x4a, 0x1, 0x7}, {0x80be, 0x7f, 0x40, 0x40}, {0x4, 0x3, 0x80, 0x2f}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x1}, 0x881) (async) 00:58:31 executing program 4: eventfd2(0x4, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x8914, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000000)=0x9, 0x0, 0x4) 00:58:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0x0, 0x200, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x1, 0x8, 0x6, 0x4, {{0x1b, 0x4, 0x2, 0x0, 0x6c, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @empty, {[@cipso={0x86, 0x4f, 0x0, [{0x0, 0xd, "9eed9b37a5e7e80e8271c3"}, {0x7, 0x10, "c9298b72fe67a97fdca544a0b89c"}, {0x7, 0x12, "7b50ff011284e400467c0891929593fc"}, {0x0, 0x6, "e17b8850"}, {0x5, 0x4, "241e"}, {0x5, 0xa, "e2391152d66d2890"}, {0x7, 0x6, "379573ad"}]}, @timestamp={0x44, 0x8, 0xed, 0x0, 0xe, [0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0xb4, 0x8, 0x7fffffff, 0x65, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x700, 0x20, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x400, 0x7, {{0x2c, 0x4, 0x1, 0x3, 0xb0, 0x65, 0x0, 0x7f, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@timestamp={0x44, 0x20, 0x58, 0x0, 0x8, [0x5, 0x7, 0xffff, 0x0, 0x321d, 0x4a800, 0x55c]}, @cipso={0x86, 0x6e, 0x0, [{0x7, 0x6, "bb1abed6"}, {0x1, 0x11, "07e56d48887657efff8187dc2aa332"}, {0x5, 0xf, "fc35f2e872da93488b77987641"}, {0x2, 0x2}, {0x1, 0xd, "94fcbecac65e2cbf18006a"}, {0x1, 0x6, "cd08938c"}, {0x1, 0xe, "ee371ee7ac2c435fca8e1b17"}, {0x2, 0x12, "797ae64457cab047e3674bba614a8bb7"}, {0x2, 0xd, "ad1d4b6d30521c10fcfcb3"}]}, @generic={0x89, 0xd, "fbeb596c15b73ecc70ecde"}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x4, 0x6, 0xdd, 0xfffffffc, 0x44, @remote, @loopback, 0x7, 0x80, 0x3, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x10, 0x1, 0x6, 0x3, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x66, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@noop, @timestamp={0x44, 0xc, 0x2e, 0x0, 0x5, [0x3, 0xc4]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000700)={0x744, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x374d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}]}}, {{0x8, 0x1, r10}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}, {{0x8, 0x1, r13}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x240000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x8, 0xae, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x744}, 0x1, 0x0, 0x0, 0x14}, 0x10004) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0x0, 0x200, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x1, 0x8, 0x6, 0x4, {{0x1b, 0x4, 0x2, 0x0, 0x6c, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @empty, {[@cipso={0x86, 0x4f, 0x0, [{0x0, 0xd, "9eed9b37a5e7e80e8271c3"}, {0x7, 0x10, "c9298b72fe67a97fdca544a0b89c"}, {0x7, 0x12, "7b50ff011284e400467c0891929593fc"}, {0x0, 0x6, "e17b8850"}, {0x5, 0x4, "241e"}, {0x5, 0xa, "e2391152d66d2890"}, {0x7, 0x6, "379573ad"}]}, @timestamp={0x44, 0x8, 0xed, 0x0, 0xe, [0x2]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0xb4, 0x8, 0x7fffffff, 0x65, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x700, 0x20, 0x7}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x400, 0x7, {{0x2c, 0x4, 0x1, 0x3, 0xb0, 0x65, 0x0, 0x7f, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@timestamp={0x44, 0x20, 0x58, 0x0, 0x8, [0x5, 0x7, 0xffff, 0x0, 0x321d, 0x4a800, 0x55c]}, @cipso={0x86, 0x6e, 0x0, [{0x7, 0x6, "bb1abed6"}, {0x1, 0x11, "07e56d48887657efff8187dc2aa332"}, {0x5, 0xf, "fc35f2e872da93488b77987641"}, {0x2, 0x2}, {0x1, 0xd, "94fcbecac65e2cbf18006a"}, {0x1, 0x6, "cd08938c"}, {0x1, 0xe, "ee371ee7ac2c435fca8e1b17"}, {0x2, 0x12, "797ae64457cab047e3674bba614a8bb7"}, {0x2, 0xd, "ad1d4b6d30521c10fcfcb3"}]}, @generic={0x89, 0xd, "fbeb596c15b73ecc70ecde"}]}}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x4, 0x6, 0xdd, 0xfffffffc, 0x44, @remote, @loopback, 0x7, 0x80, 0x3, 0x3}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x10, 0x1, 0x6, 0x3, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x66, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@noop, @timestamp={0x44, 0xc, 0x2e, 0x0, 0x5, [0x3, 0xc4]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000700)={0x744, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x374d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}]}}, {{0x8, 0x1, r10}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}, {{0x8, 0x1, r13}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x240000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x8, 0xae, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x744}, 0x1, 0x0, 0x0, 0x14}, 0x10004) (async) 00:58:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x64, 0x0, 0xf00}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x64, 0x0, 0x5cf3}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000440)={{r2}, 0x0, 0x14, @inherit={0x70, &(0x7f00000003c0)={0x1, 0x5, 0x6, 0x7f, {0x0, 0x3f, 0x5, 0x5, 0x96}, [0x0, 0x10, 0x681, 0x7, 0x80000001]}}, @subvolid=0x8d7c}) (async, rerun: 32) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1dc, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x33, 0x4a, 0x1, 0x7}, {0x80be, 0x7f, 0x40, 0x40}, {0x4, 0x3, 0x80, 0x2f}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x1}, 0x881) (rerun: 32) 00:58:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x64, 0x0, 0x6000}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:31 executing program 0: eventfd2(0x40000004, 0x100000) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 00:58:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x41) 00:58:31 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) 00:58:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x64, 0x0, 0xf35c}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xa, r3, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x20000001) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x20048010) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff3b, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0xfffffffd, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}]}, 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x7, 0x7b5, 0x2a, @mcast2, @loopback, 0x8020, 0x8000, 0x7, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x218, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x100}, 0x5) 00:58:31 executing program 4: eventfd2(0x4, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) (async) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async) r1 = eventfd2(0x0, 0x0) (async) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x8914, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) read$eventfd(r1, &(0x7f0000000040), 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000000)=0x9, 0x0, 0x4) 00:58:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x41) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x41) (async) 00:58:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0x3}}}}, 0x20}}, 0x0) 00:58:31 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) 00:58:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x41) 00:58:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0x4}}}}, 0x20}}, 0x0) 00:58:32 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) (async) [ 2485.316513][T26412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2485.355386][T26435] netlink: 'syz-executor.1': attribute type 153 has an invalid length. 00:58:32 executing program 0: eventfd2(0x40000004, 0x100000) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) 00:58:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xa, r3, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x20000001) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x20048010) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff3b, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0xfffffffd, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}]}, 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x7, 0x7b5, 0x2a, @mcast2, @loopback, 0x8020, 0x8000, 0x7, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x218, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x100}, 0x5) 00:58:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) r1 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file0\x00', r1) 00:58:32 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xad5529ba79e67175}) 00:58:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0x64}}}}, 0x20}}, 0x0) 00:58:32 executing program 4: eventfd2(0x4, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async) r1 = eventfd2(0x0, 0x0) (async) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x8914, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) read$eventfd(r1, &(0x7f0000000040), 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000000)=0x9, 0x0, 0x4) 00:58:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) r1 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file0\x00', r1) 00:58:32 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xad5529ba79e67175}) 00:58:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r1 = eventfd2(0x4, 0x0) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) 00:58:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) r1 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file0\x00', r1) 00:58:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x116}}}}, 0x20}}, 0x0) 00:58:32 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xad5529ba79e67175}) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xad5529ba79e67175}) (async) [ 2486.143150][T26448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:58:33 executing program 0: eventfd2(0x4, 0x0) r0 = eventfd2(0x9, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd22, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4) read$eventfd(r0, &(0x7f0000000040), 0x8) 00:58:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xa, r3, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x20000001) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x20048010) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff3b, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0xfffffffd, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}]}, 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x7, 0x7b5, 0x2a, @mcast2, @loopback, 0x8020, 0x8000, 0x7, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x218, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x100}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xa, r3, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x20000001) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x20048010) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff3b, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0xfffffffd, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}]}, 0x1c}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x7, 0x7b5, 0x2a, @mcast2, @loopback, 0x8020, 0x8000, 0x7, 0x4}}) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x218, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x100}, 0x5) (async) 00:58:33 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async, rerun: 64) r1 = eventfd2(0x4, 0x0) (rerun: 64) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) 00:58:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x40840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:58:33 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0xdbb}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000004c0)={0x14, 0x5, {0x7, @usage=0x3, 0x0, 0x6, 0x6, 0x6, 0x1, 0x5, 0xa0, @usage=0x8, 0xe77, 0x1, [0xfffffffffffffc00, 0x3, 0x2, 0xfffffffffffff001, 0x0, 0x7]}, {0xffffffffffffff81, @usage=0x2, r2, 0xfffffffffffffc00, 0x8, 0x3, 0x6c0e, 0x9, 0x18, @struct={0x80, 0x7fffffff}, 0x2, 0x6, [0x1, 0x2, 0x87, 0x8656, 0xffffffffffffffff, 0x3ff]}, {0x3, @usage=0x9, 0x0, 0x3, 0x67a, 0x4800, 0x4, 0x7fff, 0x14, @usage=0x7, 0x5, 0x6, [0x100000001, 0x5, 0xfffffffffffffff8, 0x8, 0xe080000000000, 0x20]}, {0x8, 0x20, 0x4}}) socket$tipc(0x1e, 0x2, 0x0) 00:58:33 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0xdbb}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000004c0)={0x14, 0x5, {0x7, @usage=0x3, 0x0, 0x6, 0x6, 0x6, 0x1, 0x5, 0xa0, @usage=0x8, 0xe77, 0x1, [0xfffffffffffffc00, 0x3, 0x2, 0xfffffffffffff001, 0x0, 0x7]}, {0xffffffffffffff81, @usage=0x2, r2, 0xfffffffffffffc00, 0x8, 0x3, 0x6c0e, 0x9, 0x18, @struct={0x80, 0x7fffffff}, 0x2, 0x6, [0x1, 0x2, 0x87, 0x8656, 0xffffffffffffffff, 0x3ff]}, {0x3, @usage=0x9, 0x0, 0x3, 0x67a, 0x4800, 0x4, 0x7fff, 0x14, @usage=0x7, 0x5, 0x6, [0x100000001, 0x5, 0xfffffffffffffff8, 0x8, 0xe080000000000, 0x20]}, {0x8, 0x20, 0x4}}) socket$tipc(0x1e, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0xdbb}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000004c0)={0x14, 0x5, {0x7, @usage=0x3, 0x0, 0x6, 0x6, 0x6, 0x1, 0x5, 0xa0, @usage=0x8, 0xe77, 0x1, [0xfffffffffffffc00, 0x3, 0x2, 0xfffffffffffff001, 0x0, 0x7]}, {0xffffffffffffff81, @usage=0x2, r2, 0xfffffffffffffc00, 0x8, 0x3, 0x6c0e, 0x9, 0x18, @struct={0x80, 0x7fffffff}, 0x2, 0x6, [0x1, 0x2, 0x87, 0x8656, 0xffffffffffffffff, 0x3ff]}, {0x3, @usage=0x9, 0x0, 0x3, 0x67a, 0x4800, 0x4, 0x7fff, 0x14, @usage=0x7, 0x5, 0x6, [0x100000001, 0x5, 0xfffffffffffffff8, 0x8, 0xe080000000000, 0x20]}, {0x8, 0x20, 0x4}}) (async) socket$tipc(0x1e, 0x2, 0x0) (async) 00:58:33 executing program 0: eventfd2(0x4, 0x0) (async) r0 = eventfd2(0x9, 0x800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd22, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4) (async) read$eventfd(r0, &(0x7f0000000040), 0x8) 00:58:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r1 = eventfd2(0x4, 0x0) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async) eventfd2(0x4, 0x0) (async) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:33 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) [ 2487.014029][T26484] netlink: 'syz-executor.1': attribute type 309 has an invalid length. 00:58:33 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0xdbb}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000004c0)={0x14, 0x5, {0x7, @usage=0x3, 0x0, 0x6, 0x6, 0x6, 0x1, 0x5, 0xa0, @usage=0x8, 0xe77, 0x1, [0xfffffffffffffc00, 0x3, 0x2, 0xfffffffffffff001, 0x0, 0x7]}, {0xffffffffffffff81, @usage=0x2, r2, 0xfffffffffffffc00, 0x8, 0x3, 0x6c0e, 0x9, 0x18, @struct={0x80, 0x7fffffff}, 0x2, 0x6, [0x1, 0x2, 0x87, 0x8656, 0xffffffffffffffff, 0x3ff]}, {0x3, @usage=0x9, 0x0, 0x3, 0x67a, 0x4800, 0x4, 0x7fff, 0x14, @usage=0x7, 0x5, 0x6, [0x100000001, 0x5, 0xfffffffffffffff8, 0x8, 0xe080000000000, 0x20]}, {0x8, 0x20, 0x4}}) socket$tipc(0x1e, 0x2, 0x0) 00:58:33 executing program 0: eventfd2(0x4, 0x0) r0 = eventfd2(0x9, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd22, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4) read$eventfd(r0, &(0x7f0000000040), 0x8) eventfd2(0x4, 0x0) (async) eventfd2(0x9, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd22, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4) (async) read$eventfd(r0, &(0x7f0000000040), 0x8) (async) 00:58:33 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2}}}}}, 0x20}}, 0x0) 00:58:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x40840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x40840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) 00:58:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:33 executing program 0: eventfd2(0x4, 0x0) eventfd(0x4) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) [ 2487.099826][T26528] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:58:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 00:58:33 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x3}}}}}, 0x20}}, 0x0) [ 2487.168372][T26550] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:58:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:34 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1100, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = eventfd2(0x7, 0x800) read$eventfd(r1, &(0x7f0000000100), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000140), 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) ioctl$sock_bt_hci(r2, 0x7, &(0x7f0000000140)="965208cf23ed66d7c654f59a91f7573043048723387774fe45f688690bb442fccbdff65d53e8b47c4abf1800cfa2c06d886a3e24b102abfcbb4f7af0581e90830ae4b37742c4fbd0546dcd950b52a366a1e976f8e2c908091414744fbb73958de2f4a132ee5dfdbc031e192dad72ac5aa6089140926b8f3cfd8d172da5c7881f0eebd4c53d281b05fc0c") 00:58:34 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) 00:58:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 00:58:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x40840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:58:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffff54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:34 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x5}}}}}, 0x20}}, 0x0) 00:58:34 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1100, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = eventfd2(0x7, 0x800) read$eventfd(r1, &(0x7f0000000100), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000140), 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) ioctl$sock_bt_hci(r2, 0x7, &(0x7f0000000140)="965208cf23ed66d7c654f59a91f7573043048723387774fe45f688690bb442fccbdff65d53e8b47c4abf1800cfa2c06d886a3e24b102abfcbb4f7af0581e90830ae4b37742c4fbd0546dcd950b52a366a1e976f8e2c908091414744fbb73958de2f4a132ee5dfdbc031e192dad72ac5aa6089140926b8f3cfd8d172da5c7881f0eebd4c53d281b05fc0c") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1100, 0x0) (async) read$eventfd(r0, &(0x7f00000000c0), 0x8) (async) eventfd2(0x7, 0x800) (async) read$eventfd(r1, &(0x7f0000000100), 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) (async) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000140), 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) (async) ioctl$sock_bt_hci(r2, 0x7, &(0x7f0000000140)="965208cf23ed66d7c654f59a91f7573043048723387774fe45f688690bb442fccbdff65d53e8b47c4abf1800cfa2c06d886a3e24b102abfcbb4f7af0581e90830ae4b37742c4fbd0546dcd950b52a366a1e976f8e2c908091414744fbb73958de2f4a132ee5dfdbc031e192dad72ac5aa6089140926b8f3cfd8d172da5c7881f0eebd4c53d281b05fc0c") (async) 00:58:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) [ 2487.939829][T26567] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:58:34 executing program 0: eventfd2(0x4, 0x0) eventfd(0x4) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) eventfd2(0x4, 0x0) (async) eventfd(0x4) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0x8) (async) 00:58:34 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x6}}}}}, 0x20}}, 0x0) 00:58:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffff54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:34 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1100, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) (async) r1 = eventfd2(0x7, 0x800) read$eventfd(r1, &(0x7f0000000100), 0x8) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) (async, rerun: 64) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000140), 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) (async) ioctl$sock_bt_hci(r2, 0x7, &(0x7f0000000140)="965208cf23ed66d7c654f59a91f7573043048723387774fe45f688690bb442fccbdff65d53e8b47c4abf1800cfa2c06d886a3e24b102abfcbb4f7af0581e90830ae4b37742c4fbd0546dcd950b52a366a1e976f8e2c908091414744fbb73958de2f4a132ee5dfdbc031e192dad72ac5aa6089140926b8f3cfd8d172da5c7881f0eebd4c53d281b05fc0c") 00:58:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:34 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) 00:58:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffff54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:34 executing program 4: r0 = eventfd2(0x4, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x29, 0x48, 0x9, 0x6, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x8556, 0xa75}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x29, 0x4, 0x40, 0x7, 0x19, @mcast2, @local, 0x8008, 0x7, 0x80200, 0x200}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r1, 0x1) 00:58:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8ff3e1ad5bf095e1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x3f, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x4}, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x4}, 0x10) 00:58:34 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x7}}}}}, 0x20}}, 0x0) 00:58:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:35 executing program 0: eventfd2(0x4, 0x0) (async) eventfd(0x4) (async) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0x8) 00:58:35 executing program 4: r0 = eventfd2(0x4, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x29, 0x48, 0x9, 0x6, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x8556, 0xa75}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x29, 0x4, 0x40, 0x7, 0x19, @mcast2, @local, 0x8008, 0x7, 0x80200, 0x200}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r1, 0x1) eventfd2(0x4, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) eventfd2(0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x29, 0x48, 0x9, 0x6, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x8556, 0xa75}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x29, 0x4, 0x40, 0x7, 0x19, @mcast2, @local, 0x8008, 0x7, 0x80200, 0x200}}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r1, 0x1) (async) 00:58:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8ff3e1ad5bf095e1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x3f, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) (async) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x4}, 0x4) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x4}, 0x10) 00:58:35 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x8}}}}}, 0x20}}, 0x0) 00:58:35 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) 00:58:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8ff3e1ad5bf095e1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x3f, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x4}, 0x4) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x4}, 0x10) 00:58:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:35 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x9}}}}}, 0x20}}, 0x0) 00:58:35 executing program 4: r0 = eventfd2(0x4, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x29, 0x48, 0x9, 0x6, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x8556, 0xa75}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x29, 0x4, 0x40, 0x7, 0x19, @mcast2, @local, 0x8008, 0x7, 0x80200, 0x200}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r1, 0x1) eventfd2(0x4, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) eventfd2(0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x29, 0x48, 0x9, 0x6, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x8556, 0xa75}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x29, 0x4, 0x40, 0x7, 0x19, @mcast2, @local, 0x8008, 0x7, 0x80200, 0x200}}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r1, 0x1) (async) 00:58:35 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:36 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) r2 = syz_io_uring_setup(0x5e2e, &(0x7f0000000080)={0x0, 0x96ab, 0x8, 0x0, 0x143}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000140)=r3, 0x1) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xf}}}}}, 0x20}}, 0x0) 00:58:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:36 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 00:58:36 executing program 4: r0 = eventfd2(0x3, 0x0) eventfd2(0x20000000, 0x80000) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x87, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0xb56, "0d398b", 0x8e, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x1}) 00:58:36 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) (rerun: 32) 00:58:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:36 executing program 4: r0 = eventfd2(0x3, 0x0) (async) eventfd2(0x20000000, 0x80000) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x87, 0x8) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0xb56, "0d398b", 0x8e, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x1}) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x60}}}}}, 0x20}}, 0x0) 00:58:36 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x300}}}}}, 0x20}}, 0x0) 00:58:36 executing program 4: r0 = eventfd2(0x3, 0x0) eventfd2(0x20000000, 0x80000) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x87, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0xb56, "0d398b", 0x8e, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x1}) eventfd2(0x3, 0x0) (async) eventfd2(0x20000000, 0x80000) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x87, 0x8) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0xb56, "0d398b", 0x8e, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x1}) (async) 00:58:36 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) r2 = syz_io_uring_setup(0x5e2e, &(0x7f0000000080)={0x0, 0x96ab, 0x8, 0x0, 0x143}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000140)=r3, 0x1) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) (async) syz_io_uring_setup(0x5e2e, &(0x7f0000000080)={0x0, 0x96ab, 0x8, 0x0, 0x143}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) eventfd(0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000140)=r3, 0x1) (async) 00:58:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x500}}}}}, 0x20}}, 0x0) 00:58:36 executing program 4: r0 = eventfd2(0x4, 0x0) eventfd2(0x20, 0x1) read$eventfd(r0, &(0x7f0000000040), 0x8) 00:58:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:36 executing program 4: r0 = eventfd2(0x4, 0x0) (async) eventfd2(0x20, 0x1) read$eventfd(r0, &(0x7f0000000040), 0x8) 00:58:36 executing program 5: r0 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={0x0, 0x0, 0x0, [0x7fffffff, 0xedd9, 0x0, 0x3, 0x4], [0x40, 0x9b1, 0x9c0, 0x8000, 0xe8ae, 0x7fff, 0x5, 0x4, 0x7, 0x2, 0x100, 0x5, 0x9, 0x4, 0xd4, 0x9, 0xfff, 0x880b, 0x7f, 0x6, 0x7, 0x0, 0x6, 0x6, 0x49, 0x1c9b, 0x3, 0x0, 0x0, 0x8, 0x8, 0x3, 0x1, 0x5, 0xffffffffa70a835a, 0x9, 0x5, 0x5, 0x4, 0x534e, 0x1000000, 0x0, 0x8000, 0x2, 0x8, 0x8, 0x3, 0x1, 0x10000, 0x9, 0xa46, 0x0, 0xe, 0x1, 0x7fff, 0x8000, 0x7, 0xbd8, 0x1, 0xff, 0x4, 0x10001, 0x1, 0x7, 0x0, 0xfb26, 0x95fb, 0x108c, 0x8, 0x0, 0x10000, 0x6, 0xfffffffffffff037, 0x1, 0xee, 0x5, 0x2, 0x7, 0x6, 0x3ff, 0xfffffffffffffff7, 0x3f, 0x9, 0x7, 0x40, 0x0, 0x101, 0x5e8, 0x1000, 0x5, 0x197, 0x8, 0x80, 0x2, 0x4, 0x3, 0x800, 0x401, 0x8, 0x7, 0x4, 0x7, 0xffffffffffff0001, 0xfe36, 0x6, 0x2, 0x3, 0x7, 0x1, 0x8fb0, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x7ff, 0x7, 0x5, 0x2bc8c14c, 0x401, 0x1f]}) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) 00:58:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) (async) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x600}}}}}, 0x20}}, 0x0) 00:58:36 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r1 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) (async) r2 = syz_io_uring_setup(0x5e2e, &(0x7f0000000080)={0x0, 0x96ab, 0x8, 0x0, 0x143}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) r3 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000140)=r3, 0x1) 00:58:36 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:36 executing program 5: r0 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={0x0, 0x0, 0x0, [0x7fffffff, 0xedd9, 0x0, 0x3, 0x4], [0x40, 0x9b1, 0x9c0, 0x8000, 0xe8ae, 0x7fff, 0x5, 0x4, 0x7, 0x2, 0x100, 0x5, 0x9, 0x4, 0xd4, 0x9, 0xfff, 0x880b, 0x7f, 0x6, 0x7, 0x0, 0x6, 0x6, 0x49, 0x1c9b, 0x3, 0x0, 0x0, 0x8, 0x8, 0x3, 0x1, 0x5, 0xffffffffa70a835a, 0x9, 0x5, 0x5, 0x4, 0x534e, 0x1000000, 0x0, 0x8000, 0x2, 0x8, 0x8, 0x3, 0x1, 0x10000, 0x9, 0xa46, 0x0, 0xe, 0x1, 0x7fff, 0x8000, 0x7, 0xbd8, 0x1, 0xff, 0x4, 0x10001, 0x1, 0x7, 0x0, 0xfb26, 0x95fb, 0x108c, 0x8, 0x0, 0x10000, 0x6, 0xfffffffffffff037, 0x1, 0xee, 0x5, 0x2, 0x7, 0x6, 0x3ff, 0xfffffffffffffff7, 0x3f, 0x9, 0x7, 0x40, 0x0, 0x101, 0x5e8, 0x1000, 0x5, 0x197, 0x8, 0x80, 0x2, 0x4, 0x3, 0x800, 0x401, 0x8, 0x7, 0x4, 0x7, 0xffffffffffff0001, 0xfe36, 0x6, 0x2, 0x3, 0x7, 0x1, 0x8fb0, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x7ff, 0x7, 0x5, 0x2bc8c14c, 0x401, 0x1f]}) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) 00:58:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) 00:58:36 executing program 4: r0 = eventfd2(0x4, 0x0) (async) eventfd2(0x20, 0x1) read$eventfd(r0, &(0x7f0000000040), 0x8) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x700}}}}}, 0x20}}, 0x0) 00:58:36 executing program 0: r0 = eventfd2(0x4, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:36 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x900}}}}}, 0x20}}, 0x0) 00:58:36 executing program 5: r0 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={0x0, 0x0, 0x0, [0x7fffffff, 0xedd9, 0x0, 0x3, 0x4], [0x40, 0x9b1, 0x9c0, 0x8000, 0xe8ae, 0x7fff, 0x5, 0x4, 0x7, 0x2, 0x100, 0x5, 0x9, 0x4, 0xd4, 0x9, 0xfff, 0x880b, 0x7f, 0x6, 0x7, 0x0, 0x6, 0x6, 0x49, 0x1c9b, 0x3, 0x0, 0x0, 0x8, 0x8, 0x3, 0x1, 0x5, 0xffffffffa70a835a, 0x9, 0x5, 0x5, 0x4, 0x534e, 