kasan_save_stack+0x33/0x50 [ 669.318659][ T3] __kasan_record_aux_stack+0xbc/0xd0 [ 669.320733][ T3] __call_rcu_common.constprop.0+0x9a/0x790 [ 669.322871][ T3] pwq_release_workfn+0x244/0x380 [ 669.324722][ T3] kthread_worker_fn+0x2fc/0xa80 [ 669.326501][ T3] kthread+0x33a/0x430 [ 669.328065][ T3] ret_from_fork+0x45/0x80 [ 669.329707][ T3] ret_from_fork_asm+0x11/0x20 [ 669.331531][ T3] [ 669.332492][ T3] Second to last potentially related work creation: [ 669.335194][ T3] kasan_save_stack+0x33/0x50 [ 669.337196][ T3] __kasan_record_aux_stack+0xbc/0xd0 [ 669.339190][ T3] insert_work+0x38/0x230 [ 669.340936][ T3] __queue_work+0xb7e/0x1060 [ 669.342626][ T3] call_timer_fn+0x1a0/0x580 [ 669.344487][ T3] __run_timers+0x585/0xb10 [ 669.346181][ T3] run_timer_softirq+0x58/0xd0 [ 669.347947][ T3] __do_softirq+0x218/0x965 [ 669.349652][ T3] [ 669.350533][ T3] The buggy address belongs to the object at ffff88805f710c00 [ 669.350533][ T3] which belongs to the cache kmalloc-512 of size 512 [ 669.355505][ T3] The buggy address is located 448 bytes inside of [ 669.355505][ T3] freed 512-byte region [ffff88805f710c00, ffff88805f710e00) [ 669.360506][ T3] [ 669.361366][ T3] The buggy address belongs to the physical page: [ 669.363721][ T3] page:ffffea00017dc400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f710 [ 669.367429][ T3] head:ffffea00017dc400 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 669.370679][ T3] ksm flags: 0x4fff00000000840(slab|head|node=1|zone=1|lastcpupid=0x7ff) [ 669.373717][ T3] page_type: 0xffffffff() [ 669.375329][ T3] raw: 04fff00000000840 ffff888012c42c80 ffffea000088e100 dead000000000003 [ 669.378436][ T3] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 669.381545][ T3] page dumped because: kasan: bad access detected [ 669.383837][ T3] page_owner tracks the page as allocated [ 669.385888][ T3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5211, tgid 5211 (kworker/3:3), ts 52039514017, free_ts 0 [ 669.393132][ T3] post_alloc_hook+0x2cf/0x340 [ 669.394865][ T3] get_page_from_freelist+0xee0/0x2f20 [ 669.396940][ T3] __alloc_pages+0x1d0/0x4a0 [ 669.398656][ T3] alloc_pages+0x1a9/0x270 [ 669.400375][ T3] allocate_slab+0x251/0x380 [ 669.402052][ T3] ___slab_alloc+0x8be/0x1570 [ 669.403910][ T3] __slab_alloc.constprop.0+0x56/0xa0 [ 669.405880][ T3] __kmem_cache_alloc_node+0x137/0x350 [ 669.407832][ T3] __kmalloc+0x4f/0x100 [ 669.409372][ T3] fib6_info_alloc+0x40/0x160 [ 669.411066][ T3] ip6_route_info_create+0x337/0x1e70 [ 669.413032][ T3] ip6_route_add+0x26/0x150 [ 669.414675][ T3] addrconf_add_mroute+0x1e0/0x350 [ 669.416664][ T3] addrconf_add_dev+0x150/0x1c0 [ 669.418635][ T3] addrconf_init_auto_addrs+0x380/0x810 [ 669.420990][ T3] addrconf_notify+0x70f/0x1920 [ 669.422749][ T3] page_owner free stack trace missing [ 669.424679][ T3] [ 669.425557][ T3] Memory state around the buggy address: [ 669.427577][ T3] ffff88805f710c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 669.430403][ T3] ffff88805f710d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 669.433217][ T3] >ffff88805f710d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 669.436034][ T3] ^ [ 669.438206][ T3] ffff88805f710e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 669.441034][ T3] ffff88805f710e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 669.443815][ T3] ================================================================== [ 669.448062][ T3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 669.450616][ T3] CPU: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.5.0-syzkaller-12728-ga48fa7efaf11 #0 [ 669.454006][ T3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 669.457495][ T3] Call Trace: [ 669.458675][ T3] [ 669.459703][ T3] dump_stack_lvl+0xd9/0x1b0 [ 669.461636][ T3] panic+0x6a6/0x750 [ 669.463647][ T3] ? panic_smp_self_stop+0xa0/0xa0 [ 669.465912][ T3] ? preempt_schedule_thunk+0x1a/0x30 [ 669.467830][ T3] ? preempt_schedule_common+0x45/0xc0 [ 669.469949][ T3] check_panic_on_warn+0xab/0xb0 [ 669.471693][ T3] end_report+0x108/0x150 [ 669.473245][ T3] kasan_report+0xea/0x110 [ 669.474802][ T3] ? pwq_release_workfn+0x339/0x380 [ 669.476654][ T3] ? pwq_release_workfn+0x339/0x380 [ 669.478564][ T3] pwq_release_workfn+0x339/0x380 [ 669.480585][ T3] kthread_worker_fn+0x2fc/0xa80 [ 669.482610][ T3] ? put_unbound_pool+0x7c0/0x7c0 [ 669.484674][ T3] ? kthread_freezable_should_stop+0x190/0x190 [ 669.487285][ T3] kthread+0x33a/0x430 [ 669.488942][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 669.491092][ T3] ret_from_fork+0x45/0x80 [ 669.492947][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 669.494994][ T3] ret_from_fork_asm+0x11/0x20 [ 669.496964][ T3] [ 669.499454][ T3] Kernel Offset: disabled [ 669.501035][ T3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:37:36 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88801ceb4800 RSI=ffffffff817c61ee RDI=0000000000000005 RBP=ffffc9000e1c7cb8 RSP=ffffc9000e1c7ba0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88802c73d620 R12=1ffff92001c38f78 R13=0000000000000000 R14=0000000000000001 R15=ffff88802c73d600 RIP=ffffffff817c61f0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000300 CR3=000000005d3ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec1ff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000f7ffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd754abb40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d134041475d5c4b 5803495d03030e4a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4771475d4d5d0c13 53434f5c49415c5e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e66690074656e 000055bfbeedd43c 0000000000000021 003137376c6c696b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000241 0000000000000000 0000000000000062 642e79726f74616c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 493b3a2632483b3a 264c4b3b3a264f4b 3b3a26494b3b3a26 3b3d3b3a263f3c3b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a263e3e383a26 3c3b383a264f3a38 3a26493a383a2648 3a383a264b3a383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 544e47202c004600 000a0049000a0064 6e000a00646c205f 646d6b223d00004f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 494544202c004400 000a0045000a0020 20000a006464205f 646d61000a000044 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff849bc815 RDI=ffffffff92556180 RBP=ffffffff92556140 RSP=ffffc90000357868 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=502031203a555043 R12=0000000000000000 R13=0000000000000038 R14=ffffffff849bc7b0 R15=0000000000000000 RIP=ffffffff849bc83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7378000 CR3=0000000019112000 CR4=00352ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec1ff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000f7ffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd754abb40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d134041475d5c4b 5803495d03030e4a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4771475d4d5d0c13 53434f5c49415c5e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e66690074656e 000055bfbeedd43c 0000000000000021 003137376c6c696b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000241 0000000000000000 0000000000000062 642e79726f74616c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 493b3a2632483b3a 264c4b3b3a264f4b 3b3a26494b3b3a26 3b3d3b3a263f3c3b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a263e3e383a26 3c3b383a264f3a38 3a26493a383a2648 3a383a264b3a383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 544e47202c004600 000a0049000a0064 6e000a00646c205f 646d6b223d00004f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 494544202c004400 000a0045000a0020 20000a006464205f 646d61000a000044 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000004510d4 RBX=0000000000000002 RCX=ffffffff8a3ee04e RDX=ffffed1005906dbe RSI=ffffffff8ae92720 RDI=ffffffff8162d78e RBP=ffffed10028d7480 RSP=ffffc90000467e10 R8 =0000000000000000 R9 =ffffed1005906dbd R10=ffff88802c836deb R11=0000000000000000 R12=0000000000000002 R13=ffff8880146ba400 R14=ffffffff8ece21d0 R15=0000000000000000 RIP=ffffffff8a3ef29f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7354170 CR3=000000005d3ca000 CR4=00352ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000003897f4 RBX=0000000000000003 RCX=ffffffff8a3ee04e RDX=ffffed1005926dbe RSI=ffffffff8ae92720 RDI=ffffffff8162d78e RBP=ffffed10028d7900 RSP=ffffc90000477e10 R8 =0000000000000000 R9 =ffffed1005926dbd R10=ffff88802c936deb R11=0000000000000000 R12=0000000000000003 R13=ffff8880146bc800 R14=ffffffff8ece21d0 R15=0000000000000000 RIP=ffffffff8a3ef29f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002e823000 CR3=000000005aaf6000 CR4=00352ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000