0x1000000, 0x0, 0x8000, 0x2, 0x8, 0x8, 0x3, 0x1, 0x10000, 0x9, 0xa46, 0x0, 0xe, 0x1, 0x7fff, 0x8000, 0x7, 0xbd8, 0x1, 0xff, 0x4, 0x10001, 0x1, 0x7, 0x0, 0xfb26, 0x95fb, 0x108c, 0x8, 0x0, 0x10000, 0x6, 0xfffffffffffff037, 0x1, 0xee, 0x5, 0x2, 0x7, 0x6, 0x3ff, 0xfffffffffffffff7, 0x3f, 0x9, 0x7, 0x40, 0x0, 0x101, 0x5e8, 0x1000, 0x5, 0x197, 0x8, 0x80, 0x2, 0x4, 0x3, 0x800, 0x401, 0x8, 0x7, 0x4, 0x7, 0xffffffffffff0001, 0xfe36, 0x6, 0x2, 0x3, 0x7, 0x1, 0x8fb0, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x7ff, 0x7, 0x5, 0x2bc8c14c, 0x401, 0x1f]}) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={0x0, 0x0, 0x0, [0x7fffffff, 0xedd9, 0x0, 0x3, 0x4], [0x40, 0x9b1, 0x9c0, 0x8000, 0xe8ae, 0x7fff, 0x5, 0x4, 0x7, 0x2, 0x100, 0x5, 0x9, 0x4, 0xd4, 0x9, 0xfff, 0x880b, 0x7f, 0x6, 0x7, 0x0, 0x6, 0x6, 0x49, 0x1c9b, 0x3, 0x0, 0x0, 0x8, 0x8, 0x3, 0x1, 0x5, 0xffffffffa70a835a, 0x9, 0x5, 0x5, 0x4, 0x534e, 0x1000000, 0x0, 0x8000, 0x2, 0x8, 0x8, 0x3, 0x1, 0x10000, 0x9, 0xa46, 0x0, 0xe, 0x1, 0x7fff, 0x8000, 0x7, 0xbd8, 0x1, 0xff, 0x4, 0x10001, 0x1, 0x7, 0x0, 0xfb26, 0x95fb, 0x108c, 0x8, 0x0, 0x10000, 0x6, 0xfffffffffffff037, 0x1, 0xee, 0x5, 0x2, 0x7, 0x6, 0x3ff, 0xfffffffffffffff7, 0x3f, 0x9, 0x7, 0x40, 0x0, 0x101, 0x5e8, 0x1000, 0x5, 0x197, 0x8, 0x80, 0x2, 0x4, 0x3, 0x800, 0x401, 0x8, 0x7, 0x4, 0x7, 0xffffffffffff0001, 0xfe36, 0x6, 0x2, 0x3, 0x7, 0x1, 0x8fb0, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x7ff, 0x7, 0x5, 0x2bc8c14c, 0x401, 0x1f]}) (async) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) 00:58:36 executing program 0: r0 = eventfd2(0x4, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async, rerun: 64) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (rerun: 64) 00:58:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{}, 0x0, 0x8, @unused=[0x2, 0x200, 0xec5, 0xfffffffffffffff9], @name="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"}) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0xffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x5c, r3, 0x420, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0xb6b}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001640)={{r1}, {@val={r4}, @max}}) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xf00}}}}}, 0x20}}, 0x0) 00:58:36 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{}, 0x0, 0x8, @unused=[0x2, 0x200, 0xec5, 0xfffffffffffffff9], @name="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"}) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0xffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x5c, r3, 0x420, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0xb6b}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001640)={{r1}, {@val={r4}, @max}}) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{}, 0x0, 0x8, @unused=[0x2, 0x200, 0xec5, 0xfffffffffffffff9], @name="8ec8e0fc4e583ec533a9624cf5bbca97edd7d2ae2f0290f6f10fbf21a45e668cc7ac3b2209dacae1bc9794b05d0cb82d6a3776d896ee9440f1bbda51bf4eeab24afb9b21e7d921642c867ed61757b857a928c102fba1fda0c6463a14891a22d0034141685811bd8f6ef912bde81e688edbc8b2fc2ce30fb11b561ba3bacd47d628d9b0fd59f60628c945ae93fc522ba8781d89d2e2d5acaf1c22cd55e569674fe295113d1119b30217da3052f58de2c2df019afc4c40a63dfb02fdda888c82a669f154c2a62770865a59aebf996f390ca0a5d3f6986741a916422cb908b84a1504e7c1be8b49019737a0e4bb8d5eec1e745ef5aa2f088b7f8708bec0a54eecbb0e8fd5bccd7d604b6dd461c96afb518e0644d0920d55e0e6162e41fb495116a65602d30c4bf9deebb95341de907098665c89e7ad7c3801392d60d3529fe84bad624d39e4e64c28c4c61ebfbcb2e15ff7ff516376ff50ec47e6b7906c1d7f7878f0b821d70190f5ee72aad7c2179a9128d413655adf84fc2b04eeb5c41b00fdd25c61a4965b8c4a727806b4c42b3d6a9bf93b98f7987828ef2716591630664a35b7a06c771181d82973f6ea84658e4648a5781eeeb2fde8ae4886ba265aee2d9a56be8c5feba3b390fd6fb496e6c3a673cf1b9469a8dd0624163f144222cf48fd36b387ec04358bb8b0345cf8a7d04852e0c4169db862b935c8d5697bf3dd816b484425499caecb60e9730efce598614570e1ef30ba317f0c6508185f478fe2cde859f8b797e89e8ef7aa3388da478b67770dc3831ef5d94a3af09bb87ad2acdbf05bee02133def198fd3d9bf4d934638b0432e3068b14b99409b59ad5b0876eec0df4eb1cf3d1620f149038527e7176550c26650d99286e6fd31cb7b207d2759d40f356f35aa66b9c3989e12d0d32d6809d2393a85efcd3b2e5358741215efb596945c7fd1b9dd5475a6ec716de8bef45e79a367190f219f6fae0b739f885e498ae7e077006f8c56a75b44a244c27c096309bbb843fb54cee718136e632d9ace4c7f19ee60ae06cf6ac5d210944d77c11bbf866ac2b1e5a7da7e8a41610f202ae8f10227b76c65d10ff8285f09d5a0606de340718942ecc662e64e9688683ecb37c5a496582ab7d96613c8b1cf819b8373bc50901fd892b4d023633c40245d8f4e38cc4fcd1f8d10eb1fac291767f0203ae6051e0a9ebd77214d937e0e394f55c78500fbadc8fdb96da265c4a9ac967d3291715b07af242c4f32444dd73e8e6d6823cfb249b77d3f3a3e105bebb9e383e3bbbcb1a736e3931996eb3efa1b8190b543b72087aeb49359ed100a55710dee07f90b5ccfbe00c30b06120af0e660aeac7f50a4f80efd94494670220e31b0325df042c0fbfd9b90455d205fa34295d96b07a016458d6ecdd59cdc3eaccec9930ae577b167889d2de5c3dc0277df832f61873797eb9bda589ec503efcfa758c6a307e0b4249f1aae58ca1f824d3770f71ef9422c143dd3e936177d355a2edb0de6cc2f4c735e4fcd187a55ea81187fd137faa854c5aa9143e92d1b0b0d89773d5464d584b2875455e6549a9f0798d339655f2fa1ccd5fea6eb304979166f7ec036b7b6ba2d2dd463c28601ac538b7a7ed72b480944a53e1bd783ba1e9562a5057a2ca7eda82202b830d6f78a2e9895d4dfd1bdcfef974f7267f25638d1415431d4e4731fd2d247f42fb39a6b12cc5fcece55abda99e6dff10c0f8b3af1074cb07112d029377ef5fbc615c290a0358a8442925f776a62b65f29e46ff033d1aa9faca442250612c99c202d10ee549b835f286764486b44dd13d4d23449eb35d3e2a904ee51a60d3a4906a939a2782ef1e2ad847ee024b1f6c2099d6c6345ca41d300d9b28528680bbb024986e163f5fd288d00ba8ffa792dba92eb8bea38f8d99a91be656b06aa516bc1736e7d1b2db4602e568c8df01758644e0eb3a475a7f9411ca6d1b9e4b89c618d3ac7d1e1553ab586da4d0ee5e4073a768a38d12eef0fed3a27bb67e1d75a0f3e3bbffb43f2f2f43e477b740d3533edd7dcff0ff21fb9cfbae4f0c86dac0e71c0fa71647121971bb7d4e021e8cf8bb49694774417a849925f40b0b289bd122e24505d63787f75b4d440c51ae1b5be303ad671ae4984b96e40fe4407ad4ef5d0f515226a0cb46160e263c5c9d3baa623893137656061898a5933c334066c07e919e7dc25304be37f62f9a9e75fa4a1839077cc47d328614ed3ef447addc0423b1f2afd10a6daa3acdba0f0f7139636e157de8732af2c88070d04b2211898a7127e6eed02c9bc283b21c9555006e003f031c4633e2473f358670e0ab12c0bc5b12e6d9001dbe59e173a5fd2e5f6b7a2d3790a6f2200bc632181b527c06c35b21fb5cc75b9eaadc147e8e37c8112721a443c5a46cc85bb2f465914cb2dfb628b1941727c06a7c5581e2fe986bc9e6c52f9a2097488d3f0e2ced26d8f0d4ebc334e3a9840cbcf912720bda849f558c8d8e9b1df6ff2c51e85f0e07b2e6d3ce36def0632619f47de589840fece339efdc15cc24c4df4ac60e636445582989c1baed5d7249c4a32c03057df050e5d1ae55e14f8a521cd2d7cfc55923223e06655a0679953076d7c5dada3e13366afdc941f6c208f1a30e150794f511ec6f609dd32570e67cddbce328cb16e714d1d66f5ab7ce5b2b8d8389d9fd13f101afc5d402a0a9a6a66db6d1656a0dce6ef2f6322cecf4e9bd1d5cb1db99ff1ede5fa4e0173a41cffebd317fde5f1213c45213a9aef440b40b7aeb1c44753054d4f822c64dedbb7abd762f9391b5e9ce6a1bc4554c7da27f516f2aea00675c400a26a753bcee0336adb55dd0ea668a91f7c74f156f7a9d8726a6ebbdf7e624779102bccb2d7172571dab3e5b713c4375cf03ba36fd044cb064153be00ae127d30c63ce0ad6f815734b0bf16437c9e0a24776b6828cf45694f68b4f27c538f9790b7981a2c14826456089a4da230d096574c05952486db3e0a0251f136cceda2253a14fed164158142f927e543b05bb316e89ab1af00bc8846cd2e3d57bde6e532a5538a6ddfc563c1d8e9241c1d01cae8f77aa1ffc4bb8166b13904ce6529902160cdefa55eedf94cac77b06fc99540e1e4f89084e2ca83a3329bffa004f2f5d45e5dbae2ac6db3f842816bdaff691c5b9d556230540fa01be9fcd5ed91836da797cdc70b06f547b8f7f2d84cb841d597e59922170e47eaa38cdb12402f281dd0e0e8a9a375ad764e2c541c7c266646c3fb229ee7f613726b3d5f6e15fd6cd8028aec9e2f8912b7480de918171fddfb04ec65a833a6128accbc84b0f8124e0b9931c6279b760addaa1a38451a9c1037e1861060f316c661d448cdb8d392114cc4c589e803148d0d9faa492f49cf0cec7058d912bf2e2661ce37a588cc79f5b136ae84b56084d7e02490ffee6daf9cebf38fbf39e882d76a848f05652171b034eec95dd042665d0e88d42e97b171465df6d13c610f127e7d147c8dc82abe1ab406d8eed5c3dbf132507f00cd8c51736343f2c553665e91206cd17b1e0aab3e793757fb968d3aee7906f757132b8d6e695cd6faf096db5591198dc30f91ecaa2eba91349b96bc2a47d576a4d8f731516563f21b8399e881ed2dfcdd1963d02bb3954628867cc2aebe4acd37998a73995279bfcf406509b008ce3abb891f8de3dd9e6f62a07613da7c662299935660bb6e880e231c1f444f7d4819d517c47de48a480c52c2370b3b373c872e85cb97ca6d3c0069f9b948e0934ef36849de5c4c3cb3ac39878240865b128e4de9046a841929a116ad85a5ed2649d9837c41fd472da38baaec4d6be62e731fdda896f2070881f35e82561da56811dac564639f136b970bcf0ec52493c1763c62d1798672319ca08a9dd67f6337ff7fbd588b7236a509977c33322bc253f855f6973c0b762771b1f9fa5a48bb552b40fb2578551d8fc929c6a04f83d5a13d913e32d9272c8c12b322b87e603fce79717544ddea2725c3c1acfe30069b7a30ae67b818cded8651eba858db8c62caa847a3242b0de040ea4787db475b516800c012084260627bc3379279aebdfd7d094134dac27f7e8c4f71b8c792ccbb9da99c35523e2bc3a8856aaa39b94a7ea7759cf543823870cdf7299e9882ccff28a0370c8068bb57512918556c2e94cb5217973e46fc53761e4befc9b22390839841811f9d19523528b3b3eb9e0314ccbb7740d7b03aa73ecbcd0adc6296e32a45125a0a0e33708b84c4711d8e3dec8662f81cc42f4b6e38a8e02156ea22ad6088c7ff6e2b08285e2a35c8d064b50a9647e2feba1708ec3f65f0ce823b61b857442959d8ad96beb21460068ad5b3ce00e91ecb5968f1f3db32650088e6936f92904e793e0296514d6a188914125dc226084babcd7264564624de4c813592c90669c1ff5acfb299773c17e5381db69cec6af6c3d0a4f4ed8e1d0cf7d22836d905d3f3ad192c0c14e4e17e6af451af13bae99a87b699226adf59eeadf127fc6809c875ad357fb61c8aea8cc76903a133d5cd635cc12b0e4c99f6c08bb8cb8008113174b12a95a7b8c2fe2c6f0be8f7720ecbb11799e31afddc7d35067623a93e4b0942a5c6a34805157bcc360496aa767779387ba3e86a80ac3e31fdf99fcfc44799f14606c899cf886149f7cedb8f10d4a9614b7baf284f5501b5dfb51ed09c390966bfa6510910f4c1584f51d9590620681feebe3c4daa2a4a1f2f154ffa468f7726819dd2ee632577d3ef9e5e65f7a7920f0bd2ca75cdf6560294bc473d1f151f5d4242097ddb7eb8d6d846dc7e4e1f31a9bd24d324d0294166de8688a18b3d2afb35f5a9cc2179a1d02faf508875a77e4469f1f717343aa8a22a6924574b8dea980240ce660ff030449705ccb45f32b10f19d2618d975d753213a2b05ff29cd58d7565048b71c75c2e520567897d851a73a98bed1425441170e5369db5b210b768e669d70fdea662e8df402f6d28e6c1a538e848dbb8d20da46bce8762a99f18b145fb0ca3c2d1d657866a27349b165e302f8c021c10eed45012a9f26b13a8162b80e894025e7809b5a17db8329c57b04a3e70e1f948dbc2cb35b1e7bc844c32c229fdf2acd82feebc3dbe523c81a98893eab0e840270b059929d9c00cc6806f927d37daf2d3f72c1fd2f97152d466f71d175a4af6bd406e865814a895d593488b816bbb92d7e48a47f1b43956a2755cf6549ee69ca753dfa2581543c01b06f6f8836c8748649f5231b73dc6e67e53d9956574a425ac34cf7dc6cd9896bac8f4b16ae884fb04d4745a6a31594d4b5d93985e1a5af11a8ed453017a3b418e5179c78cd69801f807c37c6436e5b06f9bab3f1e7f8c42ee37950fd9073c9776f05c6edbb89f6566a25ed50e6e6fbb3776027473700a593cb991610f52ea2f45cd8b0f5bc433bade0f1a435cfba06479de592dc4640392dfdbad0f2bc427f77ea69a5510e1b8e60ec4a8f8d0cb5b5e34fd84ad66116872591760ecb5dd8d16831a9ace9ab349b7c98855fc670469d0e16fe1ba0e2d602948d5ad0bd4f1c90d8bddcdb7c469635aea7e99bed8326daeb63db2374abeb866bc2104ba5c41ae7fe5199bdd93278c4ac11f27ce40b77b3b67ae1502ca4ee1543fbba1e7edff7be5fc9db01bd76ff27fa3640ba8c4a34be7b5ec72b1d63d0d5425453a53e0f2d2e48b7658c88e07e67b6bbb5e04035203b1e90d"}) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0xffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x5c, r3, 0x420, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0xb6b}) (async) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001640)={{r1}, {@val={r4}, @max}}) (async) 00:58:36 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x5cf3}}}}}, 0x20}}, 0x0) 00:58:36 executing program 5: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000180)={0x22, 0x1, 0x20, 0xa0, 0x19}, 0x6) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x8]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0xa3, 0x1, 0x4a, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x40, 0x1}}) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) r2 = getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@acquire={0x130, 0x17, 0x20, 0x70bd29, 0x25dfdbff, {{@in=@loopback, 0x4d2, 0xff}, @in6=@mcast1, {@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e24, 0xa7f1, 0x4e21, 0x40, 0xa, 0xa0, 0x20, 0x67, r0, r1}, {{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x4e20, 0x7, 0x4e22, 0x0, 0xa, 0xc0, 0x80, 0x89, 0x0, r2}, {0x8, 0x40, 0x9, 0x4, 0x9, 0x401, 0x9, 0x2}, {0x2, 0x80, 0xffffffff, 0x8}, 0x1, 0x0, 0x2, 0x1, 0x2, 0x1}, 0x4, 0x380000, 0x401, 0x70bd2d}, [@replay_thresh={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, 0x0) mkdirat$cgroup(r4, &(0x7f0000000140)='syz1\x00', 0x1ff) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x1ff) 00:58:36 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x6000}}}}}, 0x20}}, 0x0) 00:58:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{}, 0x0, 0x8, @unused=[0x2, 0x200, 0xec5, 0xfffffffffffffff9], @name="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"}) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0xffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x5c, r3, 0x420, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0xb6b}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001640)={{r1}, {@val={r4}, @max}}) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{}, 0x0, 0x8, @unused=[0x2, 0x200, 0xec5, 0xfffffffffffffff9], @name="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"}) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0xffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x5c, r3, 0x420, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0xb6b}) (async) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001640)={{r1}, {@val={r4}, @max}}) (async) 00:58:36 executing program 4: r0 = eventfd2(0x4, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000080)={0x3, 0x8, @start={0x0, 0x1, "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", "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"}, [0x5, 0x7fffffff, 0x80000000, 0x80000000, 0x7f, 0x4, 0x0, 0x9, 0x80000000, 0x4, 0x0, 0x8000, 0x480c, 0x1, 0x40, 0xfc, 0x4, 0x1000, 0x1, 0x3f, 0x0, 0xc5, 0x40000000000000, 0xffffffff7fffffff, 0x2, 0x8, 0x8000, 0xff, 0x7f, 0x3ff, 0x80000000, 0x69, 0x7f, 0x2, 0x1, 0x100, 0x7, 0x8, 0xb, 0x8, 0x8, 0x7fff, 0x3, 0x4e7f03c2, 0x8, 0x9, 0x7ff, 0x9, 0x80, 0x5, 0x93, 0x4690, 0x3a43000, 0x8, 0x8, 0x7, 0xfffffffffffffffa, 0x800, 0x1, 0x800, 0x2, 0x5, 0x8, 0x8]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000b40)={{r0}, 0x0, 0xa, @inherit={0x78, &(0x7f0000000ac0)={0x1, 0x6, 0x3, 0x52, {0x21, 0x3, 0x0, 0x80000000, 0x400000000}, [0x4, 0x2, 0x7, 0x5, 0x9, 0x8]}}, @devid=r1}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001b40)={"ebfd22000000000000000f00", 0x0, 0x0, {0xffffffff, 0x4}, {0x4bd1}, 0x3, [0x1, 0x9, 0x40, 0x1, 0x80000001, 0x9, 0x6, 0xa1, 0xfffffffffffffffe, 0x4, 0x8, 0x17b4, 0x401, 0x6, 0x6, 0x10000]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001c40)={{r3}, r4, 0x0, @unused=[0x200, 0x80, 0x3348, 0x2], @subvolid=0x80000000}) 00:58:37 executing program 0: r0 = eventfd2(0x4, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x4, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:37 executing program 5: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000180)={0x22, 0x1, 0x20, 0xa0, 0x19}, 0x6) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x8]}, 0x8) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0xa3, 0x1, 0x4a, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x40, 0x1}}) (async, rerun: 32) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) (async, rerun: 32) r2 = getuid() (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@acquire={0x130, 0x17, 0x20, 0x70bd29, 0x25dfdbff, {{@in=@loopback, 0x4d2, 0xff}, @in6=@mcast1, {@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e24, 0xa7f1, 0x4e21, 0x40, 0xa, 0xa0, 0x20, 0x67, r0, r1}, {{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x4e20, 0x7, 0x4e22, 0x0, 0xa, 0xc0, 0x80, 0x89, 0x0, r2}, {0x8, 0x40, 0x9, 0x4, 0x9, 0x401, 0x9, 0x2}, {0x2, 0x80, 0xffffffff, 0x8}, 0x1, 0x0, 0x2, 0x1, 0x2, 0x1}, 0x4, 0x380000, 0x401, 0x70bd2d}, [@replay_thresh={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, 0x0) (async) mkdirat$cgroup(r4, &(0x7f0000000140)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x1ff) 00:58:37 executing program 3: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffc1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xbb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:37 executing program 4: r0 = eventfd2(0x4, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000080)={0x3, 0x8, @start={0x0, 0x1, "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", "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"}, [0x5, 0x7fffffff, 0x80000000, 0x80000000, 0x7f, 0x4, 0x0, 0x9, 0x80000000, 0x4, 0x0, 0x8000, 0x480c, 0x1, 0x40, 0xfc, 0x4, 0x1000, 0x1, 0x3f, 0x0, 0xc5, 0x40000000000000, 0xffffffff7fffffff, 0x2, 0x8, 0x8000, 0xff, 0x7f, 0x3ff, 0x80000000, 0x69, 0x7f, 0x2, 0x1, 0x100, 0x7, 0x8, 0xb, 0x8, 0x8, 0x7fff, 0x3, 0x4e7f03c2, 0x8, 0x9, 0x7ff, 0x9, 0x80, 0x5, 0x93, 0x4690, 0x3a43000, 0x8, 0x8, 0x7, 0xfffffffffffffffa, 0x800, 0x1, 0x800, 0x2, 0x5, 0x8, 0x8]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000b40)={{r0}, 0x0, 0xa, @inherit={0x78, &(0x7f0000000ac0)={0x1, 0x6, 0x3, 0x52, {0x21, 0x3, 0x0, 0x80000000, 0x400000000}, [0x4, 0x2, 0x7, 0x5, 0x9, 0x8]}}, @devid=r1}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001b40)={"ebfd22000000000000000f00", 0x0, 0x0, {0xffffffff, 0x4}, {0x4bd1}, 0x3, [0x1, 0x9, 0x40, 0x1, 0x80000001, 0x9, 0x6, 0xa1, 0xfffffffffffffffe, 0x4, 0x8, 0x17b4, 0x401, 0x6, 0x6, 0x10000]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001c40)={{r3}, r4, 0x0, @unused=[0x200, 0x80, 0x3348, 0x2], @subvolid=0x80000000}) eventfd2(0x4, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000080)={0x3, 0x8, @start={0x0, 0x1, "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", "0e3648f9c58e0265d292dee59d02510714a51163f8e442dd5cae7cdc6369ff3caa11fede51c99d684df46e0b92365bad5d572855dc42632b58e6fa6b25516f7c34b5a8418403a1194164523863cff2dc24bc26d3690c31ae3315731e9b9a748b3d124eda1204ddfec1ad32d832dd8c516ebcd3a095d2da1e4703f7a9dc0b0c11bfee01f9e2410b1d29bf7e23fa60644eb9f278e091e19951c9f5f70ca220b5b59b3569d19a399d2c0a92a305a3b91439e89ee2e42fba6bcfae6ca61de88bac07fcb23ab935b6624febcc7e13384993b55bfd7feb7dbe30dbf2be974085ff4bb6a53a8fef030c040b046c3127371fe648d2f80d8727c0221dbd87854ded2f3278baf241cda8f93c885830937978b2c612e666e3da52d3cbbd722eb76694af0a0453168984daafc6ea050c8550500830ecad803003cb501e3c71998aabcf14ffb848f3f939f5de2a109ad954de4db4d4c72de0ceebd245663370bd6a570669fadc4898b71b8f0bc1abbc3d9a75136a53bcb82473031cad84695c7891d96f9d0c97675ce4f8bccc9486d6e0a44461368556086419a305bf6bbd243786a29343b7e46549f9cfe2d83f5879d05f4444f3b111588b1daab28ef4cdab7247ab0a3c9553c03b7404cfc60380b098d670177cceaf5bb56e189abbccfbf795568efcd06c0404b18428e2e4debbfb632bc532e61324737164256a8c705df9aff44a3b1c28cd4b4b4fe658c8cf7422eab3a56dfc07d2ecafc2f6e1a719207b28026dce3649f00882ab8994cc858f4aaebf6d798ef9196df9d35363147a19356c0049aff475386125d654500259b177cc5756ed33d04b8c05b0e56293bab0fb3d10598bf869e3fe76d9937ad4aa39c54fa2075958700f815afbafffd1e91d5a391afdde12a7fdcdb702c5ccb915d15dca842310cb4a69ee8fb1c03b20f8ec6dd14bca96d0b3b90bb1a69ea6a7d8ac22776fe972851fdca08b1c63db1486726deceffbdeb97eee24a66530ae8f8cb57ade4b7a88968d040f94db0ad6aae44a83a742b37c238d8e9e5dae515aa6d8f6ba76b951ee611e25f67d9115097b36a8b1f36fcee5e79baf59dc43fe5f08b87bf09db597034f56116b2d2f7fa1c4987de1c9089c30190403842668f8ad44f604edf93b3bb662eba5ee876d2847c4a7784de2ee456dc4459e53fde8d75f68207f8666943868953d47306eacfd1573201739fc1a44851fac8b3dcdd258de9f1b12e18fb7880b520b4f49e1512c6745921c677db537b7645dc4260bded65fc6bcee29df8a6a060efe547dfdbace16eaf6876be87653381083935de7c8a79f663092c6c1af987f6a97e19ad99c78e40dda496a8cce76536d62687557a6ac6f9cbf43b0086102663175371398a982dd32f9e82d0cb7ba17942df461f38d97d66b31ba2b28eca3ea027a96f2b800b410c564fd2e41194d94a645846e"}, [0x5, 0x7fffffff, 0x80000000, 0x80000000, 0x7f, 0x4, 0x0, 0x9, 0x80000000, 0x4, 0x0, 0x8000, 0x480c, 0x1, 0x40, 0xfc, 0x4, 0x1000, 0x1, 0x3f, 0x0, 0xc5, 0x40000000000000, 0xffffffff7fffffff, 0x2, 0x8, 0x8000, 0xff, 0x7f, 0x3ff, 0x80000000, 0x69, 0x7f, 0x2, 0x1, 0x100, 0x7, 0x8, 0xb, 0x8, 0x8, 0x7fff, 0x3, 0x4e7f03c2, 0x8, 0x9, 0x7ff, 0x9, 0x80, 0x5, 0x93, 0x4690, 0x3a43000, 0x8, 0x8, 0x7, 0xfffffffffffffffa, 0x800, 0x1, 0x800, 0x2, 0x5, 0x8, 0x8]}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000b40)={{r0}, 0x0, 0xa, @inherit={0x78, &(0x7f0000000ac0)={0x1, 0x6, 0x3, 0x52, {0x21, 0x3, 0x0, 0x80000000, 0x400000000}, [0x4, 0x2, 0x7, 0x5, 0x9, 0x8]}}, @devid=r1}) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001b40)={"ebfd22000000000000000f00", 0x0, 0x0, {0xffffffff, 0x4}, {0x4bd1}, 0x3, [0x1, 0x9, 0x40, 0x1, 0x80000001, 0x9, 0x6, 0xa1, 0xfffffffffffffffe, 0x4, 0x8, 0x17b4, 0x401, 0x6, 0x6, 0x10000]}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001c40)={{r3}, r4, 0x0, @unused=[0x200, 0x80, 0x3348, 0x2], @subvolid=0x80000000}) (async) 00:58:37 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:37 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xf35c}}}}}, 0x20}}, 0x0) 00:58:37 executing program 3: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffc1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xbb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffc1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xbb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 00:58:37 executing program 5: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000180)={0x22, 0x1, 0x20, 0xa0, 0x19}, 0x6) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async, rerun: 32) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x8]}, 0x8) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0xa3, 0x1, 0x4a, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x40, 0x1}}) (async) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) (async) r2 = getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@acquire={0x130, 0x17, 0x20, 0x70bd29, 0x25dfdbff, {{@in=@loopback, 0x4d2, 0xff}, @in6=@mcast1, {@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e24, 0xa7f1, 0x4e21, 0x40, 0xa, 0xa0, 0x20, 0x67, r0, r1}, {{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x4e20, 0x7, 0x4e22, 0x0, 0xa, 0xc0, 0x80, 0x89, 0x0, r2}, {0x8, 0x40, 0x9, 0x4, 0x9, 0x401, 0x9, 0x2}, {0x2, 0x80, 0xffffffff, 0x8}, 0x1, 0x0, 0x2, 0x1, 0x2, 0x1}, 0x4, 0x380000, 0x401, 0x70bd2d}, [@replay_thresh={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, 0x0) (async) mkdirat$cgroup(r4, &(0x7f0000000140)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x1ff) 00:58:37 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x30000}}}}}, 0x20}}, 0x0) 00:58:37 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:37 executing program 3: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffc1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xbb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:37 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x34000}}}}}, 0x20}}, 0x0) 00:58:38 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:38 executing program 3: r0 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x58) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000005a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000059c0)={&(0x7f0000005a40)=ANY=[@ANYBLOB='0x0, 0x10001, 0x3, 0x9, 0xff, 0x8001, 0x55, @struct={0x0, 0x5}, 0x848, 0x6, [0x67, 0x3, 0x2, 0x2000000000, 0x1b6, 0xffffffffffffff81]}, {0x4, 0x2, 0x8}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{}, 0x0, 0x1c, @inherit={0x78, &(0x7f0000000080)={0x0, 0x6, 0x401, 0x800, {0x7, 0x9, 0x3, 0x8, 0x2}, [0x5, 0x2, 0x800, 0x3ff, 0x8, 0xfffffffffffffffc]}}, @devid=r1}) r2 = eventfd2(0x4, 0x0) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:58:38 executing program 4: r0 = eventfd2(0x4, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000080)={0x3, 0x8, @start={0x0, 0x1, "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", "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"}, [0x5, 0x7fffffff, 0x80000000, 0x80000000, 0x7f, 0x4, 0x0, 0x9, 0x80000000, 0x4, 0x0, 0x8000, 0x480c, 0x1, 0x40, 0xfc, 0x4, 0x1000, 0x1, 0x3f, 0x0, 0xc5, 0x40000000000000, 0xffffffff7fffffff, 0x2, 0x8, 0x8000, 0xff, 0x7f, 0x3ff, 0x80000000, 0x69, 0x7f, 0x2, 0x1, 0x100, 0x7, 0x8, 0xb, 0x8, 0x8, 0x7fff, 0x3, 0x4e7f03c2, 0x8, 0x9, 0x7ff, 0x9, 0x80, 0x5, 0x93, 0x4690, 0x3a43000, 0x8, 0x8, 0x7, 0xfffffffffffffffa, 0x800, 0x1, 0x800, 0x2, 0x5, 0x8, 0x8]}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000b40)={{r0}, 0x0, 0xa, @inherit={0x78, &(0x7f0000000ac0)={0x1, 0x6, 0x3, 0x52, {0x21, 0x3, 0x0, 0x80000000, 0x400000000}, [0x4, 0x2, 0x7, 0x5, 0x9, 0x8]}}, @devid=r1}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r3 = socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001b40)={"ebfd22000000000000000f00", 0x0, 0x0, {0xffffffff, 0x4}, {0x4bd1}, 0x3, [0x1, 0x9, 0x40, 0x1, 0x80000001, 0x9, 0x6, 0xa1, 0xfffffffffffffffe, 0x4, 0x8, 0x17b4, 0x401, 0x6, 0x6, 0x10000]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001c40)={{r3}, r4, 0x0, @unused=[0x200, 0x80, 0x3348, 0x2], @subvolid=0x80000000}) 00:58:38 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x400300}}}}}, 0x20}}, 0x0) 00:58:38 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={0x0, 0x7, 0x0, [0x5, 0x3, 0x7, 0x7, 0x7], [0x0, 0x2, 0x40, 0xc32, 0x2, 0x6, 0x1fa9, 0x7f, 0x3, 0xfffffffffffffffd, 0x7, 0x9, 0xfffffffffffffffd, 0x4d, 0x0, 0x4, 0x7f, 0x160, 0xfffffffffffffffe, 0xff, 0x2, 0x0, 0x7, 0xff, 0x3, 0x4, 0xfffffffffffffffd, 0x0, 0x7, 0xffff, 0x80, 0x3, 0x7, 0x0, 0x5, 0x1ff, 0x4, 0x1000, 0xf3f6, 0x9, 0x6, 0x401, 0x8, 0x8, 0x9, 0x8, 0x2, 0xffffffffffffffd6, 0xdc04, 0x1, 0x2, 0xbe, 0xfa4, 0x5, 0x6, 0x2, 0x7fff, 0x7, 0xaec, 0x20, 0x1, 0x3f, 0x9, 0x8, 0x9e76, 0xfff, 0x9, 0x5, 0x200, 0x7, 0x0, 0x10000, 0x80, 0x7, 0x1, 0x4cbb, 0x4, 0xe4b, 0x3ff000000000, 0x10001, 0x2, 0x9, 0x100000000, 0x0, 0x3, 0x1, 0xd2, 0x0, 0x800, 0xfffffffffffffffa, 0x6, 0x200, 0x3, 0x40, 0xfffffffffffffffd, 0x9, 0xb47, 0x0, 0x100, 0x8b3f, 0x8, 0x45, 0x2, 0x6, 0x1, 0xd37, 0x3, 0x4909c0dc, 0x7, 0x4, 0x8, 0x20, 0x7fff, 0x100000000, 0x6, 0x7, 0xeb3, 0x3, 0x8, 0x2, 0xac]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x1ff, [0x1, 0x1f], 0x7}, 0x10) 00:58:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001100)={0x10, 0x0, {0x0, @struct={0x80, 0x4}, 0x0, 0x2, 0x10001, 0x24e, 0x8001, 0x8, 0x4, @usage=0x3ff, 0x6000, 0xfffffffd, [0x2, 0x6, 0x3, 0x8, 0x4, 0x20]}, {0x80, @struct={0x5f, 0x9}, 0x0, 0xffffffffffffff81, 0x3, 0x7, 0x5, 0x80, 0x433, @usage=0x8001, 0x8, 0x4, [0x3, 0x1ff, 0x2669, 0x1, 0x7fff, 0x7]}, {0x41e5, @struct={0x48, 0x1f}, 0x0, 0x10001, 0x3, 0x9, 0xff, 0x8001, 0x55, @struct={0x0, 0x5}, 0x848, 0x6, [0x67, 0x3, 0x2, 0x2000000000, 0x1b6, 0xffffffffffffff81]}, {0x4, 0x2, 0x8}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{}, 0x0, 0x1c, @inherit={0x78, &(0x7f0000000080)={0x0, 0x6, 0x401, 0x800, {0x7, 0x9, 0x3, 0x8, 0x2}, [0x5, 0x2, 0x800, 0x3ff, 0x8, 0xfffffffffffffffc]}}, @devid=r1}) (async) r2 = eventfd2(0x4, 0x0) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:58:38 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:38 executing program 3: r0 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x58) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000005a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000059c0)={&(0x7f0000005a40)=ANY=[@ANYBLOB='0x0, &(0x7f0000000140)) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x42}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x40884) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) syz_io_uring_complete(r0) eventfd2(0x4, 0x0) 00:58:38 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={0x0, 0x7, 0x0, [0x5, 0x3, 0x7, 0x7, 0x7], [0x0, 0x2, 0x40, 0xc32, 0x2, 0x6, 0x1fa9, 0x7f, 0x3, 0xfffffffffffffffd, 0x7, 0x9, 0xfffffffffffffffd, 0x4d, 0x0, 0x4, 0x7f, 0x160, 0xfffffffffffffffe, 0xff, 0x2, 0x0, 0x7, 0xff, 0x3, 0x4, 0xfffffffffffffffd, 0x0, 0x7, 0xffff, 0x80, 0x3, 0x7, 0x0, 0x5, 0x1ff, 0x4, 0x1000, 0xf3f6, 0x9, 0x6, 0x401, 0x8, 0x8, 0x9, 0x8, 0x2, 0xffffffffffffffd6, 0xdc04, 0x1, 0x2, 0xbe, 0xfa4, 0x5, 0x6, 0x2, 0x7fff, 0x7, 0xaec, 0x20, 0x1, 0x3f, 0x9, 0x8, 0x9e76, 0xfff, 0x9, 0x5, 0x200, 0x7, 0x0, 0x10000, 0x80, 0x7, 0x1, 0x4cbb, 0x4, 0xe4b, 0x3ff000000000, 0x10001, 0x2, 0x9, 0x100000000, 0x0, 0x3, 0x1, 0xd2, 0x0, 0x800, 0xfffffffffffffffa, 0x6, 0x200, 0x3, 0x40, 0xfffffffffffffffd, 0x9, 0xb47, 0x0, 0x100, 0x8b3f, 0x8, 0x45, 0x2, 0x6, 0x1, 0xd37, 0x3, 0x4909c0dc, 0x7, 0x4, 0x8, 0x20, 0x7fff, 0x100000000, 0x6, 0x7, 0xeb3, 0x3, 0x8, 0x2, 0xac]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x1ff, [0x1, 0x1f], 0x7}, 0x10) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={0x0, 0x7, 0x0, [0x5, 0x3, 0x7, 0x7, 0x7], [0x0, 0x2, 0x40, 0xc32, 0x2, 0x6, 0x1fa9, 0x7f, 0x3, 0xfffffffffffffffd, 0x7, 0x9, 0xfffffffffffffffd, 0x4d, 0x0, 0x4, 0x7f, 0x160, 0xfffffffffffffffe, 0xff, 0x2, 0x0, 0x7, 0xff, 0x3, 0x4, 0xfffffffffffffffd, 0x0, 0x7, 0xffff, 0x80, 0x3, 0x7, 0x0, 0x5, 0x1ff, 0x4, 0x1000, 0xf3f6, 0x9, 0x6, 0x401, 0x8, 0x8, 0x9, 0x8, 0x2, 0xffffffffffffffd6, 0xdc04, 0x1, 0x2, 0xbe, 0xfa4, 0x5, 0x6, 0x2, 0x7fff, 0x7, 0xaec, 0x20, 0x1, 0x3f, 0x9, 0x8, 0x9e76, 0xfff, 0x9, 0x5, 0x200, 0x7, 0x0, 0x10000, 0x80, 0x7, 0x1, 0x4cbb, 0x4, 0xe4b, 0x3ff000000000, 0x10001, 0x2, 0x9, 0x100000000, 0x0, 0x3, 0x1, 0xd2, 0x0, 0x800, 0xfffffffffffffffa, 0x6, 0x200, 0x3, 0x40, 0xfffffffffffffffd, 0x9, 0xb47, 0x0, 0x100, 0x8b3f, 0x8, 0x45, 0x2, 0x6, 0x1, 0xd37, 0x3, 0x4909c0dc, 0x7, 0x4, 0x8, 0x20, 0x7fff, 0x100000000, 0x6, 0x7, 0xeb3, 0x3, 0x8, 0x2, 0xac]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x1ff, [0x1, 0x1f], 0x7}, 0x10) (async) 00:58:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001100)={0x10, 0x0, {0x0, @struct={0x80, 0x4}, 0x0, 0x2, 0x10001, 0x24e, 0x8001, 0x8, 0x4, @usage=0x3ff, 0x6000, 0xfffffffd, [0x2, 0x6, 0x3, 0x8, 0x4, 0x20]}, {0x80, @struct={0x5f, 0x9}, 0x0, 0xffffffffffffff81, 0x3, 0x7, 0x5, 0x80, 0x433, @usage=0x8001, 0x8, 0x4, [0x3, 0x1ff, 0x2669, 0x1, 0x7fff, 0x7]}, {0x41e5, @struct={0x48, 0x1f}, 0x0, 0x10001, 0x3, 0x9, 0xff, 0x8001, 0x55, @struct={0x0, 0x5}, 0x848, 0x6, [0x67, 0x3, 0x2, 0x2000000000, 0x1b6, 0xffffffffffffff81]}, {0x4, 0x2, 0x8}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{}, 0x0, 0x1c, @inherit={0x78, &(0x7f0000000080)={0x0, 0x6, 0x401, 0x800, {0x7, 0x9, 0x3, 0x8, 0x2}, [0x5, 0x2, 0x800, 0x3ff, 0x8, 0xfffffffffffffffc]}}, @devid=r1}) r2 = eventfd2(0x4, 0x0) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:58:38 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2000000}}}}}, 0x20}}, 0x0) 00:58:38 executing program 3: r0 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x58) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000005a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000059c0)={&(0x7f0000005a40)=ANY=[@ANYBLOB='0x0, &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x42}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x40884) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) (async) syz_io_uring_complete(r0) (async) eventfd2(0x4, 0x0) 00:58:38 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:38 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) socketpair(0x2, 0xa, 0x10001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) 00:58:38 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={0x0, 0x7, 0x0, [0x5, 0x3, 0x7, 0x7, 0x7], [0x0, 0x2, 0x40, 0xc32, 0x2, 0x6, 0x1fa9, 0x7f, 0x3, 0xfffffffffffffffd, 0x7, 0x9, 0xfffffffffffffffd, 0x4d, 0x0, 0x4, 0x7f, 0x160, 0xfffffffffffffffe, 0xff, 0x2, 0x0, 0x7, 0xff, 0x3, 0x4, 0xfffffffffffffffd, 0x0, 0x7, 0xffff, 0x80, 0x3, 0x7, 0x0, 0x5, 0x1ff, 0x4, 0x1000, 0xf3f6, 0x9, 0x6, 0x401, 0x8, 0x8, 0x9, 0x8, 0x2, 0xffffffffffffffd6, 0xdc04, 0x1, 0x2, 0xbe, 0xfa4, 0x5, 0x6, 0x2, 0x7fff, 0x7, 0xaec, 0x20, 0x1, 0x3f, 0x9, 0x8, 0x9e76, 0xfff, 0x9, 0x5, 0x200, 0x7, 0x0, 0x10000, 0x80, 0x7, 0x1, 0x4cbb, 0x4, 0xe4b, 0x3ff000000000, 0x10001, 0x2, 0x9, 0x100000000, 0x0, 0x3, 0x1, 0xd2, 0x0, 0x800, 0xfffffffffffffffa, 0x6, 0x200, 0x3, 0x40, 0xfffffffffffffffd, 0x9, 0xb47, 0x0, 0x100, 0x8b3f, 0x8, 0x45, 0x2, 0x6, 0x1, 0xd37, 0x3, 0x4909c0dc, 0x7, 0x4, 0x8, 0x20, 0x7fff, 0x100000000, 0x6, 0x7, 0xeb3, 0x3, 0x8, 0x2, 0xac]}) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x1ff, [0x1, 0x1f], 0x7}, 0x10) 00:58:38 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5, 0x0, 0x7, 0x76, 0x0, 0x800, 0x804c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6339, 0x2, @perf_config_ext={0x200, 0x4}, 0x201, 0x5, 0x100, 0x5, 0x2, 0xffff8001, 0x1, 0x0, 0x9, 0x0, 0x1000}, 0x0, 0x10, r0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x20, 0x3f, 0x0, 0x4b, 0x0, 0x7, 0x18a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0xffffffffffff0001, 0x3}, 0x48c09, 0x0, 0x5, 0x5, 0x2, 0x3fd, 0x5, 0x0, 0x8, 0x0, 0x400}, 0xffffffffffffffff, 0x3, r1, 0x8) 00:58:38 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:38 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async, rerun: 32) socketpair(0x2, 0xa, 0x10001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) 00:58:38 executing program 4: syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x42}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x40884) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) (async) syz_io_uring_complete(r0) (async) eventfd2(0x4, 0x0) 00:58:38 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x3000000}}}}}, 0x20}}, 0x0) 00:58:38 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5, 0x0, 0x7, 0x76, 0x0, 0x800, 0x804c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6339, 0x2, @perf_config_ext={0x200, 0x4}, 0x201, 0x5, 0x100, 0x5, 0x2, 0xffff8001, 0x1, 0x0, 0x9, 0x0, 0x1000}, 0x0, 0x10, r0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x20, 0x3f, 0x0, 0x4b, 0x0, 0x7, 0x18a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0xffffffffffff0001, 0x3}, 0x48c09, 0x0, 0x5, 0x5, 0x2, 0x3fd, 0x5, 0x0, 0x8, 0x0, 0x400}, 0xffffffffffffffff, 0x3, r1, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5, 0x0, 0x7, 0x76, 0x0, 0x800, 0x804c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6339, 0x2, @perf_config_ext={0x200, 0x4}, 0x201, 0x5, 0x100, 0x5, 0x2, 0xffff8001, 0x1, 0x0, 0x9, 0x0, 0x1000}, 0x0, 0x10, r0, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x20, 0x3f, 0x0, 0x4b, 0x0, 0x7, 0x18a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0xffffffffffff0001, 0x3}, 0x48c09, 0x0, 0x5, 0x5, 0x2, 0x3fd, 0x5, 0x0, 0x8, 0x0, 0x400}, 0xffffffffffffffff, 0x3, r1, 0x8) (async) 00:58:38 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:38 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5, 0x0, 0x7, 0x76, 0x0, 0x800, 0x804c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6339, 0x2, @perf_config_ext={0x200, 0x4}, 0x201, 0x5, 0x100, 0x5, 0x2, 0xffff8001, 0x1, 0x0, 0x9, 0x0, 0x1000}, 0x0, 0x10, r0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x20, 0x3f, 0x0, 0x4b, 0x0, 0x7, 0x18a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0xffffffffffff0001, 0x3}, 0x48c09, 0x0, 0x5, 0x5, 0x2, 0x3fd, 0x5, 0x0, 0x8, 0x0, 0x400}, 0xffffffffffffffff, 0x3, r1, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5, 0x0, 0x7, 0x76, 0x0, 0x800, 0x804c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6339, 0x2, @perf_config_ext={0x200, 0x4}, 0x201, 0x5, 0x100, 0x5, 0x2, 0xffff8001, 0x1, 0x0, 0x9, 0x0, 0x1000}, 0x0, 0x10, r0, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x20, 0x3f, 0x0, 0x4b, 0x0, 0x7, 0x18a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0xffffffffffff0001, 0x3}, 0x48c09, 0x0, 0x5, 0x5, 0x2, 0x3fd, 0x5, 0x0, 0x8, 0x0, 0x400}, 0xffffffffffffffff, 0x3, r1, 0x8) (async) 00:58:38 executing program 4: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r0, 0x1) 00:58:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:38 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x4000000}}}}}, 0x20}}, 0x0) 00:58:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x5, "71b44f", 0x1, 0x9}) 00:58:38 executing program 5: r0 = syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r1 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x58) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(r0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xa9, 0x2, 0x6f, @mcast2, @loopback, 0x8, 0x17, 0x2}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x94}}, 0x11) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r10 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r10], 0x1}, 0x58) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/127, 0x7f, &(0x7f0000000140)=""/116, &(0x7f0000000240)=[r1, r0, r0, r2, r3, r9, r10], 0x7, {r11}}, 0x58) r12 = syz_io_uring_complete(0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r12, 0x111, 0x5, 0x8, 0x4) 00:58:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:39 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) socketpair(0x2, 0xa, 0x10001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) socketpair(0x2, 0xa, 0x10001, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) (async) 00:58:39 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x5000000}}}}}, 0x20}}, 0x0) 00:58:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x7e}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x5, "71b44f", 0x1, 0x9}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x5, "71b44f", 0x1, 0x9}) (async) 00:58:39 executing program 4: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r0, 0x1) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r0, 0x1) (async) 00:58:39 executing program 5: r0 = syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r1 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x58) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(r0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xa9, 0x2, 0x6f, @mcast2, @loopback, 0x8, 0x17, 0x2}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x94}}, 0x11) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r10 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r10], 0x1}, 0x58) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/127, 0x7f, &(0x7f0000000140)=""/116, &(0x7f0000000240)=[r1, r0, r0, r2, r3, r9, r10], 0x7, {r11}}, 0x58) r12 = syz_io_uring_complete(0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r12, 0x111, 0x5, 0x8, 0x4) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) gettid() (async) syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x58) (async) getpgrp(0xffffffffffffffff) (async) getpgrp(r0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xa9, 0x2, 0x6f, @mcast2, @loopback, 0x8, 0x17, 0x2}}) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x94}}, 0x11) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)) (async) gettid() (async) syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r10], 0x1}, 0x58) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone3(&(0x7f00000002c0)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/127, 0x7f, &(0x7f0000000140)=""/116, &(0x7f0000000240)=[r1, r0, r0, r2, r3, r9, r10], 0x7, {r11}}, 0x58) (async) syz_io_uring_complete(0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r12, 0x111, 0x5, 0x8, 0x4) (async) 00:58:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1100, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = eventfd2(0x7, 0x800) read$eventfd(r1, &(0x7f0000000100), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000140), 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) ioctl$sock_bt_hci(r2, 0x7, &(0x7f0000000140)="965208cf23ed66d7c654f59a91f7573043048723387774fe45f688690bb442fccbdff65d53e8b47c4abf1800cfa2c06d886a3e24b102abfcbb4f7af0581e90830ae4b37742c4fbd0546dcd950b52a366a1e976f8e2c908091414744fbb73958de2f4a132ee5dfdbc031e192dad72ac5aa6089140926b8f3cfd8d172da5c7881f0eebd4c53d281b05fc0c") 00:58:39 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x6000000}}}}}, 0x20}}, 0x0) 00:58:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x5, "71b44f", 0x1, 0x9}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x5, "71b44f", 0x1, 0x9}) (async) 00:58:39 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x7000000}}}}}, 0x20}}, 0x0) 00:58:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x40840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:58:39 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x8000000}}}}}, 0x20}}, 0x0) 00:58:40 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 00:58:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000300)={0x11, 0x5, {0x9, @usage=0x101, 0x0, 0x3731, 0x4, 0x2, 0x101, 0x90e8, 0x1, @usage=0x3, 0x10000, 0x0, [0x6, 0x0, 0x1d3e2, 0x8, 0x8, 0x9]}, {0x1, @struct={0x2, 0x2}, 0x0, 0x8, 0x8, 0x2, 0x8, 0x1fffc00000000, 0x418, @struct={0x0, 0x4}, 0x4, 0x10001, [0x40, 0x1, 0x7, 0x9f, 0x6, 0x5]}, {0x6, @usage=0x3, 0x0, 0xfff, 0x9, 0x1ff, 0x8, 0x59d, 0x31, @struct={0x2, 0x9}, 0x4, 0x100, [0x0, 0xccf, 0x0, 0x100, 0x80, 0x5e3]}, {0xffffffffffffff01, 0x9, 0x80}}) syz_io_uring_setup(0x2c33, &(0x7f00000000c0)={0x0, 0xaafd, 0x20, 0x2, 0x276}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2b, 0x40, 0x5, 0x9, 0x29, @loopback, @mcast2, 0x7800, 0x7, 0x8, 0x5}}) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0xc00, 0x1}, 0xf5a) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f00000002c0), 0x0, 0x4) 00:58:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x9000000}}}}}, 0x20}}, 0x0) 00:58:40 executing program 5: r0 = syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r1 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x58) (async) r2 = getpgrp(0xffffffffffffffff) (async, rerun: 32) r3 = getpgrp(r0) (async, rerun: 32) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xa9, 0x2, 0x6f, @mcast2, @loopback, 0x8, 0x17, 0x2}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x94}}, 0x11) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r10 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r10], 0x1}, 0x58) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/127, 0x7f, &(0x7f0000000140)=""/116, &(0x7f0000000240)=[r1, r0, r0, r2, r3, r9, r10], 0x7, {r11}}, 0x58) (async) r12 = syz_io_uring_complete(0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r12, 0x111, 0x5, 0x8, 0x4) 00:58:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:40 executing program 4: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r1 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r0, 0x1) 00:58:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xf000000}}}}}, 0x20}}, 0x0) 00:58:40 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 00:58:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async) syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000300)={0x11, 0x5, {0x9, @usage=0x101, 0x0, 0x3731, 0x4, 0x2, 0x101, 0x90e8, 0x1, @usage=0x3, 0x10000, 0x0, [0x6, 0x0, 0x1d3e2, 0x8, 0x8, 0x9]}, {0x1, @struct={0x2, 0x2}, 0x0, 0x8, 0x8, 0x2, 0x8, 0x1fffc00000000, 0x418, @struct={0x0, 0x4}, 0x4, 0x10001, [0x40, 0x1, 0x7, 0x9f, 0x6, 0x5]}, {0x6, @usage=0x3, 0x0, 0xfff, 0x9, 0x1ff, 0x8, 0x59d, 0x31, @struct={0x2, 0x9}, 0x4, 0x100, [0x0, 0xccf, 0x0, 0x100, 0x80, 0x5e3]}, {0xffffffffffffff01, 0x9, 0x80}}) (async) syz_io_uring_setup(0x2c33, &(0x7f00000000c0)={0x0, 0xaafd, 0x20, 0x2, 0x276}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2b, 0x40, 0x5, 0x9, 0x29, @loopback, @mcast2, 0x7800, 0x7, 0x8, 0x5}}) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0xc00, 0x1}, 0xf5a) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f00000002c0), 0x0, 0x4) 00:58:40 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) [ 2493.566519][T27126] netlink: 'syz-executor.2': attribute type 309 has an invalid length. 00:58:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x60000000}}}}}, 0x20}}, 0x0) 00:58:40 executing program 5: syz_io_uring_complete(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) syz_clone3(&(0x7f0000000380)={0x218150480, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000400)={0x0, 0x905d, 0x7, 0x1}) 00:58:40 executing program 4: r0 = eventfd2(0x4, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000000c0)={0x1, 0xae, @status={[0x3, 0x5, 0xc06d, 0xc, 0x7, 0xfffffffffffffffb]}, [0x1, 0x4, 0x7ff, 0x5, 0x3, 0x6, 0x4, 0x8000, 0x8, 0x46, 0x2, 0x5f3, 0xfffffffeffffffff, 0x0, 0xc4, 0x5, 0x418d, 0x3, 0x8001, 0x2e8b, 0x9, 0x510, 0x6, 0x9, 0x2, 0x1, 0x5, 0x9, 0x3f, 0x10001, 0x100, 0xfffffffffffffffc, 0x10, 0x7f, 0x100000001, 0x0, 0x7, 0x9, 0x101, 0xfff, 0x539, 0x3, 0x1, 0x3, 0x7, 0x8, 0x5, 0x1, 0xffffffffffff0000, 0x721a30ea, 0x401, 0xa608, 0x40, 0x6, 0x3f, 0x800, 0xffffffffffffffc0, 0xb82, 0x3f, 0x7f8b, 0x1f, 0x8, 0x4, 0x8]}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r0, 0x1) 00:58:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x9effffff}}}}}, 0x20}}, 0x0) 00:58:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xefffffff}}}}}, 0x20}}, 0x0) 00:58:40 executing program 4: r0 = eventfd2(0x4, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000000c0)={0x1, 0xae, @status={[0x3, 0x5, 0xc06d, 0xc, 0x7, 0xfffffffffffffffb]}, [0x1, 0x4, 0x7ff, 0x5, 0x3, 0x6, 0x4, 0x8000, 0x8, 0x46, 0x2, 0x5f3, 0xfffffffeffffffff, 0x0, 0xc4, 0x5, 0x418d, 0x3, 0x8001, 0x2e8b, 0x9, 0x510, 0x6, 0x9, 0x2, 0x1, 0x5, 0x9, 0x3f, 0x10001, 0x100, 0xfffffffffffffffc, 0x10, 0x7f, 0x100000001, 0x0, 0x7, 0x9, 0x101, 0xfff, 0x539, 0x3, 0x1, 0x3, 0x7, 0x8, 0x5, 0x1, 0xffffffffffff0000, 0x721a30ea, 0x401, 0xa608, 0x40, 0x6, 0x3f, 0x800, 0xffffffffffffffc0, 0xb82, 0x3f, 0x7f8b, 0x1f, 0x8, 0x4, 0x8]}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r0, 0x1) 00:58:40 executing program 5: syz_io_uring_complete(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) syz_clone3(&(0x7f0000000380)={0x218150480, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000400)={0x0, 0x905d, 0x7, 0x1}) syz_io_uring_complete(0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x218150480, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000000), 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000400)={0x0, 0x905d, 0x7, 0x1}) (async) 00:58:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xf0ffffff}}}}}, 0x20}}, 0x0) 00:58:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) [ 2493.644736][T27148] netlink: 'syz-executor.2': attribute type 309 has an invalid length. 00:58:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xf35c0000}}}}}, 0x20}}, 0x0) 00:58:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000300)={0x11, 0x5, {0x9, @usage=0x101, 0x0, 0x3731, 0x4, 0x2, 0x101, 0x90e8, 0x1, @usage=0x3, 0x10000, 0x0, [0x6, 0x0, 0x1d3e2, 0x8, 0x8, 0x9]}, {0x1, @struct={0x2, 0x2}, 0x0, 0x8, 0x8, 0x2, 0x8, 0x1fffc00000000, 0x418, @struct={0x0, 0x4}, 0x4, 0x10001, [0x40, 0x1, 0x7, 0x9f, 0x6, 0x5]}, {0x6, @usage=0x3, 0x0, 0xfff, 0x9, 0x1ff, 0x8, 0x59d, 0x31, @struct={0x2, 0x9}, 0x4, 0x100, [0x0, 0xccf, 0x0, 0x100, 0x80, 0x5e3]}, {0xffffffffffffff01, 0x9, 0x80}}) syz_io_uring_setup(0x2c33, &(0x7f00000000c0)={0x0, 0xaafd, 0x20, 0x2, 0x276}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2b, 0x40, 0x5, 0x9, 0x29, @loopback, @mcast2, 0x7800, 0x7, 0x8, 0x5}}) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0xc00, 0x1}, 0xf5a) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f00000002c0), 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async) syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000300)={0x11, 0x5, {0x9, @usage=0x101, 0x0, 0x3731, 0x4, 0x2, 0x101, 0x90e8, 0x1, @usage=0x3, 0x10000, 0x0, [0x6, 0x0, 0x1d3e2, 0x8, 0x8, 0x9]}, {0x1, @struct={0x2, 0x2}, 0x0, 0x8, 0x8, 0x2, 0x8, 0x1fffc00000000, 0x418, @struct={0x0, 0x4}, 0x4, 0x10001, [0x40, 0x1, 0x7, 0x9f, 0x6, 0x5]}, {0x6, @usage=0x3, 0x0, 0xfff, 0x9, 0x1ff, 0x8, 0x59d, 0x31, @struct={0x2, 0x9}, 0x4, 0x100, [0x0, 0xccf, 0x0, 0x100, 0x80, 0x5e3]}, {0xffffffffffffff01, 0x9, 0x80}}) (async) syz_io_uring_setup(0x2c33, &(0x7f00000000c0)={0x0, 0xaafd, 0x20, 0x2, 0x276}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2b, 0x40, 0x5, 0x9, 0x29, @loopback, @mcast2, 0x7800, 0x7, 0x8, 0x5}}) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0xc00, 0x1}, 0xf5a) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f00000002c0), 0x0, 0x4) (async) [ 2493.708590][T27180] netlink: 'syz-executor.2': attribute type 309 has an invalid length. 00:58:41 executing program 0: eventfd2(0x4, 0x0) 00:58:41 executing program 4: r0 = eventfd2(0x4, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000000c0)={0x1, 0xae, @status={[0x3, 0x5, 0xc06d, 0xc, 0x7, 0xfffffffffffffffb]}, [0x1, 0x4, 0x7ff, 0x5, 0x3, 0x6, 0x4, 0x8000, 0x8, 0x46, 0x2, 0x5f3, 0xfffffffeffffffff, 0x0, 0xc4, 0x5, 0x418d, 0x3, 0x8001, 0x2e8b, 0x9, 0x510, 0x6, 0x9, 0x2, 0x1, 0x5, 0x9, 0x3f, 0x10001, 0x100, 0xfffffffffffffffc, 0x10, 0x7f, 0x100000001, 0x0, 0x7, 0x9, 0x101, 0xfff, 0x539, 0x3, 0x1, 0x3, 0x7, 0x8, 0x5, 0x1, 0xffffffffffff0000, 0x721a30ea, 0x401, 0xa608, 0x40, 0x6, 0x3f, 0x800, 0xffffffffffffffc0, 0xb82, 0x3f, 0x7f8b, 0x1f, 0x8, 0x4, 0x8]}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r0, 0x1) eventfd2(0x4, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000000c0)={0x1, 0xae, @status={[0x3, 0x5, 0xc06d, 0xc, 0x7, 0xfffffffffffffffb]}, [0x1, 0x4, 0x7ff, 0x5, 0x3, 0x6, 0x4, 0x8000, 0x8, 0x46, 0x2, 0x5f3, 0xfffffffeffffffff, 0x0, 0xc4, 0x5, 0x418d, 0x3, 0x8001, 0x2e8b, 0x9, 0x510, 0x6, 0x9, 0x2, 0x1, 0x5, 0x9, 0x3f, 0x10001, 0x100, 0xfffffffffffffffc, 0x10, 0x7f, 0x100000001, 0x0, 0x7, 0x9, 0x101, 0xfff, 0x539, 0x3, 0x1, 0x3, 0x7, 0x8, 0x5, 0x1, 0xffffffffffff0000, 0x721a30ea, 0x401, 0xa608, 0x40, 0x6, 0x3f, 0x800, 0xffffffffffffffc0, 0xb82, 0x3f, 0x7f8b, 0x1f, 0x8, 0x4, 0x8]}) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r0, 0x1) (async) 00:58:41 executing program 5: syz_io_uring_complete(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) syz_clone3(&(0x7f0000000380)={0x218150480, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000400)={0x0, 0x905d, 0x7, 0x1}) syz_io_uring_complete(0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x218150480, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000000), 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000400)={0x0, 0x905d, 0x7, 0x1}) (async) 00:58:41 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xffffff7f}}}}}, 0x20}}, 0x0) 00:58:41 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x4, 0x8, 0x87, 0x0, 0x7f, 0x28240, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x200, 0x5, 0xe4b, 0x2, 0x4, 0x7f, 0x7, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='/]\x00') 00:58:41 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xffffff9e}}}}}, 0x20}}, 0x0) 00:58:41 executing program 5: syz_clone3(&(0x7f0000000000)={0x20000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f00000011c0)={0x100800800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x7fffffff}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/24, &(0x7f0000001180)}, 0x58) 00:58:41 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x4, 0x8, 0x87, 0x0, 0x7f, 0x28240, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x200, 0x5, 0xe4b, 0x2, 0x4, 0x7f, 0x7, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='/]\x00') 00:58:41 executing program 0: eventfd2(0x4, 0x0) 00:58:41 executing program 4: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x4, 0x6283}) 00:58:41 executing program 4: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x4, 0x6283}) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x4, 0x6283}) (async) 00:58:41 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:41 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xffffffef}}}}}, 0x20}}, 0x0) 00:58:41 executing program 0: eventfd2(0x4, 0x0) eventfd2(0x4, 0x0) (async) 00:58:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x4, 0x8, 0x87, 0x0, 0x7f, 0x28240, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x200, 0x5, 0xe4b, 0x2, 0x4, 0x7f, 0x7, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='/]\x00') perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x4, 0x8, 0x87, 0x0, 0x7f, 0x28240, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x200, 0x5, 0xe4b, 0x2, 0x4, 0x7f, 0x7, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='/]\x00') (async) 00:58:41 executing program 5: syz_clone3(&(0x7f0000000000)={0x20000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f00000011c0)={0x100800800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x7fffffff}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/24, &(0x7f0000001180)}, 0x58) 00:58:41 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xfffffff0}}}}}, 0x20}}, 0x0) 00:58:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:41 executing program 0: r0 = eventfd2(0x3, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:41 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:41 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 00:58:42 executing program 4: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x4, 0x6283}) 00:58:42 executing program 5: syz_clone3(&(0x7f0000000000)={0x20000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f00000011c0)={0x100800800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x7fffffff}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/24, &(0x7f0000001180)}, 0x58) 00:58:42 executing program 0: r0 = eventfd2(0x3, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:42 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 00:58:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:42 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x20}}, 0x0) 00:58:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:42 executing program 0: r0 = eventfd2(0x3, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x3, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:42 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000040)=0x7, 0x4) 00:58:42 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) (async) 00:58:42 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x3}}}}}, 0x20}}, 0x0) 00:58:42 executing program 4: r0 = eventfd2(0x40004, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x8000, 0x8) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='-\x00', 0x0, r1) 00:58:42 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x4}}}}}, 0x20}}, 0x0) 00:58:42 executing program 4: r0 = eventfd2(0x40004, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x8000, 0x8) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='-\x00', 0x0, r1) 00:58:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:42 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000040)=0x7, 0x4) 00:58:42 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x8, 0x3f, 0x4, @local, @mcast2, 0x8, 0x40, 0x2, 0xdc}}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000000200000000000000000000f85cbf4cfcde224400b2b4c10000be1c59cc5897ddfe8e581b60b5e49309c589a3e05e38eb87f76becdafa215bec88d815834f1852cc344e238eb903064e0faa9cffd6ce55c9b3b9b3d239c29c55a8b5f2022046f1248dfe73464a2cd166fac7d0016a0f"]) 00:58:42 executing program 4: r0 = eventfd2(0x40004, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x8000, 0x8) (async) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='-\x00', 0x0, r1) 00:58:42 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x5}}}}}, 0x20}}, 0x0) 00:58:42 executing program 0: r0 = eventfd2(0x10009, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:42 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x6}}}}}, 0x20}}, 0x0) 00:58:42 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x8, 0x3f, 0x4, @local, @mcast2, 0x8, 0x40, 0x2, 0xdc}}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) (async) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000000200000000000000000000f85cbf4cfcde224400b2b4c10000be1c59cc5897ddfe8e581b60b5e49309c589a3e05e38eb87f76becdafa215bec88d815834f1852cc344e238eb903064e0faa9cffd6ce55c9b3b9b3d239c29c55a8b5f2022046f1248dfe73464a2cd166fac7d0016a0f"]) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000040)=0x7, 0x4) 00:58:43 executing program 0: r0 = eventfd2(0x10009, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x10009, 0x80800) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x20}}, 0x0) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x8}}}}}, 0x20}}, 0x0) 00:58:43 executing program 0: r0 = eventfd2(0x10009, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x8, 0x3f, 0x4, @local, @mcast2, 0x8, 0x40, 0x2, 0xdc}}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) (async) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000000200000000000000000000f85cbf4cfcde224400b2b4c10000be1c59cc5897ddfe8e581b60b5e49309c589a3e05e38eb87f76becdafa215bec88d815834f1852cc344e238eb903064e0faa9cffd6ce55c9b3b9b3d239c29c55a8b5f2022046f1248dfe73464a2cd166fac7d0016a0f"]) 00:58:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:43 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40108}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4009040) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:43 executing program 0: r0 = eventfd2(0x4008, 0x801) read$eventfd(r0, &(0x7f0000000040), 0x3) r1 = eventfd2(0x20, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) io_uring_setup(0x5b0f, &(0x7f00000000c0)={0x0, 0x89f7, 0x1, 0x1, 0x3c1, 0x0, r2}) write$eventfd(r1, &(0x7f0000000000)=0xd3, 0x8) 00:58:43 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40108}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4009040) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x9}}}}}, 0x20}}, 0x0) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xf}}}}}, 0x20}}, 0x0) 00:58:43 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40108}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4009040) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40108}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4009040) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) (async) 00:58:43 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = syz_io_uring_complete(0x0) openat$cgroup_pressure(r2, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000180), 0x10}, 0x1000, 0x4800000000000, 0x5, 0x1, 0x3, 0x60, 0x8000, 0x0, 0x3ff}, 0xffffffffffffffff, 0xd, r0, 0x2) perf_event_open$cgroup(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x47, 0x0, 0x27, 0x0, 0xa23, 0x18020, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0xb1a614f4ce82eefe, @perf_config_ext={0x10001, 0x6}, 0x81, 0xfffffffffffffff7, 0x3, 0x5, 0xbc, 0x2, 0x2, 0x0, 0xda, 0x0, 0x4}, r1, 0xb, r3, 0x967a5661d57e1bf6) 00:58:43 executing program 0: r0 = eventfd2(0x4008, 0x801) read$eventfd(r0, &(0x7f0000000040), 0x3) (async) r1 = eventfd2(0x20, 0x1) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r2 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) (async) io_uring_setup(0x5b0f, &(0x7f00000000c0)={0x0, 0x89f7, 0x1, 0x1, 0x3c1, 0x0, r2}) write$eventfd(r1, &(0x7f0000000000)=0xd3, 0x8) 00:58:43 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r2 = syz_io_uring_complete(0x0) openat$cgroup_pressure(r2, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) (async) r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000180), 0x10}, 0x1000, 0x4800000000000, 0x5, 0x1, 0x3, 0x60, 0x8000, 0x0, 0x3ff}, 0xffffffffffffffff, 0xd, r0, 0x2) perf_event_open$cgroup(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x47, 0x0, 0x27, 0x0, 0xa23, 0x18020, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0xb1a614f4ce82eefe, @perf_config_ext={0x10001, 0x6}, 0x81, 0xfffffffffffffff7, 0x3, 0x5, 0xbc, 0x2, 0x2, 0x0, 0xda, 0x0, 0x4}, r1, 0xb, r3, 0x967a5661d57e1bf6) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x60}}}}}, 0x20}}, 0x0) 00:58:43 executing program 0: r0 = eventfd2(0x4008, 0x801) read$eventfd(r0, &(0x7f0000000040), 0x3) (async) r1 = eventfd2(0x20, 0x1) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) (async, rerun: 64) io_uring_setup(0x5b0f, &(0x7f00000000c0)={0x0, 0x89f7, 0x1, 0x1, 0x3c1, 0x0, r2}) (async, rerun: 64) write$eventfd(r1, &(0x7f0000000000)=0xd3, 0x8) 00:58:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = syz_io_uring_complete(0x0) openat$cgroup_pressure(r2, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000180), 0x10}, 0x1000, 0x4800000000000, 0x5, 0x1, 0x3, 0x60, 0x8000, 0x0, 0x3ff}, 0xffffffffffffffff, 0xd, r0, 0x2) perf_event_open$cgroup(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x47, 0x0, 0x27, 0x0, 0xa23, 0x18020, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0xb1a614f4ce82eefe, @perf_config_ext={0x10001, 0x6}, 0x81, 0xfffffffffffffff7, 0x3, 0x5, 0xbc, 0x2, 0x2, 0x0, 0xda, 0x0, 0x4}, r1, 0xb, r3, 0x967a5661d57e1bf6) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) (async) syz_io_uring_complete(0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) (async) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000180), 0x10}, 0x1000, 0x4800000000000, 0x5, 0x1, 0x3, 0x60, 0x8000, 0x0, 0x3ff}, 0xffffffffffffffff, 0xd, r0, 0x2) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x47, 0x0, 0x27, 0x0, 0xa23, 0x18020, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0xb1a614f4ce82eefe, @perf_config_ext={0x10001, 0x6}, 0x81, 0xfffffffffffffff7, 0x3, 0x5, 0xbc, 0x2, 0x2, 0x0, 0xda, 0x0, 0x4}, r1, 0xb, r3, 0x967a5661d57e1bf6) (async) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x300}}}}}, 0x20}}, 0x0) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000045c55c49cafaaea416d2ac14b1671cc50d53f3dbca92c2bb521e61a5ec6294203f49f6bda9f6c118d556ed716113a22fcc42623ef6a80ee811ad6b069590310d1888aafd4dea1a9c142dfa1a635ecf7078", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x1) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 00:58:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x84410, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xd}, 0x0, 0x7c3, 0x40000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='-(/\x00', &(0x7f00000000c0)='-)$\x00', 0x0) 00:58:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x500}}}}}, 0x20}}, 0x0) 00:58:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x84410, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xd}, 0x0, 0x7c3, 0x40000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='-(/\x00', &(0x7f00000000c0)='-)$\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x84410, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xd}, 0x0, 0x7c3, 0x40000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='-(/\x00', &(0x7f00000000c0)='-)$\x00', 0x0) (async) 00:58:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 0: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800008c", @ANYRESDEC=0x0, @ANYBLOB="000128bd7000fedbdf25300000000c009900070000006f000000060036003200000006003600200000000600560005000000019c97fe3a5b39f33daf26680fa3d8e64e477ff22b4f6001c9de0f888b9b63833ca4"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000888) r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000045c55c49cafaaea416d2ac14b1671cc50d53f3dbca92c2bb521e61a5ec6294203f49f6bda9f6c118d556ed716113a22fcc42623ef6a80ee811ad6b069590310d1888aafd4dea1a9c142dfa1a635ecf7078", @ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf1400000708000800ff0700007c5f7cf3d398260a5054f9b9dcf1ed9dcb1f991b053ec61e483cc3f338a967e300008784340643a893f8a2517933e1b0f3d17fdbfc34f01e66337023c95ef12ee0ec1d96944bb99c15f3457eb23b14fce2d4ce63f2c310d850911725f7f8b3fcc1892f493241d6848afe2f29dd47dd1399ea25ea52dc41ee63cbfd5231c2b0aaefe2f878a59c3c2d684f3e934b15dd4f2fed8f60ab465e6c8e555970b62e8e4398e39e55033edf913fd3a8a02fe5ac858f8ac7f6ac14842c0e00160dd06ff86b763204c98f8c4242f29d79ee8ff006f88400624ddde978341fe0142604bc4d0d7c33af1f4466c3bfe6bea4a968363e4e0bc27b0564df08ce34d962818b86c8a633fc27bfcc8221e8788b1f9132c9b2bf0074a0729c8acc4ec5e357840346ff3d6f28af5d87c3c79a0f3eab96a22ba6901d03ac1f598ec9db4a268df31551fc157eb802b5f0c8dd63114055e1766a5ee27a17bd1196017ea0ff39847fa343187dca251f26f7f93ae77a4a1796b97707ac496820f9012f5366e2f4143cfb71088437aeaff41367e7abc2599bb9bebc8bca728f03443f3337692dd4fb6b0a88eddac0555a1dea7179a562d34fbc34c9c968387dd947e22a316cb4fa4e52115a877e099f4e9aaaeb833e30d2"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x1) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) (async) syz_io_uring_complete(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000045c55c49cafaaea416d2ac14b1671cc50d53f3dbca92c2bb521e61a5ec6294203f49f6bda9f6c118d556ed716113a22fcc42623ef6a80ee811ad6b069590310d1888aafd4dea1a9c142dfa1a635ecf7078", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x1) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x84410, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xd}, 0x0, 0x7c3, 0x40000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='-(/\x00', &(0x7f00000000c0)='-)$\x00', 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x600}}}}}, 0x20}}, 0x0) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x700}}}}}, 0x20}}, 0x0) 00:58:43 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x5d, 0x1000, 0x14, @mcast2, @local, 0x700, 0x0, 0x20, 0xffffffa6}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', r0, 0x2f, 0x81, 0x4, 0x80, 0x84, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x700, 0x4, 0x10000}}) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000140)="e42264f52e928dad5221ed4126fb40709394a83f7e7b0ff281db81928b57ab1b1d4b394e9cd0dcfb2493bb1765bb1f1d501dff5c0968a7a67a3fa78bbb238918b1b3331a6ddde83d838f41cacd40689f172fe37f2b5be7febbcd18ef0653", 0x5e) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xfe, 0x80, 0x80, 0x5, 0x0, 0x3, 0x80402, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x10958, 0x8, 0x1, 0x9, 0x5, 0x2, 0x7, 0x0, 0x7, 0x0, 0x8001}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) r0 = syz_io_uring_complete(0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000045c55c49cafaaea416d2ac14b1671cc50d53f3dbca92c2bb521e61a5ec6294203f49f6bda9f6c118d556ed716113a22fcc42623ef6a80ee811ad6b069590310d1888aafd4dea1a9c142dfa1a635ecf7078", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x1) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:43 executing program 0: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800008c", @ANYRESDEC=0x0, @ANYBLOB="000128bd7000fedbdf25300000000c009900070000006f000000060036003200000006003600200000000600560005000000019c97fe3a5b39f33daf26680fa3d8e64e477ff22b4f6001c9de0f888b9b63833ca4"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000888) (async) r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:43 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x5d, 0x1000, 0x14, @mcast2, @local, 0x700, 0x0, 0x20, 0xffffffa6}}) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c8feae9b0b3f08063fb1bd9addaaa93b6b15a5e55a22c7b6de91040777995e8295c254f4103c1ac34fbdf72884dde59d7857bac86865478b9a568d180fd410cf9ba02f5a3ca91a68e891fcd2632369e9f380ab68bf5728aedaf635d456d0ba0dcca25b6da73b93808f02d3fef9beaab6e0726eef6a7be056f1355c3967615474a72e1dfb57f78ad966bf47a9440f33787f857b7c20d7e7c2c276a6e7f3f147d85827de70ad5b3e9ed2f79cf91e6454e5ec62ef94223f275eb96ac40a119e9c8f58fb66616adbb8a875e7cc721da29325951622d4047feec43e5754f493cd1800c1fe8bc25664f7b5fe4e0f15f05a9f0fc87f39f12f6f3e5af9c1afc63da28bbb384b482c30", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', r0, 0x2f, 0x81, 0x4, 0x80, 0x84, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x700, 0x4, 0x10000}}) (async) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000140)="e42264f52e928dad5221ed4126fb40709394a83f7e7b0ff281db81928b57ab1b1d4b394e9cd0dcfb2493bb1765bb1f1d501dff5c0968a7a67a3fa78bbb238918b1b3331a6ddde83d838f41cacd40689f172fe37f2b5be7febbcd18ef0653", 0x5e) (async) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xfe, 0x80, 0x80, 0x5, 0x0, 0x3, 0x80402, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x10958, 0x8, 0x1, 0x9, 0x5, 0x2, 0x7, 0x0, 0x7, 0x0, 0x8001}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x900}}}}}, 0x20}}, 0x0) 00:58:43 executing program 0: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800008c", @ANYRESDEC=0x0, @ANYBLOB="000128bd7000fedbdf25300000000c009900070000006f000000060036003200000006003600200000000600560005000000019c97fe3a5b39f33daf26680fa3d8e64e477ff22b4f6001c9de0f888b9b63833ca4"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000888) (async) r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:43 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x5d, 0x1000, 0x14, @mcast2, @local, 0x700, 0x0, 0x20, 0xffffffa6}}) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x800) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', r0, 0x2f, 0x81, 0x4, 0x80, 0x84, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x700, 0x4, 0x10000}}) (async) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000140)="e42264f52e928dad5221ed4126fb40709394a83f7e7b0ff281db81928b57ab1b1d4b394e9cd0dcfb2493bb1765bb1f1d501dff5c0968a7a67a3fa78bbb238918b1b3331a6ddde83d838f41cacd40689f172fe37f2b5be7febbcd18ef0653", 0x5e) (async) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xfe, 0x80, 0x80, 0x5, 0x0, 0x3, 0x80402, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x10958, 0x8, 0x1, 0x9, 0x5, 0x2, 0x7, 0x0, 0x7, 0x0, 0x8001}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xf00}}}}}, 0x20}}, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000000)={0x4848000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x5cf3}}}}}, 0x20}}, 0x0) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x10000000}) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000000)={0x4848000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x10000000}) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x10000000}) (async) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x6000}}}}}, 0x20}}, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000000)={0x4848000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x10000000}) 00:58:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xf35c}}}}}, 0x20}}, 0x0) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0) 00:58:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x30000}}}}}, 0x20}}, 0x0) 00:58:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0) (async) 00:58:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x34000}}}}}, 0x20}}, 0x0) 00:58:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:43 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x763, 0x8, 0x4, 0x0, 0x4, 0x6, 0x7, 0x8a}, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x8, 0x1, 0x81, 0x3de15381, 0x100000001}, &(0x7f0000000100)={0x800, 0x0, 0x2, 0x552, 0x7f, 0x1, 0x5, 0x1}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:43 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x763, 0x8, 0x4, 0x0, 0x4, 0x6, 0x7, 0x8a}, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x8, 0x1, 0x81, 0x3de15381, 0x100000001}, &(0x7f0000000100)={0x800, 0x0, 0x2, 0x552, 0x7f, 0x1, 0x5, 0x1}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000000)={0x763, 0x8, 0x4, 0x0, 0x4, 0x6, 0x7, 0x8a}, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x8, 0x1, 0x81, 0x3de15381, 0x100000001}, &(0x7f0000000100)={0x800, 0x0, 0x2, 0x552, 0x7f, 0x1, 0x5, 0x1}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 00:58:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x8303a00, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = fsopen(&(0x7f0000000000)='vxfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) 00:58:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x400300}}}}}, 0x20}}, 0x0) 00:58:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x1000000}}}}}, 0x20}}, 0x0) 00:58:43 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x763, 0x8, 0x4, 0x0, 0x4, 0x6, 0x7, 0x8a}, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x8, 0x1, 0x81, 0x3de15381, 0x100000001}, &(0x7f0000000100)={0x800, 0x0, 0x2, 0x552, 0x7f, 0x1, 0x5, 0x1}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:58:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x135}}}}, 0x20}}, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x8303a00, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = fsopen(&(0x7f0000000000)='vxfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) 00:58:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:43 executing program 2: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000045c55c49cafaaea416d2ac14b1671cc50d53f3dbca92c2bb521e61a5ec6294203f49f6bda9f6c118d556ed716113a22fcc42623ef6a80ee811ad6b069590310d1888aafd4dea1a9c142dfa1a635ecf7078", @ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf1400000708000800ff0700007c5f7cf3d398260a5054f9b9dcf1ed9dcb1f991b053ec61e483cc3f338a967e300008784340643a893f8a2517933e1b0f3d17fdbfc34f01e66337023c95ef12ee0ec1d96944bb99c15f3457eb23b14fce2d4ce63f2c310d850911725f7f8b3fcc1892f493241d6848afe2f29dd47dd1399ea25ea52dc41ee63cbfd5231c2b0aaefe2f878a59c3c2d684f3e934b15dd4f2fed8f60ab465e6c8e555970b62e8e4398e39e55033edf913fd3a8a02fe5ac858f8ac7f6ac14842c0e00160dd06ff86b763204c98f8c4242f29d79ee8ff006f88400624ddde978341fe0142604bc4d0d7c33af1f4466c3bfe6bea4a968363e4e0bc27b0564df08ce34d962818b86c8a633fc27bfcc8221e8788b1f9132c9b2bf0074a0729c8acc4ec5e357840346ff3d6f28af5d87c3c79a0f3eab96a22ba6901d03ac1f598ec9db4a268df31551fc157eb802b5f0c8dd63114055e1766a5ee27a17bd1196017ea0ff39847fa343187dca251f26f7f93ae77a4a1796b97707ac496820f9012f5366e2f4143cfb71088437aeaff41367e7abc2599bb9bebc8bca728f03443f3337692dd4fb6b0a88eddac0555a1dea7179a562d34fbc34c9c968387dd947e22a316cb4fa4e52115a877e099f4e9aaaeb833e30d2"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x1) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 00:58:43 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x800, 0x7, 0x1, 0x400003}, {0x3df, 0x9, 0xfe, 0x8}, {0x3, 0x1, 0x81, 0x8}]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000080)={0x0, 0x2a, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000480)={r1, 0x7fffffff, 0x9, 0x1}) fspick(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2000000}}}}}, 0x20}}, 0x0) 00:58:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x3000000}}}}}, 0x20}}, 0x0) 00:58:43 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x800, 0x7, 0x1, 0x400003}, {0x3df, 0x9, 0xfe, 0x8}, {0x3, 0x1, 0x81, 0x8}]}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000080)={0x0, 0x2a, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000480)={r1, 0x7fffffff, 0x9, 0x1}) fspick(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1) 00:58:43 executing program 2: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000045c55c49cafaaea416d2ac14b1671cc50d53f3dbca92c2bb521e61a5ec6294203f49f6bda9f6c118d556ed716113a22fcc42623ef6a80ee811ad6b069590310d1888aafd4dea1a9c142dfa1a635ecf7078", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x1) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x8303a00, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = fsopen(&(0x7f0000000000)='vxfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x4000000}}}}}, 0x20}}, 0x0) 00:58:43 executing program 0: r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7, 0x6b, {{0x14, 0x4, 0x3, 0x36, 0x50, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x1f, 0x28, [@multicast1, @empty, @local, @local, @empty, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x2, 0xd, "958db9c54b18ab26e1a5cf"}, {0x7, 0x4, "2db7"}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r12}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000000480)={0xcb8, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4db1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7de, 0x40, 0x9, 0x7fffffff}, {0x2, 0x8, 0xd, 0x1}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x101, 0x14, 0x5, 0x9}, {0x5, 0x6, 0x40, 0xf8e1}, {0x1, 0x9, 0xdc, 0x1}, {0x400, 0x20, 0x0, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0xcb8}, 0x1, 0x0, 0x0, 0x850}, 0x50) r13 = eventfd2(0x4, 0x0) read$eventfd(r13, &(0x7f0000000040), 0xfffffd3b) 00:58:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:43 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x800, 0x7, 0x1, 0x400003}, {0x3df, 0x9, 0xfe, 0x8}, {0x3, 0x1, 0x81, 0x8}]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000080)={0x0, 0x2a, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000480)={r1, 0x7fffffff, 0x9, 0x1}) fspick(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x800, 0x7, 0x1, 0x400003}, {0x3df, 0x9, 0xfe, 0x8}, {0x3, 0x1, 0x81, 0x8}]}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000080)={0x0, 0x2a, 0x6}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000480)={r1, 0x7fffffff, 0x9, 0x1}) (async) fspick(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1) (async) 00:58:43 executing program 5: syz_clone3(&(0x7f0000000380)={0x10600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:43 executing program 2: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000045c55c49cafaaea416d2ac14b1671cc50d53f3dbca92c2bb521e61a5ec6294203f49f6bda9f6c118d556ed716113a22fcc42623ef6a80ee811ad6b069590310d1888aafd4dea1a9c142dfa1a635ecf7078", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x1) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 00:58:43 executing program 0: r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7, 0x6b, {{0x14, 0x4, 0x3, 0x36, 0x50, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x1f, 0x28, [@multicast1, @empty, @local, @local, @empty, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x2, 0xd, "958db9c54b18ab26e1a5cf"}, {0x7, 0x4, "2db7"}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r12}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000000480)={0xcb8, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4db1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7de, 0x40, 0x9, 0x7fffffff}, {0x2, 0x8, 0xd, 0x1}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x101, 0x14, 0x5, 0x9}, {0x5, 0x6, 0x40, 0xf8e1}, {0x1, 0x9, 0xdc, 0x1}, {0x400, 0x20, 0x0, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0xcb8}, 0x1, 0x0, 0x0, 0x850}, 0x50) r13 = eventfd2(0x4, 0x0) read$eventfd(r13, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7, 0x6b, {{0x14, 0x4, 0x3, 0x36, 0x50, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x1f, 0x28, [@multicast1, @empty, @local, @local, @empty, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x2, 0xd, "958db9c54b18ab26e1a5cf"}, {0x7, 0x4, "2db7"}]}]}}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r12}, {0x4}}]}, 0x20}}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000000480)={0xcb8, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4db1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7de, 0x40, 0x9, 0x7fffffff}, {0x2, 0x8, 0xd, 0x1}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x101, 0x14, 0x5, 0x9}, {0x5, 0x6, 0x40, 0xf8e1}, {0x1, 0x9, 0xdc, 0x1}, {0x400, 0x20, 0x0, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0xcb8}, 0x1, 0x0, 0x0, 0x850}, 0x50) (async) eventfd2(0x4, 0x0) (async) read$eventfd(r13, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x5000000}}}}}, 0x20}}, 0x0) 00:58:43 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8400, 0x2, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x40, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x1) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x40, 0xa, 0x0, 0x9f, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1000, 0x767, 0x8, 0x8, 0xe0000000000, 0xffff25d4, 0x0, 0x0, 0x5, 0x0, 0x80000001}, 0xffffffffffffffff, 0xd, r1, 0xe) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)={0x2, 0x0, [0x0, 0x0]}) 00:58:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:44 executing program 5: syz_clone3(&(0x7f0000000380)={0x10600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:44 executing program 2: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000045c55c49cafaaea416d2ac14b1671cc50d53f3dbca92c2bb521e61a5ec6294203f49f6bda9f6c118d556ed716113a22fcc42623ef6a80ee811ad6b069590310d1888aafd4dea1a9c142dfa1a635ecf7078", @ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf1400000708000800ff0700007c5f7cf3d398260a5054f9b9dcf1ed9dcb1f991b053ec61e483cc3f338a967e300008784340643a893f8a2517933e1b0f3d17fdbfc34f01e66337023c95ef12ee0ec1d96944bb99c15f3457eb23b14fce2d4ce63f2c310d850911725f7f8b3fcc1892f493241d6848afe2f29dd47dd1399ea25ea52dc41ee63cbfd5231c2b0aaefe2f878a59c3c2d684f3e934b15dd4f2fed8f60ab465e6c8e555970b62e8e4398e39e55033edf913fd3a8a02fe5ac858f8ac7f6ac14842c0e00160dd06ff86b763204c98f8c4242f29d79ee8ff006f88400624ddde978341fe0142604bc4d0d7c33af1f4466c3bfe6bea4a968363e4e0bc27b0564df08ce34d962818b86c8a633fc27bfcc8221e8788b1f9132c9b2bf0074a0729c8acc4ec5e357840346ff3d6f28af5d87c3c79a0f3eab96a22ba6901d03ac1f598ec9db4a268df31551fc157eb802b5f0c8dd63114055e1766a5ee27a17bd1196017ea0ff39847fa343187dca251f26f7f93ae77a4a1796b97707ac496820f9012f5366e2f4143cfb71088437aeaff41367e7abc2599bb9bebc8bca728f03443f3337692dd4fb6b0a88eddac0555a1dea7179a562d34fbc34c9c968387dd947e22a316cb4fa4e52115a877e099f4e9aaaeb833e30d2"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x1) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x6000000}}}}}, 0x20}}, 0x0) 00:58:44 executing program 5: syz_clone3(&(0x7f0000000380)={0x10600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:44 executing program 0: r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7, 0x6b, {{0x14, 0x4, 0x3, 0x36, 0x50, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x1f, 0x28, [@multicast1, @empty, @local, @local, @empty, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x2, 0xd, "958db9c54b18ab26e1a5cf"}, {0x7, 0x4, "2db7"}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r12}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000000480)={0xcb8, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4db1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7de, 0x40, 0x9, 0x7fffffff}, {0x2, 0x8, 0xd, 0x1}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x101, 0x14, 0x5, 0x9}, {0x5, 0x6, 0x40, 0xf8e1}, {0x1, 0x9, 0xdc, 0x1}, {0x400, 0x20, 0x0, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0xcb8}, 0x1, 0x0, 0x0, 0x850}, 0x50) r13 = eventfd2(0x4, 0x0) read$eventfd(r13, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7, 0x6b, {{0x14, 0x4, 0x3, 0x36, 0x50, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x1f, 0x28, [@multicast1, @empty, @local, @local, @empty, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x2, 0xd, "958db9c54b18ab26e1a5cf"}, {0x7, 0x4, "2db7"}]}]}}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r8, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000003c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r12}, {0x4}}]}, 0x20}}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000000480)={0xcb8, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4db1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7de, 0x40, 0x9, 0x7fffffff}, {0x2, 0x8, 0xd, 0x1}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x101, 0x14, 0x5, 0x9}, {0x5, 0x6, 0x40, 0xf8e1}, {0x1, 0x9, 0xdc, 0x1}, {0x400, 0x20, 0x0, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0xcb8}, 0x1, 0x0, 0x0, 0x850}, 0x50) (async) eventfd2(0x4, 0x0) (async) read$eventfd(r13, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:44 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8400, 0x2, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x40, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x1) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x40, 0xa, 0x0, 0x9f, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1000, 0x767, 0x8, 0x8, 0xe0000000000, 0xffff25d4, 0x0, 0x0, 0x5, 0x0, 0x80000001}, 0xffffffffffffffff, 0xd, r1, 0xe) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)={0x2, 0x0, [0x0, 0x0]}) 00:58:44 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 2: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x7000000}}}}}, 0x20}}, 0x0) 00:58:44 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8400, 0x2, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x40, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x1) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x40, 0xa, 0x0, 0x9f, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1000, 0x767, 0x8, 0x8, 0xe0000000000, 0xffff25d4, 0x0, 0x0, 0x5, 0x0, 0x80000001}, 0xffffffffffffffff, 0xd, r1, 0xe) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)={0x2, 0x0, [0x0, 0x0]}) 00:58:44 executing program 0: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x5}, 0x4) r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:44 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x8000000}}}}}, 0x20}}, 0x0) 00:58:44 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x5}, 0x4) r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:44 executing program 2: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) syz_io_uring_complete(0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:58:44 executing program 3: eventfd2(0x9, 0x800) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x58) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xf7, 0x0, 0x9, 0x6b, 0x0, 0x4718, 0x5000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x4, 0x0, 0x1, 0x1, 0x8640, 0x5fb00000, 0x3, 0x0, 0x3, 0x0, 0x550}, r1, 0xf, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x9, 0x3, 0x10, 0x0, 0x7, 0x44000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5ba8, 0x5, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x1, 0x4, 0x7, 0x4, 0x20000, 0x200, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r0, 0x1) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x9000000}}}}}, 0x20}}, 0x0) 00:58:44 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001400)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000090000000000000009000000000000000100000000000000280000000000000001000000000000000800000000000000fbffffffffffffff040000000000000097000000000000000900000000000000010000000000000600000000000000ff0600000000000000010000000000000001040000000000000e030000000000000200000000000000"]}, @devid}) 00:58:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x5}, 0x4) (async) r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xf000000}}}}}, 0x20}}, 0x0) 00:58:44 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001400)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000090000000000000009000000000000000100000000000000280000000000000001000000000000000800000000000000fbffffffffffffff040000000000000097000000000000000900000000000000010000000000000600000000000000ff0600000000000000010000000000000001040000000000000e030000000000000200000000000000"]}, @devid}) (rerun: 64) 00:58:44 executing program 2: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) syz_io_uring_complete(0x0) 00:58:44 executing program 0: eventfd2(0x4, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1000}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) r1 = syz_io_uring_complete(0x0) epoll_create1(0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 00:58:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 3: eventfd2(0x9, 0x800) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) r1 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x58) (async) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xf7, 0x0, 0x9, 0x6b, 0x0, 0x4718, 0x5000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x4, 0x0, 0x1, 0x1, 0x8640, 0x5fb00000, 0x3, 0x0, 0x3, 0x0, 0x550}, r1, 0xf, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x9, 0x3, 0x10, 0x0, 0x7, 0x44000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5ba8, 0x5, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x1, 0x4, 0x7, 0x4, 0x20000, 0x200, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r0, 0x1) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x60000000}}}}}, 0x20}}, 0x0) 00:58:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x5f}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: eventfd2(0x4, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1000}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) (async, rerun: 64) r1 = syz_io_uring_complete(0x0) (async, rerun: 32) epoll_create1(0x0) (rerun: 32) read$eventfd(r1, &(0x7f0000000040), 0x8) 00:58:44 executing program 2: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xb5) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x9effffff}}}}}, 0x20}}, 0x0) 00:58:44 executing program 3: eventfd2(0x9, 0x800) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x58) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xf7, 0x0, 0x9, 0x6b, 0x0, 0x4718, 0x5000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x4, 0x0, 0x1, 0x1, 0x8640, 0x5fb00000, 0x3, 0x0, 0x3, 0x0, 0x550}, r1, 0xf, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x9, 0x3, 0x10, 0x0, 0x7, 0x44000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5ba8, 0x5, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x1, 0x4, 0x7, 0x4, 0x20000, 0x200, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r0, 0x1) eventfd2(0x9, 0x800) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) gettid() (async) syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x58) (async) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xf7, 0x0, 0x9, 0x6b, 0x0, 0x4718, 0x5000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x4, 0x0, 0x1, 0x1, 0x8640, 0x5fb00000, 0x3, 0x0, 0x3, 0x0, 0x550}, r1, 0xf, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x9, 0x3, 0x10, 0x0, 0x7, 0x44000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5ba8, 0x5, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x1, 0x4, 0x7, 0x4, 0x20000, 0x200, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r0, 0x1) (async) 00:58:44 executing program 0: eventfd2(0x4, 0x0) (async) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1000}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) (async) r1 = syz_io_uring_complete(0x0) (async) epoll_create1(0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 00:58:44 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001400)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000090000000000000009000000000000000100000000000000280000000000000001000000000000000800000000000000fbffffffffffffff040000000000000097000000000000000900000000000000010000000000000600000000000000ff0600000000000000010000000000000001040000000000000e030000000000000200000000000000"]}, @devid}) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001400)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000090000000000000009000000000000000100000000000000280000000000000001000000000000000800000000000000fbffffffffffffff040000000000000097000000000000000900000000000000010000000000000600000000000000ff0600000000000000010000000000000001040000000000000e030000000000000200000000000000"]}, @devid}) (async) 00:58:44 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) syz_clone3(&(0x7f0000000380)={0x200000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xefffffff}}}}}, 0x20}}, 0x0) 00:58:44 executing program 2: syz_clone3(0x0, 0x0) 00:58:44 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) socketpair(0x25, 0x5, 0x41a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(r1, &(0x7f0000000080), &(0x7f0000000100)=0x60) 00:58:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) socketpair(0x25, 0x5, 0x41a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(r1, &(0x7f0000000080), &(0x7f0000000100)=0x60) 00:58:44 executing program 2: syz_clone3(0x0, 0x0) 00:58:44 executing program 2: syz_clone3(0x0, 0x0) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xf0ffffff}}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) socketpair(0x25, 0x5, 0x41a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(r1, &(0x7f0000000080), &(0x7f0000000100)=0x60) 00:58:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 5: syz_clone3(&(0x7f0000000000)={0xd8000100, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0xfd62, 0x0, 0x0}, 0x58) 00:58:44 executing program 4: r0 = eventfd2(0x4, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) pselect6(0x40, &(0x7f0000000100)={0x6, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:44 executing program 0: eventfd2(0x4, 0x0) r0 = eventfd(0x1) read$eventfd(r0, &(0x7f0000000040), 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) 00:58:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 2: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xb5) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xf35c0000}}}}}, 0x20}}, 0x0) 00:58:44 executing program 4: r0 = eventfd2(0x4, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) pselect6(0x40, &(0x7f0000000100)={0x6, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:44 executing program 0: eventfd2(0x4, 0x0) r0 = eventfd(0x1) read$eventfd(r0, &(0x7f0000000040), 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) eventfd2(0x4, 0x0) (async) eventfd(0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0x2) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) (async) 00:58:44 executing program 5: syz_clone3(&(0x7f0000000000)={0xd8000100, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0xfd62, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000000)={0xd8000100, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0xfd62, 0x0, 0x0}, 0x58) (async) 00:58:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: eventfd2(0x4, 0x0) (async, rerun: 64) r0 = eventfd(0x1) (rerun: 64) read$eventfd(r0, &(0x7f0000000040), 0x2) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xffffff7f}}}}}, 0x20}}, 0x0) 00:58:44 executing program 4: r0 = eventfd2(0x4, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) pselect6(0x40, &(0x7f0000000100)={0x6, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 5: syz_clone3(&(0x7f0000000000)={0xd8000100, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0xfd62, 0x0, 0x0}, 0x58) 00:58:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: r0 = eventfd2(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000f40)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x4) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_TESTDATA={0x61, 0x45, "2c5267a8327cf012841ca8fcff9312b8f69ea981d80a24520bd1dd0504721f5e57f78957dc94255568a44e11a7e5f628318d38860fc4ef8bc6143bfd6603c74e3a4ed7526b75980073bc98abf9e90b04d8886328a413089eb2e10d85e1"}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) eventfd2(0x5, 0x801) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xffffff9e}}}}}, 0x20}}, 0x0) 00:58:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 4: eventfd2(0x4, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) pselect6(0x40, &(0x7f0000000100)={0x6, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: r0 = eventfd2(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000f40)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x4) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_TESTDATA={0x61, 0x45, "2c5267a8327cf012841ca8fcff9312b8f69ea981d80a24520bd1dd0504721f5e57f78957dc94255568a44e11a7e5f628318d38860fc4ef8bc6143bfd6603c74e3a4ed7526b75980073bc98abf9e90b04d8886328a413089eb2e10d85e1"}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) eventfd2(0x5, 0x801) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000f40)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x4) (async) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_TESTDATA={0x61, 0x45, "2c5267a8327cf012841ca8fcff9312b8f69ea981d80a24520bd1dd0504721f5e57f78957dc94255568a44e11a7e5f628318d38860fc4ef8bc6143bfd6603c74e3a4ed7526b75980073bc98abf9e90b04d8886328a413089eb2e10d85e1"}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) (async) eventfd2(0x5, 0x801) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xffffffef}}}}}, 0x20}}, 0x0) 00:58:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x4, 0x80, 0x8, 0x1, 0xc, 0x0, 0x0, 0x8001, 0x408, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3645, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x200, 0x1, 0x8000, 0x0, 0x2, 0x10001, 0xffff, 0x0, 0x9a, 0x0, 0x10000}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x40) r1 = syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r3 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r3], 0x1}, 0x58) syz_clone3(&(0x7f00000002c0)={0x884c500, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1b}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000100)=""/197, &(0x7f0000000280)=[r2, r1, r3], 0x3}, 0x58) 00:58:44 executing program 4: eventfd2(0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: r0 = eventfd2(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000f40)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x4) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_TESTDATA={0x61, 0x45, "2c5267a8327cf012841ca8fcff9312b8f69ea981d80a24520bd1dd0504721f5e57f78957dc94255568a44e11a7e5f628318d38860fc4ef8bc6143bfd6603c74e3a4ed7526b75980073bc98abf9e90b04d8886328a413089eb2e10d85e1"}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) eventfd2(0x5, 0x801) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0xfffffff0}}}}}, 0x20}}, 0x0) 00:58:44 executing program 4: pselect6(0x40, &(0x7f0000000100)={0x6, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:44 executing program 0: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x401, 0x4) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0xca, 0x3, 0x0, 0xff, 0x0, 0x4, 0x15008, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x40000, 0x3, 0x3ff, 0x8, 0x1, 0xfdf6, 0x4, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r0, 0x380fc7c1) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048851}, 0x200040c0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 00:58:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x4, 0x80, 0x8, 0x1, 0xc, 0x0, 0x0, 0x8001, 0x408, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3645, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x200, 0x1, 0x8000, 0x0, 0x2, 0x10001, 0xffff, 0x0, 0x9a, 0x0, 0x10000}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x40) (async) r1 = syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) (async) r3 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r3], 0x1}, 0x58) (async) syz_clone3(&(0x7f00000002c0)={0x884c500, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1b}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000100)=""/197, &(0x7f0000000280)=[r2, r1, r3], 0x3}, 0x58) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x9}}, 0x0) 00:58:44 executing program 4: pselect6(0x40, &(0x7f0000000100)={0x6, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 0: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x401, 0x4) (async) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0xca, 0x3, 0x0, 0xff, 0x0, 0x4, 0x15008, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x40000, 0x3, 0x3ff, 0x8, 0x1, 0xfdf6, 0x4, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r0, 0x380fc7c1) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048851}, 0x200040c0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 00:58:44 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0xf}}, 0x0) 00:58:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:44 executing program 4: pselect6(0x40, &(0x7f0000000100)={0x6, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:44 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x4, 0x80, 0x8, 0x1, 0xc, 0x0, 0x0, 0x8001, 0x408, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3645, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x200, 0x1, 0x8000, 0x0, 0x2, 0x10001, 0xffff, 0x0, 0x9a, 0x0, 0x10000}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x40) (async) r1 = syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) (async) r3 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r3], 0x1}, 0x58) (async) syz_clone3(&(0x7f00000002c0)={0x884c500, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1b}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000100)=""/197, &(0x7f0000000280)=[r2, r1, r3], 0x3}, 0x58) 00:58:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x10}}, 0x0) 00:58:45 executing program 0: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x401, 0x4) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0xca, 0x3, 0x0, 0xff, 0x0, 0x4, 0x15008, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x40000, 0x3, 0x3ff, 0x8, 0x1, 0xfdf6, 0x4, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r0, 0x380fc7c1) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048851}, 0x200040c0) (async, rerun: 32) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (rerun: 32) 00:58:45 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x14}}, 0x0) 00:58:45 executing program 4: eventfd2(0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x64}}, 0x0) 00:58:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0xc0}}, 0x0) 00:58:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) 00:58:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) (async) 00:58:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0xec0}}, 0x0) 00:58:45 executing program 4: eventfd2(0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x33fe0}}, 0x0) 00:58:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 5: socketpair(0x53, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) socket$isdn_base(0x22, 0x3, 0x0) syz_clone3(&(0x7f0000000380)={0x50000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{r1}, 0x0, 0x1d, @unused=[0x7, 0xfffffffffffffffb, 0x8, 0x4], @name="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"}) 00:58:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20000060}}, 0x0) 00:58:45 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:45 executing program 5: socketpair(0x53, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) socket$isdn_base(0x22, 0x3, 0x0) syz_clone3(&(0x7f0000000380)={0x50000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{r1}, 0x0, 0x1d, @unused=[0x7, 0xfffffffffffffffb, 0x8, 0x4], @name="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"}) socketpair(0x53, 0x0, 0x0, &(0x7f0000000480)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x50000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{r1}, 0x0, 0x1d, @unused=[0x7, 0xfffffffffffffffb, 0x8, 0x4], @name="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"}) (async) 00:58:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x7ffff000}}, 0x0) 00:58:46 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) (async) 00:58:46 executing program 5: socketpair(0x53, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) socket$isdn_base(0x22, 0x3, 0x0) syz_clone3(&(0x7f0000000380)={0x50000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{r1}, 0x0, 0x1d, @unused=[0x7, 0xfffffffffffffffb, 0x8, 0x4], @name="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"}) socketpair(0x53, 0x0, 0x0, &(0x7f0000000480)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x50000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{r1}, 0x0, 0x1d, @unused=[0x7, 0xfffffffffffffffb, 0x8, 0x4], @name="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"}) (async) 00:58:46 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:46 executing program 4: eventfd2(0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:46 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:46 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0xfffffdef}}, 0x0) 00:58:46 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r0 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={0x0, 0x1, 0x7fff, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000018}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000800)={r1, 0x81, 0x1, [0x2, 0x6179, 0x1, 0xceeb, 0xdb], [0xb03f, 0x4, 0xffff, 0x80000000, 0x5, 0x8, 0x0, 0x8000, 0xffff, 0xd7, 0x7fffffff, 0x4b8, 0xff, 0x6, 0x9, 0xfffffffffffeffff, 0x5, 0x4688, 0x0, 0x101, 0x7ff, 0x3, 0x400, 0x3, 0x3ff, 0x8, 0x9, 0xfff, 0xe9, 0x81, 0x33, 0x2, 0xffff, 0xfffffffffffffffc, 0x9, 0x9, 0x932, 0x20f3, 0x7f, 0x9, 0x9, 0x2, 0x7c, 0x6, 0xfffffffffffff22a, 0x9, 0x7, 0xf0f, 0x6, 0x4, 0x1000, 0x401, 0x5b95, 0xfffffffffffffff7, 0xb0, 0xc7, 0xa4d9693, 0x3, 0x982, 0x6, 0x41, 0x2, 0x24, 0x401, 0x100000001, 0x9f, 0x120, 0x0, 0x6, 0x1ff, 0x4800000, 0x4, 0x6, 0x1, 0xfffffffffffffffb, 0x1ff, 0x1, 0xffff, 0x5, 0x1f, 0x3, 0x8001, 0x1, 0x7, 0x8, 0x6, 0x8, 0x7, 0x200, 0x7, 0x6, 0xf, 0x78, 0xffffffffffffffd2, 0x3, 0xff, 0xea6, 0x1, 0x1ff, 0x1, 0x8000, 0x8, 0x1, 0xaaf, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x80000001, 0x9ead, 0xb0, 0x81, 0x6, 0x780, 0xf5bf, 0x7, 0x9, 0x5be9, 0x6, 0x4, 0x7016afa]}) 00:58:46 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x2}, 0x0) 00:58:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:46 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:46 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r0 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={0x0, 0x1, 0x7fff, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000018}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000800)={r1, 0x81, 0x1, [0x2, 0x6179, 0x1, 0xceeb, 0xdb], [0xb03f, 0x4, 0xffff, 0x80000000, 0x5, 0x8, 0x0, 0x8000, 0xffff, 0xd7, 0x7fffffff, 0x4b8, 0xff, 0x6, 0x9, 0xfffffffffffeffff, 0x5, 0x4688, 0x0, 0x101, 0x7ff, 0x3, 0x400, 0x3, 0x3ff, 0x8, 0x9, 0xfff, 0xe9, 0x81, 0x33, 0x2, 0xffff, 0xfffffffffffffffc, 0x9, 0x9, 0x932, 0x20f3, 0x7f, 0x9, 0x9, 0x2, 0x7c, 0x6, 0xfffffffffffff22a, 0x9, 0x7, 0xf0f, 0x6, 0x4, 0x1000, 0x401, 0x5b95, 0xfffffffffffffff7, 0xb0, 0xc7, 0xa4d9693, 0x3, 0x982, 0x6, 0x41, 0x2, 0x24, 0x401, 0x100000001, 0x9f, 0x120, 0x0, 0x6, 0x1ff, 0x4800000, 0x4, 0x6, 0x1, 0xfffffffffffffffb, 0x1ff, 0x1, 0xffff, 0x5, 0x1f, 0x3, 0x8001, 0x1, 0x7, 0x8, 0x6, 0x8, 0x7, 0x200, 0x7, 0x6, 0xf, 0x78, 0xffffffffffffffd2, 0x3, 0xff, 0xea6, 0x1, 0x1ff, 0x1, 0x8000, 0x8, 0x1, 0xaaf, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x80000001, 0x9ead, 0xb0, 0x81, 0x6, 0x780, 0xf5bf, 0x7, 0x9, 0x5be9, 0x6, 0x4, 0x7016afa]}) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) syz_io_uring_complete(0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={0x0, 0x1, 0x7fff, 0x1}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000018}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000800)={r1, 0x81, 0x1, [0x2, 0x6179, 0x1, 0xceeb, 0xdb], [0xb03f, 0x4, 0xffff, 0x80000000, 0x5, 0x8, 0x0, 0x8000, 0xffff, 0xd7, 0x7fffffff, 0x4b8, 0xff, 0x6, 0x9, 0xfffffffffffeffff, 0x5, 0x4688, 0x0, 0x101, 0x7ff, 0x3, 0x400, 0x3, 0x3ff, 0x8, 0x9, 0xfff, 0xe9, 0x81, 0x33, 0x2, 0xffff, 0xfffffffffffffffc, 0x9, 0x9, 0x932, 0x20f3, 0x7f, 0x9, 0x9, 0x2, 0x7c, 0x6, 0xfffffffffffff22a, 0x9, 0x7, 0xf0f, 0x6, 0x4, 0x1000, 0x401, 0x5b95, 0xfffffffffffffff7, 0xb0, 0xc7, 0xa4d9693, 0x3, 0x982, 0x6, 0x41, 0x2, 0x24, 0x401, 0x100000001, 0x9f, 0x120, 0x0, 0x6, 0x1ff, 0x4800000, 0x4, 0x6, 0x1, 0xfffffffffffffffb, 0x1ff, 0x1, 0xffff, 0x5, 0x1f, 0x3, 0x8001, 0x1, 0x7, 0x8, 0x6, 0x8, 0x7, 0x200, 0x7, 0x6, 0xf, 0x78, 0xffffffffffffffd2, 0x3, 0xff, 0xea6, 0x1, 0x1ff, 0x1, 0x8000, 0x8, 0x1, 0xaaf, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x80000001, 0x9ead, 0xb0, 0x81, 0x6, 0x780, 0xf5bf, 0x7, 0x9, 0x5be9, 0x6, 0x4, 0x7016afa]}) (async) 00:58:46 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x8}, 0x0) 00:58:46 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:46 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:46 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) write$eventfd(r2, &(0x7f00000000c0)=0x2, 0x8) 00:58:47 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:47 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x1, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:47 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) r0 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={0x0, 0x1, 0x7fff, 0x1}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000018}) (rerun: 32) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000800)={r1, 0x81, 0x1, [0x2, 0x6179, 0x1, 0xceeb, 0xdb], [0xb03f, 0x4, 0xffff, 0x80000000, 0x5, 0x8, 0x0, 0x8000, 0xffff, 0xd7, 0x7fffffff, 0x4b8, 0xff, 0x6, 0x9, 0xfffffffffffeffff, 0x5, 0x4688, 0x0, 0x101, 0x7ff, 0x3, 0x400, 0x3, 0x3ff, 0x8, 0x9, 0xfff, 0xe9, 0x81, 0x33, 0x2, 0xffff, 0xfffffffffffffffc, 0x9, 0x9, 0x932, 0x20f3, 0x7f, 0x9, 0x9, 0x2, 0x7c, 0x6, 0xfffffffffffff22a, 0x9, 0x7, 0xf0f, 0x6, 0x4, 0x1000, 0x401, 0x5b95, 0xfffffffffffffff7, 0xb0, 0xc7, 0xa4d9693, 0x3, 0x982, 0x6, 0x41, 0x2, 0x24, 0x401, 0x100000001, 0x9f, 0x120, 0x0, 0x6, 0x1ff, 0x4800000, 0x4, 0x6, 0x1, 0xfffffffffffffffb, 0x1ff, 0x1, 0xffff, 0x5, 0x1f, 0x3, 0x8001, 0x1, 0x7, 0x8, 0x6, 0x8, 0x7, 0x200, 0x7, 0x6, 0xf, 0x78, 0xffffffffffffffd2, 0x3, 0xff, 0xea6, 0x1, 0x1ff, 0x1, 0x8000, 0x8, 0x1, 0xaaf, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x80000001, 0x9ead, 0xb0, 0x81, 0x6, 0x780, 0xf5bf, 0x7, 0x9, 0x5be9, 0x6, 0x4, 0x7016afa]}) 00:58:47 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) (async) write$eventfd(r2, &(0x7f00000000c0)=0x2, 0x8) 00:58:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x64}, 0x0) 00:58:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x300}, 0x0) 00:58:47 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) (async) write$eventfd(r2, &(0x7f00000000c0)=0x2, 0x8) 00:58:47 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:47 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x200, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x2}, 0x0) 00:58:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:47 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:47 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 00:58:47 executing program 0: r0 = eventfd2(0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:47 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x3}, 0x0) 00:58:47 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:47 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2b80, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:47 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:47 executing program 0: r0 = eventfd2(0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:47 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x4}, 0x0) 00:58:47 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:47 executing program 0: r0 = eventfd2(0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:47 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x5}, 0x0) 00:58:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:47 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:47 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:47 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x6}, 0x0) 00:58:47 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:47 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:47 executing program 0: r0 = eventfd2(0x2, 0x801) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fcda1c7cdd5a690877425ba1ca80", @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000020000090000000a00060008021100000000001000b0002000000002000800ffffff7f23003400fe4c4bb0393d7c7e9fd5377358d327509853c6c861415ee20fc116af5d5081002400f300008004000200000001000800060000000300800004000600ff0002008f1f0000040093000400af00"], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 00:58:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x7}, 0x0) 00:58:47 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:47 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:47 executing program 0: r0 = eventfd2(0x2, 0x801) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fcda1c7cdd5a690877425ba1ca80", @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000020000090000000a00060008021100000000001000b0002000000002000800ffffff7f23003400fe4c4bb0393d7c7e9fd5377358d327509853c6c861415ee20fc116af5d5081002400f300008004000200000001000800060000000300800004000600ff0002008f1f0000040093000400af00"], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) eventfd2(0x2, 0x801) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fcda1c7cdd5a690877425ba1ca80", @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000020000090000000a00060008021100000000001000b0002000000002000800ffffff7f23003400fe4c4bb0393d7c7e9fd5377358d327509853c6c861415ee20fc116af5d5081002400f300008004000200000001000800060000000300800004000600ff0002008f1f0000040093000400af00"], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) 00:58:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x8}, 0x0) 00:58:47 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 00:58:47 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:47 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:47 executing program 0: r0 = eventfd2(0x2, 0x801) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fcda1c7cdd5a690877425ba1ca80", @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000020000090000000a00060008021100000000001000b0002000000002000800ffffff7f23003400fe4c4bb0393d7c7e9fd5377358d327509853c6c861415ee20fc116af5d5081002400f300008004000200000001000800060000000300800004000600ff0002008f1f0000040093000400af00"], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) eventfd2(0x2, 0x801) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fcda1c7cdd5a690877425ba1ca80", @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000020000090000000a00060008021100000000001000b0002000000002000800ffffff7f23003400fe4c4bb0393d7c7e9fd5377358d327509853c6c861415ee20fc116af5d5081002400f300008004000200000001000800060000000300800004000600ff0002008f1f0000040093000400af00"], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) 00:58:48 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x32}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:48 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x9}, 0x0) 00:58:48 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:48 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 00:58:48 executing program 0: r0 = eventfd2(0x4, 0x0) eventfd2(0x10000000, 0x801) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = eventfd2(0x3f, 0x80801) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r3, 0x1) 00:58:48 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:48 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xf}, 0x0) 00:58:48 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:48 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:48 executing program 0: r0 = eventfd2(0x4, 0x0) eventfd2(0x10000000, 0x801) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = eventfd2(0x3f, 0x80801) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r3, 0x1) eventfd2(0x4, 0x0) (async) eventfd2(0x10000000, 0x801) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) (async) getsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) eventfd2(0x3f, 0x80801) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r3, 0x1) (async) 00:58:48 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:48 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x60}, 0x0) 00:58:48 executing program 5: ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:48 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:48 executing program 0: r0 = eventfd2(0x4, 0x0) eventfd2(0x10000000, 0x801) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = eventfd2(0x3f, 0x80801) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r3, 0x1) eventfd2(0x4, 0x0) (async) eventfd2(0x10000000, 0x801) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) (async) getsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) eventfd2(0x3f, 0x80801) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r3, 0x1) (async) 00:58:48 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:48 executing program 5: ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:48 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:48 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x300}, 0x0) 00:58:48 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:49 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:49 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:49 executing program 0: syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_setup(0x4ae, &(0x7f0000000080)={0x0, 0x8c7d, 0x1, 0x2, 0x31f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index=0x4, 0x9, 0x6, 0x7da, 0x2}, 0x100) r3 = eventfd2(0x4, 0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) 00:58:49 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x500}, 0x0) 00:58:49 executing program 5: ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:49 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:49 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x600}, 0x0) 00:58:49 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x44) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r7 = socket(0x2b, 0x1, 0x3) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="78020000", @ANYRES16=r8, @ANYBLOB="01007e75bae559f855bf870000000800c5a6", @ANYRES32=0x0, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x40140}, 0x40) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60) 00:58:49 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:49 executing program 0: syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_setup(0x4ae, &(0x7f0000000080)={0x0, 0x8c7d, 0x1, 0x2, 0x31f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index=0x4, 0x9, 0x6, 0x7da, 0x2}, 0x100) (async, rerun: 32) r3 = eventfd2(0x4, 0x0) (rerun: 32) read$eventfd(r3, &(0x7f0000000040), 0x8) 00:58:49 executing program 5: syz_clone3(&(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:49 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x44) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r7 = socket(0x2b, 0x1, 0x3) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="78020000", @ANYRES16=r8, @ANYBLOB="01007e75bae559f855bf870000000800c5a6", @ANYRES32=0x0, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x40140}, 0x40) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60) 00:58:50 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:50 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:50 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x700}, 0x0) 00:58:50 executing program 0: syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) (async) syz_io_uring_setup(0x4ae, &(0x7f0000000080)={0x0, 0x8c7d, 0x1, 0x2, 0x31f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index=0x4, 0x9, 0x6, 0x7da, 0x2}, 0x100) (async) r3 = eventfd2(0x4, 0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) 00:58:50 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x44) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r7 = socket(0x2b, 0x1, 0x3) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="78020000", @ANYRES16=r8, @ANYBLOB="01007e75bae559f855bf870000000800c5a6", @ANYRES32=0x0, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x40140}, 0x40) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60) 00:58:50 executing program 5: syz_clone3(&(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:50 executing program 0: r0 = syz_io_uring_setup(0x917, &(0x7f0000000080)={0x0, 0x8746, 0x4, 0x3, 0x199}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) 00:58:50 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x44) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r7 = socket(0x2b, 0x1, 0x3) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="78020000", @ANYRES16=r8, @ANYBLOB="01007e75bae559f855bf870000000800c5a6", @ANYRES32=0x0, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x40140}, 0x40) 00:58:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:50 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x900}, 0x0) 00:58:50 executing program 0: r0 = syz_io_uring_setup(0x917, &(0x7f0000000080)={0x0, 0x8746, 0x4, 0x3, 0x199}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) (async, rerun: 64) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) (rerun: 64) 00:58:50 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xf00}, 0x0) 00:58:51 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:51 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x44) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) socket(0x2b, 0x1, 0x3) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, 0x0) 00:58:51 executing program 0: r0 = syz_io_uring_setup(0x917, &(0x7f0000000080)={0x0, 0x8746, 0x4, 0x3, 0x199}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) 00:58:51 executing program 5: syz_clone3(&(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:51 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x5cf3}, 0x0) 00:58:51 executing program 0: r0 = eventfd2(0x4, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:51 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x44) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) socket(0x2b, 0x1, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) 00:58:51 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x6000}, 0x0) 00:58:51 executing program 0: r0 = eventfd2(0x4, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x4, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:51 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x44) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) socket(0x2b, 0x1, 0x3) 00:58:52 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x0, 0xff, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:52 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xf35c}, 0x0) 00:58:52 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:52 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x44) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) 00:58:52 executing program 5: syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, 0x0, 0x28, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008011}, 0x1) 00:58:52 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x44) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:52 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x30000}, 0x0) 00:58:52 executing program 0: r0 = eventfd2(0x4, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) (async, rerun: 64) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (rerun: 64) 00:58:52 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:52 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:52 executing program 5: syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, 0x0, 0x28, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008011}, 0x1) 00:58:52 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:53 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x0, 0x4, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:53 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) socket$nl_generic(0x10, 0x3, 0x10) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x34000}, 0x0) 00:58:53 executing program 5: syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, 0x0, 0x28, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008011}, 0x1) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, 0x0, 0x28, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008011}, 0x1) (async) 00:58:53 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:53 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x400300}, 0x0) 00:58:53 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000080)={0x0, 0x1, 0x7b, 0x80, {0x2, 0xfffffffffffffffe, 0x101, 0x3ae, 0x4ab}, [0x6]}}, @subvolid=0x9}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xffffffffffff8000) 00:58:53 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xac3, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:53 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) 00:58:53 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x27c5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40008) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:53 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0xd529, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:53 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000080)={0x0, 0x1, 0x7b, 0x80, {0x2, 0xfffffffffffffffe, 0x101, 0x3ae, 0x4ab}, [0x6]}}, @subvolid=0x9}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xffffffffffff8000) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000080)={0x0, 0x1, 0x7b, 0x80, {0x2, 0xfffffffffffffffe, 0x101, 0x3ae, 0x4ab}, [0x6]}}, @subvolid=0x9}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xffffffffffff8000) (async) 00:58:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x1000000}, 0x0) 00:58:53 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r4, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3e1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0xc080) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:53 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:53 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000080)={0x0, 0x1, 0x7b, 0x80, {0x2, 0xfffffffffffffffe, 0x101, 0x3ae, 0x4ab}, [0x6]}}, @subvolid=0x9}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xffffffffffff8000) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000080)={0x0, 0x1, 0x7b, 0x80, {0x2, 0xfffffffffffffffe, 0x101, 0x3ae, 0x4ab}, [0x6]}}, @subvolid=0x9}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xffffffffffff8000) (async) 00:58:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x2000000}, 0x0) 00:58:53 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:53 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:53 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) 00:58:53 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:53 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) 00:58:53 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:53 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:53 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) 00:58:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x3000000}, 0x0) 00:58:53 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) 00:58:53 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x4000000}, 0x0) 00:58:53 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:53 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000180)={0x8, 0xfffffffffffffff8, 0x7, 0x8, 0x1, 0x0, 0x8, 0x8000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:53 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:53 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) (async) 00:58:53 executing program 5: syz_clone3(&(0x7f0000000380)={0x10000080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:53 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) 00:58:53 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x5000000}, 0x0) 00:58:53 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:53 executing program 5: syz_clone3(&(0x7f0000000380)={0x10000080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x10000080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 00:58:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x6000000}, 0x0) 00:58:53 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:53 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:53 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xffffffff]}, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x7000000}, 0x0) 00:58:54 executing program 0: r0 = eventfd2(0x404, 0x800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:54 executing program 5: syz_clone3(&(0x7f0000000380)={0x10000080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:54 executing program 2: r0 = eventfd2(0x0, 0x80800) openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x8000000}, 0x0) 00:58:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:58:54 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$phonet_pipe(0x23, 0x5, 0x2) 00:58:54 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) 00:58:54 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x9000000}, 0x0) 00:58:54 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 0: r0 = eventfd2(0x404, 0x800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 0: r0 = eventfd2(0x404, 0x800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:54 executing program 4: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:58:54 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 00:58:54 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xf000000}, 0x0) 00:58:54 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 0: r0 = eventfd2(0x4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x7, 0x8) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000000)="013f3a0dbef8df1a83d8c7187147e87cc48c9b4d254b1216e558c7588a3252fe1358133ad96d") read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:54 executing program 4: syz_clone3(&(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:58:54 executing program 5: syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) 00:58:54 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x60000000}, 0x0) 00:58:54 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 0: r0 = eventfd2(0x4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async, rerun: 64) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x7, 0x8) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000000)="013f3a0dbef8df1a83d8c7187147e87cc48c9b4d254b1216e558c7588a3252fe1358133ad96d") (async, rerun: 64) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (rerun: 64) 00:58:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:58:54 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:54 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x9effffff}, 0x0) 00:58:54 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (fail_nth: 1) 00:58:54 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xefffffff}, 0x0) 00:58:54 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 00:58:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) [ 2507.723975][T28583] FAULT_INJECTION: forcing a failure. [ 2507.723975][T28583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2507.737171][T28583] CPU: 0 PID: 28583 Comm: syz-executor.5 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2507.748192][T28583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2507.758277][T28583] Call Trace: [ 2507.761559][T28583] [ 2507.764509][T28583] dump_stack_lvl+0xd6/0x122 [ 2507.769111][T28583] dump_stack+0x11/0x1b 00:58:54 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 1) 00:58:54 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xf35c0000}, 0x0) 00:58:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) [ 2507.773271][T28583] should_fail+0x23c/0x250 [ 2507.777696][T28583] should_fail_usercopy+0x16/0x20 [ 2507.782819][T28583] _copy_from_user+0x1c/0xd0 [ 2507.787564][T28583] get_timespec64+0x45/0x130 [ 2507.792274][T28583] __do_sys_pselect6+0xcb/0x250 [ 2507.797146][T28583] __x64_sys_pselect6+0x74/0x80 [ 2507.802000][T28583] do_syscall_64+0x44/0xd0 [ 2507.806425][T28583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2507.812329][T28583] RIP: 0033:0x7f4af80d5059 [ 2507.816765][T28583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2507.829738][T28595] FAULT_INJECTION: forcing a failure. [ 2507.829738][T28595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2507.836369][T28583] RSP: 002b:00007f4af724b168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2507.836394][T28583] RAX: ffffffffffffffda RBX: 00007f4af81e7f60 RCX: 00007f4af80d5059 [ 2507.836406][T28583] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000040 [ 2507.836418][T28583] RBP: 00007f4af724b1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2507.836429][T28583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2507.836439][T28583] R13: 00007ffc7a3e9b9f R14: 00007f4af724b300 R15: 0000000000022000 [ 2507.836455][T28583] [ 2507.900626][T28595] CPU: 1 PID: 28595 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2507.911760][T28595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2507.921813][T28595] Call Trace: [ 2507.925148][T28595] [ 2507.928082][T28595] dump_stack_lvl+0xd6/0x122 [ 2507.932680][T28595] dump_stack+0x11/0x1b [ 2507.936918][T28595] should_fail+0x23c/0x250 [ 2507.941339][T28595] should_fail_usercopy+0x16/0x20 [ 2507.946416][T28595] _copy_from_user+0x1c/0xd0 [ 2507.951010][T28595] sendmsg_copy_msghdr+0x60/0x2a0 [ 2507.956104][T28595] __sys_sendmsg+0x166/0x230 [ 2507.960709][T28595] __x64_sys_sendmsg+0x42/0x50 [ 2507.965476][T28595] do_syscall_64+0x44/0xd0 [ 2507.969914][T28595] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2507.975839][T28595] RIP: 0033:0x7f5ed4f3c059 [ 2507.980235][T28595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2507.999818][T28595] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2508.008231][T28595] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2508.016222][T28595] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2508.024200][T28595] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2508.032306][T28595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2508.040284][T28595] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2508.048246][T28595] 00:58:55 executing program 0: r0 = eventfd2(0x4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x7, 0x8) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000000)="013f3a0dbef8df1a83d8c7187147e87cc48c9b4d254b1216e558c7588a3252fe1358133ad96d") read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x4, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, 0x0) (async) write$eventfd(r1, &(0x7f00000000c0)=0x7, 0x8) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000000)="013f3a0dbef8df1a83d8c7187147e87cc48c9b4d254b1216e558c7588a3252fe1358133ad96d") (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:55 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (fail_nth: 2) 00:58:55 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:55 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xffffff7f}, 0x0) 00:58:55 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 2) 00:58:55 executing program 0: r0 = eventfd2(0x102, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x4, 0x800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) [ 2508.524132][T28600] FAULT_INJECTION: forcing a failure. [ 2508.524132][T28600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2508.537358][T28600] CPU: 0 PID: 28600 Comm: syz-executor.5 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2508.548546][T28600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2508.558601][T28600] Call Trace: [ 2508.561884][T28600] [ 2508.564808][T28600] dump_stack_lvl+0xd6/0x122 [ 2508.569412][T28600] dump_stack+0x11/0x1b 00:58:55 executing program 0: r0 = eventfd2(0x102, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) eventfd2(0x4, 0x800) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 00:58:55 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xffffff9e}, 0x0) 00:58:55 executing program 0: r0 = eventfd2(0x102, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x4, 0x800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) eventfd2(0x102, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) eventfd2(0x4, 0x800) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) (async) 00:58:55 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xffffffef}, 0x0) [ 2508.573573][T28600] should_fail+0x23c/0x250 [ 2508.577991][T28600] should_fail_usercopy+0x16/0x20 [ 2508.583021][T28600] _copy_from_user+0x1c/0xd0 [ 2508.587649][T28600] core_sys_select+0x20c/0x6d0 [ 2508.592498][T28600] ? set_user_sigmask+0x7d/0x130 [ 2508.597487][T28600] __do_sys_pselect6+0x1ea/0x250 [ 2508.602429][T28600] __x64_sys_pselect6+0x74/0x80 [ 2508.607343][T28600] do_syscall_64+0x44/0xd0 [ 2508.611763][T28600] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2508.617666][T28600] RIP: 0033:0x7f4af80d5059 00:58:55 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xfffffff0}, 0x0) 00:58:55 executing program 0: r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) [ 2508.622082][T28600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2508.641713][T28600] RSP: 002b:00007f4af724b168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2508.650134][T28600] RAX: ffffffffffffffda RBX: 00007f4af81e7f60 RCX: 00007f4af80d5059 [ 2508.658112][T28600] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000040 [ 2508.666086][T28600] RBP: 00007f4af724b1d0 R08: 00000000200001c0 R09: 0000000000000000 00:58:55 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (fail_nth: 3) [ 2508.674062][T28600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2508.682039][T28600] R13: 00007ffc7a3e9b9f R14: 00007f4af724b300 R15: 0000000000022000 [ 2508.690014][T28600] [ 2508.694302][T28643] FAULT_INJECTION: forcing a failure. [ 2508.694302][T28643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2508.707349][T28643] CPU: 0 PID: 28643 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2508.718413][T28643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2508.718727][T28646] FAULT_INJECTION: forcing a failure. [ 2508.718727][T28646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2508.728496][T28643] Call Trace: [ 2508.728507][T28643] [ 2508.728513][T28643] dump_stack_lvl+0xd6/0x122 [ 2508.728543][T28643] dump_stack+0x11/0x1b [ 2508.756424][T28643] should_fail+0x23c/0x250 [ 2508.760840][T28643] should_fail_usercopy+0x16/0x20 [ 2508.765864][T28643] _copy_from_user+0x1c/0xd0 [ 2508.770492][T28643] iovec_from_user+0xc4/0x2e0 [ 2508.775188][T28643] ? terminate_walk+0x263/0x280 [ 2508.780028][T28643] __import_iovec+0x57/0x2d0 [ 2508.784613][T28643] import_iovec+0xb8/0xd0 [ 2508.788933][T28643] sendmsg_copy_msghdr+0x275/0x2a0 [ 2508.794036][T28643] __sys_sendmsg+0x166/0x230 [ 2508.798618][T28643] __x64_sys_sendmsg+0x42/0x50 [ 2508.803387][T28643] do_syscall_64+0x44/0xd0 [ 2508.807816][T28643] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2508.813710][T28643] RIP: 0033:0x7f5ed4f3c059 [ 2508.818117][T28643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2508.837729][T28643] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2508.846133][T28643] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2508.854121][T28643] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2508.862132][T28643] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2508.870110][T28643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2508.878148][T28643] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2508.886161][T28643] [ 2508.889167][T28646] CPU: 1 PID: 28646 Comm: syz-executor.5 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2508.900264][T28646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2508.910405][T28646] Call Trace: [ 2508.913667][T28646] [ 2508.916599][T28646] dump_stack_lvl+0xd6/0x122 [ 2508.921232][T28646] dump_stack+0x11/0x1b [ 2508.925366][T28646] should_fail+0x23c/0x250 [ 2508.929759][T28646] should_fail_usercopy+0x16/0x20 [ 2508.934798][T28646] _copy_from_user+0x1c/0xd0 [ 2508.939385][T28646] core_sys_select+0x298/0x6d0 [ 2508.944236][T28646] ? set_user_sigmask+0x7d/0x130 [ 2508.949154][T28646] __do_sys_pselect6+0x1ea/0x250 [ 2508.954069][T28646] __x64_sys_pselect6+0x74/0x80 [ 2508.958897][T28646] do_syscall_64+0x44/0xd0 [ 2508.963334][T28646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2508.969227][T28646] RIP: 0033:0x7f4af80d5059 [ 2508.973618][T28646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2508.993237][T28646] RSP: 002b:00007f4af724b168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2509.001628][T28646] RAX: ffffffffffffffda RBX: 00007f4af81e7f60 RCX: 00007f4af80d5059 [ 2509.009577][T28646] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000040 [ 2509.017544][T28646] RBP: 00007f4af724b1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2509.025557][T28646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2509.033514][T28646] R13: 00007ffc7a3e9b9f R14: 00007f4af724b300 R15: 0000000000022000 [ 2509.041492][T28646] 00:58:56 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:56 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:58:56 executing program 0: r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:56 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x3000000000000}, 0x0) 00:58:56 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 3) 00:58:56 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (fail_nth: 4) [ 2509.539253][T28653] FAULT_INJECTION: forcing a failure. [ 2509.539253][T28653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2509.545554][T28656] FAULT_INJECTION: forcing a failure. [ 2509.545554][T28656] name failslab, interval 1, probability 0, space 0, times 0 [ 2509.552352][T28653] CPU: 1 PID: 28653 Comm: syz-executor.5 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2509.575885][T28653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.585937][T28653] Call Trace: [ 2509.589284][T28653] [ 2509.592197][T28653] dump_stack_lvl+0xd6/0x122 [ 2509.596907][T28653] dump_stack+0x11/0x1b [ 2509.601058][T28653] should_fail+0x23c/0x250 [ 2509.605462][T28653] should_fail_usercopy+0x16/0x20 [ 2509.610516][T28653] core_sys_select+0x476/0x6d0 [ 2509.615271][T28653] ? set_user_sigmask+0x7d/0x130 [ 2509.620300][T28653] __do_sys_pselect6+0x1ea/0x250 [ 2509.625251][T28653] __x64_sys_pselect6+0x74/0x80 [ 2509.630085][T28653] do_syscall_64+0x44/0xd0 [ 2509.634567][T28653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2509.640452][T28653] RIP: 0033:0x7f4af80d5059 [ 2509.644852][T28653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2509.664444][T28653] RSP: 002b:00007f4af724b168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2509.672858][T28653] RAX: ffffffffffffffda RBX: 00007f4af81e7f60 RCX: 00007f4af80d5059 [ 2509.680880][T28653] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000040 00:58:56 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x0, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) [ 2509.688937][T28653] RBP: 00007f4af724b1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2509.696892][T28653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2509.704906][T28653] R13: 00007ffc7a3e9b9f R14: 00007f4af724b300 R15: 0000000000022000 [ 2509.712866][T28653] [ 2509.715869][T28656] CPU: 0 PID: 28656 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2509.726924][T28656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.737026][T28656] Call Trace: 00:58:56 executing program 0: r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:56 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x40030000000000}, 0x0) 00:58:56 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x100000000000000}, 0x0) 00:58:56 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (fail_nth: 5) [ 2509.740302][T28656] [ 2509.743292][T28656] dump_stack_lvl+0xd6/0x122 [ 2509.747894][T28656] dump_stack+0x11/0x1b [ 2509.752068][T28656] should_fail+0x23c/0x250 [ 2509.756489][T28656] __should_failslab+0x81/0x90 [ 2509.761261][T28656] should_failslab+0x5/0x20 [ 2509.765767][T28656] kmem_cache_alloc_node+0x61/0x2d0 [ 2509.770975][T28656] ? __alloc_skb+0xf0/0x450 [ 2509.775601][T28656] __alloc_skb+0xf0/0x450 [ 2509.780005][T28656] netlink_sendmsg+0x4fe/0x850 [ 2509.784931][T28656] ? netlink_getsockopt+0x720/0x720 [ 2509.787981][T28666] FAULT_INJECTION: forcing a failure. [ 2509.787981][T28666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2509.790160][T28656] ____sys_sendmsg+0x39a/0x510 [ 2509.790194][T28656] __sys_sendmsg+0x195/0x230 [ 2509.812499][T28656] __x64_sys_sendmsg+0x42/0x50 [ 2509.817255][T28656] do_syscall_64+0x44/0xd0 [ 2509.821791][T28656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2509.827742][T28656] RIP: 0033:0x7f5ed4f3c059 [ 2509.832288][T28656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2509.851881][T28656] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2509.860276][T28656] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2509.868233][T28656] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2509.876189][T28656] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2509.884143][T28656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2509.892098][T28656] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2509.900055][T28656] [ 2509.903057][T28666] CPU: 1 PID: 28666 Comm: syz-executor.5 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2509.914245][T28666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.924297][T28666] Call Trace: [ 2509.927655][T28666] [ 2509.930583][T28666] dump_stack_lvl+0xd6/0x122 [ 2509.935208][T28666] dump_stack+0x11/0x1b 00:58:56 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 4) [ 2509.939415][T28666] should_fail+0x23c/0x250 [ 2509.943906][T28666] should_fail_usercopy+0x16/0x20 [ 2509.948941][T28666] core_sys_select+0x578/0x6d0 [ 2509.953792][T28666] ? set_user_sigmask+0x7d/0x130 [ 2509.958770][T28666] __do_sys_pselect6+0x1ea/0x250 [ 2509.963714][T28666] __x64_sys_pselect6+0x74/0x80 [ 2509.968591][T28666] do_syscall_64+0x44/0xd0 [ 2509.973014][T28666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2509.978921][T28666] RIP: 0033:0x7f4af80d5059 [ 2509.983333][T28666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2510.000312][T28670] FAULT_INJECTION: forcing a failure. [ 2510.000312][T28670] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.002957][T28666] RSP: 002b:00007f4af724b168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2510.023922][T28666] RAX: ffffffffffffffda RBX: 00007f4af81e7f60 RCX: 00007f4af80d5059 [ 2510.031886][T28666] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000040 [ 2510.039876][T28666] RBP: 00007f4af724b1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2510.047874][T28666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2510.055829][T28666] R13: 00007ffc7a3e9b9f R14: 00007f4af724b300 R15: 0000000000022000 [ 2510.063942][T28666] [ 2510.066953][T28670] CPU: 0 PID: 28670 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2510.078083][T28670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.088201][T28670] Call Trace: [ 2510.091462][T28670] [ 2510.094379][T28670] dump_stack_lvl+0xd6/0x122 [ 2510.098960][T28670] dump_stack+0x11/0x1b [ 2510.103169][T28670] should_fail+0x23c/0x250 [ 2510.107617][T28670] __should_failslab+0x81/0x90 [ 2510.112366][T28670] should_failslab+0x5/0x20 [ 2510.116858][T28670] kmem_cache_alloc_node_trace+0x61/0x310 [ 2510.122558][T28670] ? __kmalloc_node_track_caller+0x30/0x40 [ 2510.128379][T28670] __kmalloc_node_track_caller+0x30/0x40 [ 2510.134113][T28670] ? netlink_sendmsg+0x4fe/0x850 [ 2510.139105][T28670] __alloc_skb+0x19d/0x450 [ 2510.143580][T28670] netlink_sendmsg+0x4fe/0x850 [ 2510.148327][T28670] ? netlink_getsockopt+0x720/0x720 [ 2510.153536][T28670] ____sys_sendmsg+0x39a/0x510 [ 2510.158521][T28670] __sys_sendmsg+0x195/0x230 [ 2510.163101][T28670] __x64_sys_sendmsg+0x42/0x50 [ 2510.167852][T28670] do_syscall_64+0x44/0xd0 [ 2510.172246][T28670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2510.178123][T28670] RIP: 0033:0x7f5ed4f3c059 [ 2510.182538][T28670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2510.202135][T28670] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2510.210598][T28670] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2510.218547][T28670] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2510.226498][T28670] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2510.234446][T28670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2510.242402][T28670] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2510.250364][T28670] 00:58:57 executing program 2: eventfd2(0x0, 0x80800) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) 00:58:57 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x200000000000000}, 0x0) 00:58:57 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 1) 00:58:57 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x0, 0xe, {0xffff, @usage=0xee4c, 0x0, 0x9, 0x0, 0x49, 0x2, 0x7f, 0x80, @usage=0x1, 0x7f, 0x4, [0x0, 0x9, 0x8, 0x8, 0x7, 0x4]}, {0x6, @usage=0x4, 0x0, 0x4, 0x6, 0x7f, 0x10001, 0x72, 0x86, @usage=0x6, 0x2ac00000, 0x20, [0x6, 0x0, 0x0, 0x10001, 0x81, 0x3]}, {0x5, @usage=0xfffffffffffffffd, 0x0, 0xffffffffffff8000, 0x100, 0x4, 0x2, 0x7320, 0xc9, @usage=0x4, 0xff, 0x8, [0x400, 0x1, 0x0, 0x5, 0x3, 0x4]}, {0x8, 0x2dcb, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r1, 0xffffffffffffffff, 0x1, [0x1, 0x7ff, 0x1f, 0x7, 0x8], [0x1, 0x0, 0x3, 0x1, 0x3, 0x3, 0x0, 0x4b6411dc, 0x84, 0x8, 0x134b, 0x8000, 0x4, 0x800, 0xa24, 0x5, 0x7, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x4, 0x2787e75d, 0x5e, 0x2, 0x7, 0x3, 0x4, 0x1, 0xcb2fbce, 0x2, 0x6, 0xe251, 0x9, 0x0, 0x200, 0x3, 0x80000001, 0xa6, 0x9ba, 0x1, 0xef8, 0x0, 0x1, 0x7, 0xffffffff, 0x0, 0x587d, 0xffffffffffffff4b, 0x1, 0x3ff, 0x100000000, 0xfffffffffffffffe, 0x5, 0x256, 0x80, 0xcb, 0x5, 0x7ff, 0x5, 0xffffffff, 0x7cc4, 0x5, 0x0, 0xffffffffffff8001, 0x1, 0xb6f9, 0x0, 0x200, 0x472662d5, 0x401, 0xffffffffffffffff, 0x6, 0x0, 0x88c, 0x6, 0x3, 0x133, 0x2, 0x3ff, 0xffffffff, 0x3, 0x81, 0x9, 0x0, 0x7, 0x2, 0x1c5, 0x61b, 0x6, 0x800, 0x2f02, 0x0, 0x4, 0x5, 0xfffffffffffffc01, 0xffffffffffffe44d, 0x4, 0x2, 0x6, 0x7, 0xdb77, 0x80000000, 0x20, 0x3f, 0x7ff, 0x9, 0x2, 0x7fff, 0x7fff, 0xff, 0x1, 0x800, 0x20000, 0x80000000, 0x4, 0x100000000, 0x6, 0x0, 0xff, 0x10000000000, 0x400, 0x2]}) 00:58:57 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (fail_nth: 6) 00:58:57 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 5) [ 2510.761703][T28677] FAULT_INJECTION: forcing a failure. [ 2510.761703][T28677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2510.765598][T28680] FAULT_INJECTION: forcing a failure. [ 2510.765598][T28680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2510.774830][T28677] CPU: 1 PID: 28677 Comm: syz-executor.5 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2510.798813][T28677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.808859][T28677] Call Trace: [ 2510.812123][T28677] [ 2510.815041][T28677] dump_stack_lvl+0xd6/0x122 [ 2510.819625][T28677] dump_stack+0x11/0x1b [ 2510.823779][T28677] should_fail+0x23c/0x250 [ 2510.828243][T28677] should_fail_usercopy+0x16/0x20 [ 2510.833254][T28677] _copy_to_user+0x1c/0x90 [ 2510.837676][T28677] put_timespec64+0x51/0x90 [ 2510.842167][T28677] poll_select_finish+0x2ff/0x3f0 [ 2510.847179][T28677] __do_sys_pselect6+0x1fe/0x250 [ 2510.852103][T28677] __x64_sys_pselect6+0x74/0x80 [ 2510.856947][T28677] do_syscall_64+0x44/0xd0 [ 2510.861399][T28677] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2510.867350][T28677] RIP: 0033:0x7f4af80d5059 [ 2510.871748][T28677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2510.891340][T28677] RSP: 002b:00007f4af724b168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2510.899743][T28677] RAX: ffffffffffffffda RBX: 00007f4af81e7f60 RCX: 00007f4af80d5059 [ 2510.907705][T28677] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000040 [ 2510.915764][T28677] RBP: 00007f4af724b1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2510.923800][T28677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2510.931757][T28677] R13: 00007ffc7a3e9b9f R14: 00007f4af724b300 R15: 0000000000022000 [ 2510.939718][T28677] [ 2510.942746][T28680] CPU: 0 PID: 28680 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2510.947016][T28675] FAULT_INJECTION: forcing a failure. [ 2510.947016][T28675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2510.953771][T28680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.953784][T28680] Call Trace: [ 2510.953791][T28680] [ 2510.953797][T28680] dump_stack_lvl+0xd6/0x122 [ 2510.987559][T28680] dump_stack+0x11/0x1b [ 2510.991710][T28680] should_fail+0x23c/0x250 [ 2510.996112][T28680] should_fail_usercopy+0x16/0x20 [ 2511.001134][T28680] _copy_from_user+0x1c/0xd0 [ 2511.005712][T28680] sendmsg_copy_msghdr+0x60/0x2a0 [ 2511.010726][T28680] __sys_sendmsg+0x166/0x230 [ 2511.015331][T28680] __x64_sys_sendmsg+0x42/0x50 [ 2511.020080][T28680] do_syscall_64+0x44/0xd0 [ 2511.024483][T28680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.030367][T28680] RIP: 0033:0x7fea9f4a9059 [ 2511.034793][T28680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2511.054383][T28680] RSP: 002b:00007fea9e61f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2511.062778][T28680] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f4a9059 [ 2511.070807][T28680] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2511.078766][T28680] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.086720][T28680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2511.094677][T28680] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2511.102660][T28680] 00:58:57 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x0, 0xe, {0xffff, @usage=0xee4c, 0x0, 0x9, 0x0, 0x49, 0x2, 0x7f, 0x80, @usage=0x1, 0x7f, 0x4, [0x0, 0x9, 0x8, 0x8, 0x7, 0x4]}, {0x6, @usage=0x4, 0x0, 0x4, 0x6, 0x7f, 0x10001, 0x72, 0x86, @usage=0x6, 0x2ac00000, 0x20, [0x6, 0x0, 0x0, 0x10001, 0x81, 0x3]}, {0x5, @usage=0xfffffffffffffffd, 0x0, 0xffffffffffff8000, 0x100, 0x4, 0x2, 0x7320, 0xc9, @usage=0x4, 0xff, 0x8, [0x400, 0x1, 0x0, 0x5, 0x3, 0x4]}, {0x8, 0x2dcb, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r1, 0xffffffffffffffff, 0x1, [0x1, 0x7ff, 0x1f, 0x7, 0x8], [0x1, 0x0, 0x3, 0x1, 0x3, 0x3, 0x0, 0x4b6411dc, 0x84, 0x8, 0x134b, 0x8000, 0x4, 0x800, 0xa24, 0x5, 0x7, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x4, 0x2787e75d, 0x5e, 0x2, 0x7, 0x3, 0x4, 0x1, 0xcb2fbce, 0x2, 0x6, 0xe251, 0x9, 0x0, 0x200, 0x3, 0x80000001, 0xa6, 0x9ba, 0x1, 0xef8, 0x0, 0x1, 0x7, 0xffffffff, 0x0, 0x587d, 0xffffffffffffff4b, 0x1, 0x3ff, 0x100000000, 0xfffffffffffffffe, 0x5, 0x256, 0x80, 0xcb, 0x5, 0x7ff, 0x5, 0xffffffff, 0x7cc4, 0x5, 0x0, 0xffffffffffff8001, 0x1, 0xb6f9, 0x0, 0x200, 0x472662d5, 0x401, 0xffffffffffffffff, 0x6, 0x0, 0x88c, 0x6, 0x3, 0x133, 0x2, 0x3ff, 0xffffffff, 0x3, 0x81, 0x9, 0x0, 0x7, 0x2, 0x1c5, 0x61b, 0x6, 0x800, 0x2f02, 0x0, 0x4, 0x5, 0xfffffffffffffc01, 0xffffffffffffe44d, 0x4, 0x2, 0x6, 0x7, 0xdb77, 0x80000000, 0x20, 0x3f, 0x7ff, 0x9, 0x2, 0x7fff, 0x7fff, 0xff, 0x1, 0x800, 0x20000, 0x80000000, 0x4, 0x100000000, 0x6, 0x0, 0xff, 0x10000000000, 0x400, 0x2]}) 00:58:57 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 2) 00:58:57 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (fail_nth: 7) 00:58:57 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x300000000000000}, 0x0) [ 2511.105665][T28675] CPU: 1 PID: 28675 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2511.116773][T28675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.126827][T28675] Call Trace: [ 2511.130104][T28675] [ 2511.133026][T28675] dump_stack_lvl+0xd6/0x122 [ 2511.137641][T28675] dump_stack+0x11/0x1b [ 2511.141802][T28675] should_fail+0x23c/0x250 [ 2511.146262][T28675] should_fail_usercopy+0x16/0x20 [ 2511.151288][T28675] _copy_from_iter+0x131/0xa00 [ 2511.156092][T28675] ? check_stack_object+0x61/0x70 00:58:57 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x0, 0xe, {0xffff, @usage=0xee4c, 0x0, 0x9, 0x0, 0x49, 0x2, 0x7f, 0x80, @usage=0x1, 0x7f, 0x4, [0x0, 0x9, 0x8, 0x8, 0x7, 0x4]}, {0x6, @usage=0x4, 0x0, 0x4, 0x6, 0x7f, 0x10001, 0x72, 0x86, @usage=0x6, 0x2ac00000, 0x20, [0x6, 0x0, 0x0, 0x10001, 0x81, 0x3]}, {0x5, @usage=0xfffffffffffffffd, 0x0, 0xffffffffffff8000, 0x100, 0x4, 0x2, 0x7320, 0xc9, @usage=0x4, 0xff, 0x8, [0x400, 0x1, 0x0, 0x5, 0x3, 0x4]}, {0x8, 0x2dcb, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r1, 0xffffffffffffffff, 0x1, [0x1, 0x7ff, 0x1f, 0x7, 0x8], [0x1, 0x0, 0x3, 0x1, 0x3, 0x3, 0x0, 0x4b6411dc, 0x84, 0x8, 0x134b, 0x8000, 0x4, 0x800, 0xa24, 0x5, 0x7, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x4, 0x2787e75d, 0x5e, 0x2, 0x7, 0x3, 0x4, 0x1, 0xcb2fbce, 0x2, 0x6, 0xe251, 0x9, 0x0, 0x200, 0x3, 0x80000001, 0xa6, 0x9ba, 0x1, 0xef8, 0x0, 0x1, 0x7, 0xffffffff, 0x0, 0x587d, 0xffffffffffffff4b, 0x1, 0x3ff, 0x100000000, 0xfffffffffffffffe, 0x5, 0x256, 0x80, 0xcb, 0x5, 0x7ff, 0x5, 0xffffffff, 0x7cc4, 0x5, 0x0, 0xffffffffffff8001, 0x1, 0xb6f9, 0x0, 0x200, 0x472662d5, 0x401, 0xffffffffffffffff, 0x6, 0x0, 0x88c, 0x6, 0x3, 0x133, 0x2, 0x3ff, 0xffffffff, 0x3, 0x81, 0x9, 0x0, 0x7, 0x2, 0x1c5, 0x61b, 0x6, 0x800, 0x2f02, 0x0, 0x4, 0x5, 0xfffffffffffffc01, 0xffffffffffffe44d, 0x4, 0x2, 0x6, 0x7, 0xdb77, 0x80000000, 0x20, 0x3f, 0x7ff, 0x9, 0x2, 0x7fff, 0x7fff, 0xff, 0x1, 0x800, 0x20000, 0x80000000, 0x4, 0x100000000, 0x6, 0x0, 0xff, 0x10000000000, 0x400, 0x2]}) 00:58:57 executing program 2: eventfd2(0x0, 0x80800) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) 00:58:57 executing program 0: r0 = eventfd2(0x4, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:58:57 executing program 2: eventfd2(0x0, 0x80800) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) [ 2511.161173][T28675] ? __virt_addr_valid+0x15a/0x1a0 [ 2511.166364][T28675] ? __check_object_size+0x22a/0x2d0 [ 2511.171682][T28675] netlink_sendmsg+0x5bb/0x850 [ 2511.176526][T28675] ? netlink_getsockopt+0x720/0x720 [ 2511.181813][T28675] ____sys_sendmsg+0x39a/0x510 [ 2511.186663][T28675] __sys_sendmsg+0x195/0x230 [ 2511.191264][T28675] __x64_sys_sendmsg+0x42/0x50 [ 2511.196027][T28675] do_syscall_64+0x44/0xd0 [ 2511.200448][T28675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.206347][T28675] RIP: 0033:0x7f5ed4f3c059 00:58:57 executing program 0: r0 = eventfd2(0x4, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x4, 0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:58:57 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, 0x0, 0x0) [ 2511.210762][T28675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2511.230373][T28675] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2511.238824][T28675] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2511.246809][T28675] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2511.254787][T28675] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 00:58:57 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, 0x0, 0x0) [ 2511.262758][T28675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2511.270728][T28675] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2511.278705][T28675] [ 2511.288730][T28703] FAULT_INJECTION: forcing a failure. [ 2511.288730][T28703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2511.291393][T28706] FAULT_INJECTION: forcing a failure. [ 2511.291393][T28706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2511.301914][T28703] CPU: 0 PID: 28703 Comm: syz-executor.5 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2511.325899][T28703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.335940][T28703] Call Trace: [ 2511.339202][T28703] [ 2511.342117][T28703] dump_stack_lvl+0xd6/0x122 [ 2511.346711][T28703] dump_stack+0x11/0x1b [ 2511.350856][T28703] should_fail+0x23c/0x250 [ 2511.355261][T28703] should_fail_usercopy+0x16/0x20 [ 2511.360269][T28703] _copy_to_user+0x1c/0x90 [ 2511.364671][T28703] simple_read_from_buffer+0xab/0x120 [ 2511.370141][T28703] proc_fail_nth_read+0x10d/0x150 [ 2511.375179][T28703] ? proc_fault_inject_write+0x230/0x230 [ 2511.380804][T28703] vfs_read+0x1e6/0x750 [ 2511.384944][T28703] ? __fget_files+0x1d2/0x210 [ 2511.389613][T28703] ksys_read+0xd9/0x190 [ 2511.393768][T28703] __x64_sys_read+0x3e/0x50 [ 2511.398265][T28703] do_syscall_64+0x44/0xd0 [ 2511.402668][T28703] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.408549][T28703] RIP: 0033:0x7f4af8087c0c [ 2511.412950][T28703] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2511.432544][T28703] RSP: 002b:00007f4af724b160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2511.441054][T28703] RAX: ffffffffffffffda RBX: 00007f4af81e7f60 RCX: 00007f4af8087c0c [ 2511.449088][T28703] RDX: 000000000000000f RSI: 00007f4af724b1e0 RDI: 0000000000000004 [ 2511.457043][T28703] RBP: 00007f4af724b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.465046][T28703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2511.473010][T28703] R13: 00007ffc7a3e9b9f R14: 00007f4af724b300 R15: 0000000000022000 [ 2511.480970][T28703] [ 2511.484022][T28706] CPU: 1 PID: 28706 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2511.495103][T28706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.505159][T28706] Call Trace: [ 2511.508437][T28706] [ 2511.511364][T28706] dump_stack_lvl+0xd6/0x122 [ 2511.515963][T28706] dump_stack+0x11/0x1b [ 2511.518127][T28711] FAULT_INJECTION: forcing a failure. [ 2511.518127][T28711] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.520148][T28706] should_fail+0x23c/0x250 [ 2511.520172][T28706] should_fail_usercopy+0x16/0x20 [ 2511.542121][T28706] _copy_from_user+0x1c/0xd0 [ 2511.546705][T28706] iovec_from_user+0xc4/0x2e0 [ 2511.551434][T28706] ? terminate_walk+0x263/0x280 [ 2511.556330][T28706] __import_iovec+0x57/0x2d0 [ 2511.561019][T28706] import_iovec+0xb8/0xd0 [ 2511.565383][T28706] sendmsg_copy_msghdr+0x275/0x2a0 [ 2511.570518][T28706] __sys_sendmsg+0x166/0x230 [ 2511.575131][T28706] __x64_sys_sendmsg+0x42/0x50 [ 2511.579921][T28706] do_syscall_64+0x44/0xd0 [ 2511.584324][T28706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.590205][T28706] RIP: 0033:0x7fea9f4a9059 [ 2511.594601][T28706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:58:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 6) 00:58:58 executing program 0: r0 = eventfd2(0x4, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x4, 0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) [ 2511.614239][T28706] RSP: 002b:00007fea9e61f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2511.622634][T28706] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f4a9059 [ 2511.630593][T28706] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2511.638549][T28706] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.646525][T28706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2511.654533][T28706] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2511.662491][T28706] [ 2511.665492][T28711] CPU: 0 PID: 28711 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2511.676535][T28711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.686608][T28711] Call Trace: [ 2511.689891][T28711] [ 2511.692814][T28711] dump_stack_lvl+0xd6/0x122 [ 2511.697423][T28711] dump_stack+0x11/0x1b [ 2511.697606][T28715] FAULT_INJECTION: forcing a failure. [ 2511.697606][T28715] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.701686][T28711] should_fail+0x23c/0x250 [ 2511.701711][T28711] ? skb_clone+0x12c/0x1f0 [ 2511.723059][T28711] __should_failslab+0x81/0x90 [ 2511.727902][T28711] should_failslab+0x5/0x20 [ 2511.732395][T28711] kmem_cache_alloc+0x4f/0x320 [ 2511.737184][T28711] skb_clone+0x12c/0x1f0 [ 2511.741525][T28711] netlink_deliver_tap+0x2da/0x510 [ 2511.746681][T28711] netlink_unicast+0x5e4/0x6d0 [ 2511.751497][T28711] netlink_sendmsg+0x728/0x850 [ 2511.756301][T28711] ? netlink_getsockopt+0x720/0x720 [ 2511.761486][T28711] ____sys_sendmsg+0x39a/0x510 [ 2511.766239][T28711] __sys_sendmsg+0x195/0x230 [ 2511.770833][T28711] __x64_sys_sendmsg+0x42/0x50 [ 2511.775606][T28711] do_syscall_64+0x44/0xd0 [ 2511.780009][T28711] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.785970][T28711] RIP: 0033:0x7f5ed4f3c059 [ 2511.790369][T28711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:58:58 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 3) 00:58:58 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, 0x0, 0x0) 00:58:58 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x400000000000000}, 0x0) 00:58:58 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:58:58 executing program 0: eventfd2(0x4, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) r2 = eventfd2(0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x79}, @void, @val={0xc, 0x99, {0x10f, 0x3a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0xc0c0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0) r5 = eventfd2(0x0, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, 0x0) read$eventfd(r6, &(0x7f0000000800), 0x8) syz_clone3(&(0x7f0000000380)={0x2000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x1d}, &(0x7f0000000240)=""/83, 0x53, &(0x7f00000002c0)=""/113, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, 0x0) read$eventfd(r5, &(0x7f0000000180), 0x8) [ 2511.809959][T28711] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2511.818400][T28711] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2511.826413][T28711] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2511.834509][T28711] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.842463][T28711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2511.850490][T28711] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2511.858447][T28711] 00:58:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 7) 00:58:58 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 2511.861452][T28715] CPU: 1 PID: 28715 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2511.872513][T28715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.882584][T28715] Call Trace: [ 2511.885861][T28715] [ 2511.888791][T28715] dump_stack_lvl+0xd6/0x122 [ 2511.893417][T28715] dump_stack+0x11/0x1b [ 2511.897583][T28715] should_fail+0x23c/0x250 [ 2511.901033][T28724] FAULT_INJECTION: forcing a failure. [ 2511.901033][T28724] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.902014][T28715] __should_failslab+0x81/0x90 [ 2511.919334][T28715] should_failslab+0x5/0x20 [ 2511.923861][T28715] kmem_cache_alloc_node+0x61/0x2d0 [ 2511.929053][T28715] ? __alloc_skb+0xf0/0x450 [ 2511.933583][T28715] __alloc_skb+0xf0/0x450 [ 2511.937912][T28715] netlink_sendmsg+0x4fe/0x850 [ 2511.942671][T28715] ? netlink_getsockopt+0x720/0x720 [ 2511.947921][T28715] ____sys_sendmsg+0x39a/0x510 [ 2511.952677][T28715] __sys_sendmsg+0x195/0x230 [ 2511.957260][T28715] __x64_sys_sendmsg+0x42/0x50 [ 2511.962016][T28715] do_syscall_64+0x44/0xd0 [ 2511.966431][T28715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.972329][T28715] RIP: 0033:0x7fea9f4a9059 [ 2511.976732][T28715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2511.996372][T28715] RSP: 002b:00007fea9e61f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2512.004844][T28715] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f4a9059 [ 2512.012799][T28715] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2512.020756][T28715] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2512.028731][T28715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2512.036766][T28715] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2512.044770][T28715] [ 2512.047776][T28724] CPU: 0 PID: 28724 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 00:58:58 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x500000000000000}, 0x0) 00:58:58 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:58:58 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 4) 00:58:58 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x600000000000000}, 0x0) [ 2512.058800][T28724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.068900][T28724] Call Trace: [ 2512.072180][T28724] [ 2512.075102][T28724] dump_stack_lvl+0xd6/0x122 [ 2512.079693][T28724] dump_stack+0x11/0x1b [ 2512.083896][T28724] should_fail+0x23c/0x250 [ 2512.088311][T28724] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 2512.094749][T28724] __should_failslab+0x81/0x90 [ 2512.099573][T28724] should_failslab+0x5/0x20 [ 2512.104133][T28724] __kmalloc+0x6f/0x370 [ 2512.108325][T28724] ? selinux_capable+0x34/0x40 00:58:58 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x700000000000000}, 0x0) 00:58:58 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x800000000000000}, 0x0) 00:58:58 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x900000000000000}, 0x0) [ 2512.113094][T28724] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 2512.119215][T28724] ? ns_capable+0x86/0xb0 [ 2512.123632][T28724] genl_rcv_msg+0x5f1/0x860 [ 2512.128145][T28724] ? nl80211_set_reg+0x5b0/0x5b0 [ 2512.133086][T28724] netlink_rcv_skb+0x14e/0x250 [ 2512.137908][T28724] ? genl_bind+0x1d0/0x1d0 [ 2512.142338][T28724] genl_rcv+0x24/0x40 [ 2512.146323][T28724] netlink_unicast+0x602/0x6d0 [ 2512.151093][T28724] netlink_sendmsg+0x728/0x850 [ 2512.155876][T28724] ? netlink_getsockopt+0x720/0x720 [ 2512.161245][T28724] ____sys_sendmsg+0x39a/0x510 00:58:58 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xf00000000000000}, 0x0) [ 2512.166021][T28724] __sys_sendmsg+0x195/0x230 [ 2512.170630][T28724] __x64_sys_sendmsg+0x42/0x50 [ 2512.175455][T28724] do_syscall_64+0x44/0xd0 [ 2512.179946][T28724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2512.185852][T28724] RIP: 0033:0x7f5ed4f3c059 [ 2512.190270][T28724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2512.196676][T28746] FAULT_INJECTION: forcing a failure. [ 2512.196676][T28746] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.209876][T28724] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2512.209900][T28724] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2512.209912][T28724] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2512.209924][T28724] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2512.209935][T28724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2512.262689][T28724] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2512.270650][T28724] [ 2512.273656][T28746] CPU: 1 PID: 28746 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2512.284726][T28746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.294859][T28746] Call Trace: [ 2512.298141][T28746] [ 2512.300673][T28748] FAULT_INJECTION: forcing a failure. [ 2512.300673][T28748] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.301066][T28746] dump_stack_lvl+0xd6/0x122 [ 2512.318266][T28746] dump_stack+0x11/0x1b [ 2512.322455][T28746] should_fail+0x23c/0x250 [ 2512.326914][T28746] __should_failslab+0x81/0x90 [ 2512.331668][T28746] should_failslab+0x5/0x20 [ 2512.336167][T28746] kmem_cache_alloc_node_trace+0x61/0x310 [ 2512.341876][T28746] ? __kmalloc_node_track_caller+0x30/0x40 [ 2512.347718][T28746] __kmalloc_node_track_caller+0x30/0x40 [ 2512.353344][T28746] ? netlink_sendmsg+0x4fe/0x850 [ 2512.358305][T28746] __alloc_skb+0x19d/0x450 [ 2512.362708][T28746] netlink_sendmsg+0x4fe/0x850 [ 2512.367488][T28746] ? netlink_getsockopt+0x720/0x720 [ 2512.372725][T28746] ____sys_sendmsg+0x39a/0x510 [ 2512.377540][T28746] __sys_sendmsg+0x195/0x230 [ 2512.382125][T28746] __x64_sys_sendmsg+0x42/0x50 [ 2512.386975][T28746] do_syscall_64+0x44/0xd0 [ 2512.391379][T28746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2512.397282][T28746] RIP: 0033:0x7fea9f4a9059 [ 2512.401688][T28746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2512.421321][T28746] RSP: 002b:00007fea9e5fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2512.429716][T28746] RAX: ffffffffffffffda RBX: 00007fea9f5bc030 RCX: 00007fea9f4a9059 [ 2512.437679][T28746] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2512.445647][T28746] RBP: 00007fea9e5fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2512.453604][T28746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2512.461633][T28746] R13: 00007ffc81c8b36f R14: 00007fea9e5fe300 R15: 0000000000022000 00:58:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 8) [ 2512.469593][T28746] [ 2512.472599][T28748] CPU: 0 PID: 28748 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2512.483622][T28748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.493674][T28748] Call Trace: [ 2512.496949][T28748] [ 2512.499876][T28748] dump_stack_lvl+0xd6/0x122 [ 2512.504479][T28748] dump_stack+0x11/0x1b [ 2512.508635][T28748] should_fail+0x23c/0x250 [ 2512.513030][T28748] __should_failslab+0x81/0x90 [ 2512.517841][T28748] should_failslab+0x5/0x20 [ 2512.522326][T28748] kmem_cache_alloc_node+0x61/0x2d0 [ 2512.527654][T28748] ? nl80211_pre_doit+0x330/0x330 [ 2512.532666][T28748] ? __alloc_skb+0xf0/0x450 [ 2512.537151][T28748] ? genl_rcv_msg+0x82a/0x860 [ 2512.541816][T28748] __alloc_skb+0xf0/0x450 [ 2512.546127][T28748] netlink_ack+0x292/0x680 [ 2512.550592][T28748] netlink_rcv_skb+0x1c7/0x250 [ 2512.555409][T28748] ? genl_bind+0x1d0/0x1d0 [ 2512.559805][T28748] genl_rcv+0x24/0x40 [ 2512.563787][T28748] netlink_unicast+0x602/0x6d0 [ 2512.568592][T28748] netlink_sendmsg+0x728/0x850 [ 2512.573371][T28748] ? netlink_getsockopt+0x720/0x720 [ 2512.578635][T28748] ____sys_sendmsg+0x39a/0x510 [ 2512.583415][T28748] __sys_sendmsg+0x195/0x230 [ 2512.587999][T28748] __x64_sys_sendmsg+0x42/0x50 [ 2512.592925][T28748] do_syscall_64+0x44/0xd0 [ 2512.597398][T28748] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2512.603279][T28748] RIP: 0033:0x7f5ed4f3c059 [ 2512.607690][T28748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2512.627274][T28748] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2512.635698][T28748] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2512.643671][T28748] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2512.651626][T28748] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2512.659617][T28748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:58:59 executing program 0: eventfd2(0x4, 0x0) (async) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) r2 = eventfd2(0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x79}, @void, @val={0xc, 0x99, {0x10f, 0x3a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0xc0c0) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0) (async) r5 = eventfd2(0x0, 0x0) (async) r6 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, 0x0) (async) read$eventfd(r6, &(0x7f0000000800), 0x8) (async) syz_clone3(&(0x7f0000000380)={0x2000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x1d}, &(0x7f0000000240)=""/83, 0x53, &(0x7f00000002c0)=""/113, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, 0x0) (async) read$eventfd(r5, &(0x7f0000000180), 0x8) 00:58:59 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x300000000000000}, 0x0) 00:58:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x6000000000000000}, 0x0) 00:58:59 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:58:59 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 5) 00:58:59 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 9) [ 2512.667579][T28748] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2512.675539][T28748] 00:58:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x8000000000000000}, 0x0) 00:58:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x9effffff00000000}, 0x0) [ 2512.727195][T28755] FAULT_INJECTION: forcing a failure. [ 2512.727195][T28755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2512.740263][T28755] CPU: 0 PID: 28755 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2512.751289][T28755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.761359][T28755] Call Trace: [ 2512.764639][T28755] [ 2512.765873][T28759] FAULT_INJECTION: forcing a failure. [ 2512.765873][T28759] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.767608][T28755] dump_stack_lvl+0xd6/0x122 [ 2512.784764][T28755] dump_stack+0x11/0x1b [ 2512.788962][T28755] should_fail+0x23c/0x250 [ 2512.793421][T28755] should_fail_usercopy+0x16/0x20 [ 2512.798487][T28755] _copy_from_iter+0x131/0xa00 [ 2512.803239][T28755] ? check_stack_object+0x61/0x70 [ 2512.808315][T28755] ? __virt_addr_valid+0x15a/0x1a0 [ 2512.813477][T28755] ? __check_object_size+0x22a/0x2d0 [ 2512.818749][T28755] netlink_sendmsg+0x5bb/0x850 [ 2512.823508][T28755] ? netlink_getsockopt+0x720/0x720 [ 2512.828696][T28755] ____sys_sendmsg+0x39a/0x510 [ 2512.833512][T28755] __sys_sendmsg+0x195/0x230 [ 2512.838134][T28755] __x64_sys_sendmsg+0x42/0x50 [ 2512.842885][T28755] do_syscall_64+0x44/0xd0 [ 2512.847329][T28755] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2512.853230][T28755] RIP: 0033:0x7fea9f4a9059 [ 2512.857641][T28755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2512.877285][T28755] RSP: 002b:00007fea9e61f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2512.885688][T28755] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f4a9059 [ 2512.893655][T28755] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2512.901619][T28755] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2512.909577][T28755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2512.917533][T28755] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2512.925587][T28755] [ 2512.928587][T28759] CPU: 1 PID: 28759 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2512.939614][T28759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.949669][T28759] Call Trace: [ 2512.952943][T28759] [ 2512.955918][T28759] dump_stack_lvl+0xd6/0x122 [ 2512.960566][T28759] dump_stack+0x11/0x1b [ 2512.964728][T28759] should_fail+0x23c/0x250 [ 2512.968447][T28770] FAULT_INJECTION: forcing a failure. [ 2512.968447][T28770] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.969152][T28759] __should_failslab+0x81/0x90 [ 2512.969182][T28759] should_failslab+0x5/0x20 [ 2512.990994][T28759] kmem_cache_alloc_node_trace+0x61/0x310 [ 2512.996749][T28759] ? __kmalloc_node_track_caller+0x30/0x40 [ 2513.002591][T28759] __kmalloc_node_track_caller+0x30/0x40 [ 2513.008212][T28759] ? netlink_ack+0x292/0x680 [ 2513.012788][T28759] __alloc_skb+0x19d/0x450 [ 2513.017192][T28759] netlink_ack+0x292/0x680 [ 2513.021625][T28759] netlink_rcv_skb+0x1c7/0x250 [ 2513.026375][T28759] ? genl_bind+0x1d0/0x1d0 [ 2513.030788][T28759] genl_rcv+0x24/0x40 [ 2513.034830][T28759] netlink_unicast+0x602/0x6d0 [ 2513.039651][T28759] netlink_sendmsg+0x728/0x850 [ 2513.044435][T28759] ? netlink_getsockopt+0x720/0x720 [ 2513.049664][T28759] ____sys_sendmsg+0x39a/0x510 [ 2513.054419][T28759] __sys_sendmsg+0x195/0x230 [ 2513.059266][T28759] __x64_sys_sendmsg+0x42/0x50 [ 2513.064075][T28759] do_syscall_64+0x44/0xd0 [ 2513.068483][T28759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2513.074366][T28759] RIP: 0033:0x7f5ed4f3c059 [ 2513.078761][T28759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2513.098349][T28759] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2513.106755][T28759] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2513.114709][T28759] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 00:58:59 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 6) 00:58:59 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfeff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:58:59 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (fail_nth: 1) [ 2513.122728][T28759] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.130687][T28759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2513.138706][T28759] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2513.146679][T28759] [ 2513.149693][T28770] CPU: 0 PID: 28770 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2513.156179][T28772] FAULT_INJECTION: forcing a failure. [ 2513.156179][T28772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2513.160713][T28770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.183759][T28770] Call Trace: [ 2513.187028][T28770] [ 2513.189946][T28770] dump_stack_lvl+0xd6/0x122 [ 2513.194535][T28770] dump_stack+0x11/0x1b [ 2513.198713][T28770] should_fail+0x23c/0x250 [ 2513.203114][T28770] ? skb_clone+0x12c/0x1f0 [ 2513.207516][T28770] __should_failslab+0x81/0x90 [ 2513.212277][T28770] should_failslab+0x5/0x20 [ 2513.216769][T28770] kmem_cache_alloc+0x4f/0x320 [ 2513.221526][T28770] skb_clone+0x12c/0x1f0 [ 2513.225855][T28770] netlink_deliver_tap+0x2da/0x510 [ 2513.230956][T28770] netlink_unicast+0x5e4/0x6d0 [ 2513.235711][T28770] netlink_sendmsg+0x728/0x850 [ 2513.240490][T28770] ? netlink_getsockopt+0x720/0x720 [ 2513.245679][T28770] ____sys_sendmsg+0x39a/0x510 [ 2513.250484][T28770] __sys_sendmsg+0x195/0x230 [ 2513.255070][T28770] __x64_sys_sendmsg+0x42/0x50 [ 2513.259878][T28770] do_syscall_64+0x44/0xd0 [ 2513.264301][T28770] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2513.270186][T28770] RIP: 0033:0x7fea9f4a9059 [ 2513.274584][T28770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2513.294175][T28770] RSP: 002b:00007fea9e61f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2513.302581][T28770] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f4a9059 [ 2513.310536][T28770] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2513.318501][T28770] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.326462][T28770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2513.334454][T28770] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2513.342413][T28770] [ 2513.345420][T28772] CPU: 1 PID: 28772 Comm: syz-executor.2 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2513.356473][T28772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.366532][T28772] Call Trace: [ 2513.369808][T28772] [ 2513.372762][T28772] dump_stack_lvl+0xd6/0x122 [ 2513.377380][T28772] dump_stack+0x11/0x1b [ 2513.380973][T28775] FAULT_INJECTION: forcing a failure. [ 2513.380973][T28775] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.381541][T28772] should_fail+0x23c/0x250 [ 2513.398494][T28772] should_fail_usercopy+0x16/0x20 [ 2513.403591][T28772] _copy_to_user+0x1c/0x90 [ 2513.408001][T28772] simple_read_from_buffer+0xab/0x120 [ 2513.413426][T28772] proc_fail_nth_read+0x10d/0x150 [ 2513.418526][T28772] ? proc_fault_inject_write+0x230/0x230 [ 2513.424188][T28772] vfs_read+0x1e6/0x750 [ 2513.428368][T28772] ? __fget_files+0x1d2/0x210 [ 2513.433048][T28772] ksys_read+0xd9/0x190 [ 2513.437188][T28772] __x64_sys_read+0x3e/0x50 [ 2513.441685][T28772] do_syscall_64+0x44/0xd0 [ 2513.446089][T28772] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2513.451975][T28772] RIP: 0033:0x7fa7430f9c0c [ 2513.456378][T28772] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2513.475970][T28772] RSP: 002b:00007fa7422bd160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2513.484370][T28772] RAX: ffffffffffffffda RBX: 00007fa743259f60 RCX: 00007fa7430f9c0c [ 2513.492349][T28772] RDX: 000000000000000f RSI: 00007fa7422bd1e0 RDI: 0000000000000004 [ 2513.500307][T28772] RBP: 00007fa7422bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.508295][T28772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2513.516320][T28772] R13: 00007fff05d4b72f R14: 00007fa7422bd300 R15: 0000000000022000 [ 2513.524377][T28772] 00:59:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 10) [ 2513.527381][T28775] CPU: 0 PID: 28775 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2513.538402][T28775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.548453][T28775] Call Trace: [ 2513.551722][T28775] [ 2513.554644][T28775] dump_stack_lvl+0xd6/0x122 [ 2513.559238][T28775] dump_stack+0x11/0x1b [ 2513.563403][T28775] should_fail+0x23c/0x250 [ 2513.567800][T28775] ? skb_clone+0x12c/0x1f0 [ 2513.572280][T28775] __should_failslab+0x81/0x90 00:59:00 executing program 0: eventfd2(0x4, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) r2 = eventfd2(0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x79}, @void, @val={0xc, 0x99, {0x10f, 0x3a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0xc0c0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0) r5 = eventfd2(0x0, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, 0x0) read$eventfd(r6, &(0x7f0000000800), 0x8) syz_clone3(&(0x7f0000000380)={0x2000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x1d}, &(0x7f0000000240)=""/83, 0x53, &(0x7f00000002c0)=""/113, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, 0x0) read$eventfd(r5, &(0x7f0000000180), 0x8) eventfd2(0x4, 0x0) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) eventfd2(0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x79}, @void, @val={0xc, 0x99, {0x10f, 0x3a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0xc0c0) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0) (async) eventfd2(0x0, 0x0) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, 0x0) (async) read$eventfd(r6, &(0x7f0000000800), 0x8) (async) syz_clone3(&(0x7f0000000380)={0x2000000, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200), {0x1d}, &(0x7f0000000240)=""/83, 0x53, &(0x7f00000002c0)=""/113, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, 0x0) (async) read$eventfd(r5, &(0x7f0000000180), 0x8) (async) 00:59:00 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xefffffff00000000}, 0x0) 00:59:00 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:00 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:00 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 7) 00:59:00 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0x7ffff000) 00:59:00 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0x11ffffd7b) [ 2513.577032][T28775] should_failslab+0x5/0x20 [ 2513.581541][T28775] kmem_cache_alloc+0x4f/0x320 [ 2513.586306][T28775] skb_clone+0x12c/0x1f0 [ 2513.590598][T28775] netlink_deliver_tap+0x2da/0x510 [ 2513.595722][T28775] netlink_unicast+0x429/0x6d0 [ 2513.600503][T28775] netlink_ack+0x62e/0x680 [ 2513.604960][T28775] netlink_rcv_skb+0x1c7/0x250 [ 2513.609730][T28775] ? genl_bind+0x1d0/0x1d0 [ 2513.614150][T28775] genl_rcv+0x24/0x40 [ 2513.618175][T28775] netlink_unicast+0x602/0x6d0 [ 2513.622997][T28775] netlink_sendmsg+0x728/0x850 [ 2513.627768][T28775] ? netlink_getsockopt+0x720/0x720 [ 2513.633015][T28775] ____sys_sendmsg+0x39a/0x510 [ 2513.637781][T28775] __sys_sendmsg+0x195/0x230 [ 2513.642382][T28775] __x64_sys_sendmsg+0x42/0x50 [ 2513.644526][T28783] FAULT_INJECTION: forcing a failure. [ 2513.644526][T28783] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.647207][T28775] do_syscall_64+0x44/0xd0 [ 2513.647232][T28775] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2513.647256][T28775] RIP: 0033:0x7f5ed4f3c059 [ 2513.674468][T28775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2513.694128][T28775] RSP: 002b:00007f5ed40b2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2513.702593][T28775] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4f3c059 [ 2513.710548][T28775] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2513.718623][T28775] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.726577][T28775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2513.734533][T28775] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2513.742495][T28775] [ 2513.745556][T28783] CPU: 1 PID: 28783 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2513.756585][T28783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.766641][T28783] Call Trace: [ 2513.769963][T28783] [ 2513.772895][T28783] dump_stack_lvl+0xd6/0x122 [ 2513.777498][T28783] dump_stack+0x11/0x1b [ 2513.781686][T28783] should_fail+0x23c/0x250 [ 2513.786103][T28783] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 2513.792384][T28783] __should_failslab+0x81/0x90 [ 2513.797159][T28783] should_failslab+0x5/0x20 [ 2513.797714][T28798] FAULT_INJECTION: forcing a failure. [ 2513.797714][T28798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2513.801667][T28783] __kmalloc+0x6f/0x370 [ 2513.818839][T28783] ? selinux_capable+0x34/0x40 [ 2513.823626][T28783] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 2513.829683][T28783] ? ns_capable+0x86/0xb0 [ 2513.834042][T28783] genl_rcv_msg+0x5f1/0x860 [ 2513.838535][T28783] ? nl80211_get_reg_dump+0x220/0x220 [ 2513.843893][T28783] netlink_rcv_skb+0x14e/0x250 [ 2513.848646][T28783] ? genl_bind+0x1d0/0x1d0 [ 2513.853105][T28783] genl_rcv+0x24/0x40 [ 2513.857072][T28783] netlink_unicast+0x602/0x6d0 [ 2513.861885][T28783] netlink_sendmsg+0x728/0x850 [ 2513.866676][T28783] ? netlink_getsockopt+0x720/0x720 [ 2513.871865][T28783] ____sys_sendmsg+0x39a/0x510 [ 2513.876623][T28783] __sys_sendmsg+0x195/0x230 [ 2513.881257][T28783] __x64_sys_sendmsg+0x42/0x50 [ 2513.886007][T28783] do_syscall_64+0x44/0xd0 [ 2513.890425][T28783] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2513.896357][T28783] RIP: 0033:0x7fea9f4a9059 [ 2513.900757][T28783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2513.920401][T28783] RSP: 002b:00007fea9e61f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 00:59:00 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xffffffffffffffff) 00:59:00 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xf0ffffff00000000}, 0x0) 00:59:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 11) 00:59:00 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xca9a3b}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 2513.928796][T28783] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f4a9059 [ 2513.936779][T28783] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2513.944734][T28783] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.952766][T28783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2513.960720][T28783] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2513.968702][T28783] [ 2513.971704][T28798] CPU: 0 PID: 28798 Comm: syz-executor.4 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 00:59:00 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 2513.982725][T28798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.992781][T28798] Call Trace: [ 2513.996060][T28798] [ 2513.999063][T28798] dump_stack_lvl+0xd6/0x122 [ 2514.003719][T28798] dump_stack+0x11/0x1b [ 2514.007876][T28798] should_fail+0x23c/0x250 [ 2514.012364][T28798] should_fail_usercopy+0x16/0x20 [ 2514.017388][T28798] _copy_to_user+0x1c/0x90 [ 2514.021900][T28798] simple_read_from_buffer+0xab/0x120 [ 2514.027274][T28798] proc_fail_nth_read+0x10d/0x150 00:59:00 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xf35c000000000000}, 0x0) 00:59:00 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 8) 00:59:00 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000080)={0x0, 0x4, 0x7, 0x1}) [ 2514.032298][T28798] ? proc_fault_inject_write+0x230/0x230 [ 2514.038011][T28798] vfs_read+0x1e6/0x750 [ 2514.042258][T28798] ? __fget_files+0x1d2/0x210 [ 2514.047008][T28798] ksys_read+0xd9/0x190 [ 2514.051176][T28798] __x64_sys_read+0x3e/0x50 [ 2514.055703][T28798] do_syscall_64+0x44/0xd0 [ 2514.060155][T28798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2514.066103][T28798] RIP: 0033:0x7f5ed4eeec0c 00:59:00 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:00 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f00000011c0)=0x80, &(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x80800}, 0xe6) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000001140)=0xfffffffffffff033) r1 = eventfd2(0x4, 0x0) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000001180)={{r4}, {@val, @max}}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000140)={{r1}, r5, 0x8, @inherit={0x90, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000009000000000000001f0000000000000001000000000000000500000000000000050000000000000003000000000000000100008000000000ffffff7f0000000009000000000000000600000000000000fffbffffffffffff0700000000000000000000000000000009000000000000000400000057c8ec0000000000000000000000000800000000"]}, @subvolid=0x7}) 00:59:00 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f00000011c0)=0x80, &(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x80800}, 0xe6) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000001140)=0xfffffffffffff033) (async) r1 = eventfd2(0x4, 0x0) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000001180)={{r4}, {@val, @max}}) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000140)={{r1}, r5, 0x8, @inherit={0x90, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000009000000000000001f0000000000000001000000000000000500000000000000050000000000000003000000000000000100008000000000ffffff7f0000000009000000000000000600000000000000fffbffffffffffff0700000000000000000000000000000009000000000000000400000057c8ec0000000000000000000000000800000000"]}, @subvolid=0x7}) [ 2514.070550][T28798] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2514.090159][T28798] RSP: 002b:00007f5ed40b2160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2514.098624][T28798] RAX: ffffffffffffffda RBX: 00007f5ed504ef60 RCX: 00007f5ed4eeec0c [ 2514.106685][T28798] RDX: 000000000000000f RSI: 00007f5ed40b21e0 RDI: 0000000000000004 [ 2514.114653][T28798] RBP: 00007f5ed40b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.122622][T28798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:59:00 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f00000011c0)=0x80, &(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x80800}, 0xe6) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000001140)=0xfffffffffffff033) (async) r1 = eventfd2(0x4, 0x0) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000001180)={{r4}, {@val, @max}}) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000140)={{r1}, r5, 0x8, @inherit={0x90, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000009000000000000001f0000000000000001000000000000000500000000000000050000000000000003000000000000000100008000000000ffffff7f0000000009000000000000000600000000000000fffbffffffffffff0700000000000000000000000000000009000000000000000400000057c8ec0000000000000000000000000800000000"]}, @subvolid=0x7}) 00:59:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:00 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3b9aca00}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:00 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xffffff7f00000000}, 0x0) [ 2514.130596][T28798] R13: 00007ffc5b10f33f R14: 00007f5ed40b2300 R15: 0000000000022000 [ 2514.138567][T28798] [ 2514.147176][T28836] FAULT_INJECTION: forcing a failure. [ 2514.147176][T28836] name failslab, interval 1, probability 0, space 0, times 0 [ 2514.159864][T28836] CPU: 0 PID: 28836 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2514.170898][T28836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.181012][T28836] Call Trace: [ 2514.184375][T28836] [ 2514.187351][T28836] dump_stack_lvl+0xd6/0x122 [ 2514.191953][T28836] dump_stack+0x11/0x1b [ 2514.196117][T28836] should_fail+0x23c/0x250 [ 2514.200571][T28836] __should_failslab+0x81/0x90 [ 2514.205415][T28836] should_failslab+0x5/0x20 [ 2514.210038][T28836] kmem_cache_alloc_node+0x61/0x2d0 [ 2514.215283][T28836] ? nl80211_pre_doit+0x330/0x330 [ 2514.220313][T28836] ? __alloc_skb+0xf0/0x450 [ 2514.224895][T28836] ? genl_rcv_msg+0x82a/0x860 [ 2514.229583][T28836] __alloc_skb+0xf0/0x450 00:59:00 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfeffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:00 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000080)={0x0, 0x4, 0x7, 0x1}) [ 2514.233914][T28836] netlink_ack+0x292/0x680 [ 2514.238342][T28836] netlink_rcv_skb+0x1c7/0x250 [ 2514.243120][T28836] ? genl_bind+0x1d0/0x1d0 [ 2514.247547][T28836] genl_rcv+0x24/0x40 [ 2514.251547][T28836] netlink_unicast+0x602/0x6d0 [ 2514.256330][T28836] netlink_sendmsg+0x728/0x850 [ 2514.261115][T28836] ? netlink_getsockopt+0x720/0x720 [ 2514.266360][T28836] ____sys_sendmsg+0x39a/0x510 [ 2514.271130][T28836] __sys_sendmsg+0x195/0x230 [ 2514.275741][T28836] __x64_sys_sendmsg+0x42/0x50 00:59:00 executing program 0: r0 = eventfd2(0x4, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1) read$eventfd(r1, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000080)={0x4, 0x0, {0xc, @struct={0x2, 0x20000000}, 0x0, 0x8, 0x8, 0x7, 0x671, 0x4e, 0x440, @struct={0x5}, 0x9, 0x6, [0x800, 0x47170c5f, 0x6, 0x5, 0x100000001, 0x400]}, {0x7fffffff, @struct={0x81, 0x4}, 0x0, 0x0, 0x3000000000000, 0x7, 0x5, 0x100, 0xd8, @usage=0x8, 0x20, 0x5ed, [0x4, 0x4, 0x8, 0x3, 0x5, 0x5]}, {0x9, @struct={0xea7, 0xfffffffb}, 0x0, 0x6, 0x1, 0x81, 0x4, 0x5, 0x465, @usage=0x1f, 0x1, 0x1, [0x81, 0x6, 0x80000000, 0x7, 0x1, 0x401]}, {0xe, 0x477, 0x1}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000940)={"684301b412c69a73ee9ee216f378780e", 0x0, 0x0, {0x100, 0x5}, {0x8, 0x4}, 0xff, [0x4, 0x35, 0x1ab, 0x7, 0x27fe, 0x3, 0x9, 0x4, 0x8, 0x1, 0x6, 0x2, 0x7ff, 0x1, 0x6, 0x4000000]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000ac0)={{r1}, r4, 0x14, @inherit={0x68, &(0x7f0000000a40)={0x0, 0x4, 0xfffffffffffffffc, 0x9, {0x4, 0x2, 0x1, 0x1f}, [0x1f, 0x8, 0x8000, 0x2]}}, @devid=r2}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000900), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r2, 0x5, 0x1, [0x1f, 0x80000001, 0x6, 0x7ff, 0x1], [0x221, 0x100, 0x5, 0x20, 0x66, 0x10001, 0x7ff, 0x55, 0x3, 0x8001, 0x7ff, 0x8, 0xac, 0x9, 0x80000000, 0x4, 0x813, 0x80000001, 0x9, 0x0, 0x2, 0x8001, 0x4, 0x9a, 0xde76, 0x5, 0x8, 0x81, 0x0, 0xfff, 0xfff, 0x4, 0x5, 0x400, 0x80000001, 0x2, 0x7, 0x1, 0x2, 0x1, 0x1, 0x7, 0xffffffffffffe4f3, 0x9, 0xffff, 0x4, 0x2, 0x1f, 0x100, 0x1f, 0x4, 0x6, 0x10001, 0xfffffffffffeffff, 0x7ff, 0x2800000000000000, 0x4ae0, 0x3, 0x5b8, 0x4, 0x1, 0x9, 0x5, 0xfffffffffffffff8, 0x100000000, 0x3, 0x1f, 0xfa, 0x6, 0x4a, 0x9, 0x200, 0x3, 0x9, 0x3f, 0x1000, 0x1f, 0x9, 0x3, 0x9, 0x4, 0x6, 0x3, 0xd8b, 0x1, 0xfffffffffffffff8, 0x76b, 0x7, 0x94, 0xf6, 0xacc, 0x4, 0x6, 0x3ff, 0x81, 0x7, 0x4, 0xba83, 0x0, 0x80000000, 0x9, 0x4, 0x1, 0x9, 0x3f, 0xffffffffffffff8d, 0x4, 0x5, 0xffff, 0x8, 0x32, 0x6, 0x10001, 0x8e, 0xb316, 0x101, 0x7, 0x5, 0x3ff, 0x4, 0x4]}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) [ 2514.280509][T28836] do_syscall_64+0x44/0xd0 [ 2514.284948][T28836] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2514.290895][T28836] RIP: 0033:0x7fea9f4a9059 [ 2514.295372][T28836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2514.315033][T28836] RSP: 002b:00007fea9e61f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2514.323448][T28836] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f4a9059 00:59:01 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 9) 00:59:01 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000080)={0x0, 0x4, 0x7, 0x1}) 00:59:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:01 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0xffffffff00000000}, 0x0) 00:59:01 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 2514.331425][T28836] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2514.339395][T28836] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.347357][T28836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.355314][T28836] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2514.363270][T28836] 00:59:01 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x7f, 0x8) 00:59:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:01 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xca9a3b00000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 2514.382664][T28864] FAULT_INJECTION: forcing a failure. [ 2514.382664][T28864] name failslab, interval 1, probability 0, space 0, times 0 [ 2514.395343][T28864] CPU: 0 PID: 28864 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2514.406424][T28864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.416533][T28864] Call Trace: [ 2514.419806][T28864] [ 2514.422736][T28864] dump_stack_lvl+0xd6/0x122 [ 2514.427339][T28864] dump_stack+0x11/0x1b 00:59:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:01 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x400000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:01 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x800000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 2514.431565][T28864] should_fail+0x23c/0x250 [ 2514.436038][T28864] __should_failslab+0x81/0x90 [ 2514.440883][T28864] should_failslab+0x5/0x20 [ 2514.445395][T28864] kmem_cache_alloc_node_trace+0x61/0x310 [ 2514.451176][T28864] ? __kmalloc_node_track_caller+0x30/0x40 [ 2514.457028][T28864] __kmalloc_node_track_caller+0x30/0x40 [ 2514.462668][T28864] ? netlink_ack+0x292/0x680 [ 2514.467265][T28864] __alloc_skb+0x19d/0x450 [ 2514.471686][T28864] netlink_ack+0x292/0x680 [ 2514.476108][T28864] netlink_rcv_skb+0x1c7/0x250 [ 2514.480889][T28864] ? genl_bind+0x1d0/0x1d0 [ 2514.485393][T28864] genl_rcv+0x24/0x40 [ 2514.489403][T28864] netlink_unicast+0x602/0x6d0 [ 2514.494173][T28864] netlink_sendmsg+0x728/0x850 [ 2514.498939][T28864] ? netlink_getsockopt+0x720/0x720 [ 2514.504123][T28864] ____sys_sendmsg+0x39a/0x510 [ 2514.508872][T28864] __sys_sendmsg+0x195/0x230 [ 2514.513486][T28864] __x64_sys_sendmsg+0x42/0x50 [ 2514.518232][T28864] do_syscall_64+0x44/0xd0 [ 2514.522644][T28864] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2514.528570][T28864] RIP: 0033:0x7fea9f4a9059 [ 2514.532962][T28864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2514.552549][T28864] RSP: 002b:00007fea9e61f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2514.560979][T28864] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f4a9059 [ 2514.568960][T28864] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2514.576929][T28864] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.584940][T28864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.592944][T28864] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2514.600940][T28864] 00:59:01 executing program 0: r0 = eventfd2(0x4, 0x0) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1) read$eventfd(r1, &(0x7f0000000000), 0x8) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000080)={0x4, 0x0, {0xc, @struct={0x2, 0x20000000}, 0x0, 0x8, 0x8, 0x7, 0x671, 0x4e, 0x440, @struct={0x5}, 0x9, 0x6, [0x800, 0x47170c5f, 0x6, 0x5, 0x100000001, 0x400]}, {0x7fffffff, @struct={0x81, 0x4}, 0x0, 0x0, 0x3000000000000, 0x7, 0x5, 0x100, 0xd8, @usage=0x8, 0x20, 0x5ed, [0x4, 0x4, 0x8, 0x3, 0x5, 0x5]}, {0x9, @struct={0xea7, 0xfffffffb}, 0x0, 0x6, 0x1, 0x81, 0x4, 0x5, 0x465, @usage=0x1f, 0x1, 0x1, [0x81, 0x6, 0x80000000, 0x7, 0x1, 0x401]}, {0xe, 0x477, 0x1}}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000940)={"684301b412c69a73ee9ee216f378780e", 0x0, 0x0, {0x100, 0x5}, {0x8, 0x4}, 0xff, [0x4, 0x35, 0x1ab, 0x7, 0x27fe, 0x3, 0x9, 0x4, 0x8, 0x1, 0x6, 0x2, 0x7ff, 0x1, 0x6, 0x4000000]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000ac0)={{r1}, r4, 0x14, @inherit={0x68, &(0x7f0000000a40)={0x0, 0x4, 0xfffffffffffffffc, 0x9, {0x4, 0x2, 0x1, 0x1f}, [0x1f, 0x8, 0x8000, 0x2]}}, @devid=r2}) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) (async, rerun: 64) openat$cgroup_subtree(r5, &(0x7f0000000900), 0x2, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r2, 0x5, 0x1, [0x1f, 0x80000001, 0x6, 0x7ff, 0x1], [0x221, 0x100, 0x5, 0x20, 0x66, 0x10001, 0x7ff, 0x55, 0x3, 0x8001, 0x7ff, 0x8, 0xac, 0x9, 0x80000000, 0x4, 0x813, 0x80000001, 0x9, 0x0, 0x2, 0x8001, 0x4, 0x9a, 0xde76, 0x5, 0x8, 0x81, 0x0, 0xfff, 0xfff, 0x4, 0x5, 0x400, 0x80000001, 0x2, 0x7, 0x1, 0x2, 0x1, 0x1, 0x7, 0xffffffffffffe4f3, 0x9, 0xffff, 0x4, 0x2, 0x1f, 0x100, 0x1f, 0x4, 0x6, 0x10001, 0xfffffffffffeffff, 0x7ff, 0x2800000000000000, 0x4ae0, 0x3, 0x5b8, 0x4, 0x1, 0x9, 0x5, 0xfffffffffffffff8, 0x100000000, 0x3, 0x1f, 0xfa, 0x6, 0x4a, 0x9, 0x200, 0x3, 0x9, 0x3f, 0x1000, 0x1f, 0x9, 0x3, 0x9, 0x4, 0x6, 0x3, 0xd8b, 0x1, 0xfffffffffffffff8, 0x76b, 0x7, 0x94, 0xf6, 0xacc, 0x4, 0x6, 0x3ff, 0x81, 0x7, 0x4, 0xba83, 0x0, 0x80000000, 0x9, 0x4, 0x1, 0x9, 0x3f, 0xffffffffffffff8d, 0x4, 0x5, 0xffff, 0x8, 0x32, 0x6, 0x10001, 0x8e, 0xb316, 0x101, 0x7, 0x5, 0x3ff, 0x4, 0x4]}) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:01 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfeffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:01 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x2}, 0x0) 00:59:01 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x7f, 0x8) eventfd2(0x0, 0x80800) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x7f, 0x8) (async) 00:59:01 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 10) 00:59:01 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x7f, 0x8) 00:59:01 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 2515.156307][T28902] FAULT_INJECTION: forcing a failure. [ 2515.156307][T28902] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.169012][T28902] CPU: 1 PID: 28902 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2515.180035][T28902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.190090][T28902] Call Trace: [ 2515.193370][T28902] [ 2515.196299][T28902] dump_stack_lvl+0xd6/0x122 [ 2515.200947][T28902] dump_stack+0x11/0x1b 00:59:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:01 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) 00:59:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:01 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) eventfd2(0x0, 0x80800) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) (async) [ 2515.205113][T28902] should_fail+0x23c/0x250 [ 2515.209546][T28902] ? skb_clone+0x12c/0x1f0 [ 2515.213968][T28902] __should_failslab+0x81/0x90 [ 2515.218734][T28902] should_failslab+0x5/0x20 [ 2515.223277][T28902] kmem_cache_alloc+0x4f/0x320 [ 2515.228047][T28902] skb_clone+0x12c/0x1f0 [ 2515.232298][T28902] netlink_deliver_tap+0x2da/0x510 [ 2515.237482][T28902] netlink_unicast+0x429/0x6d0 [ 2515.242247][T28902] netlink_ack+0x62e/0x680 [ 2515.246701][T28902] netlink_rcv_skb+0x1c7/0x250 [ 2515.251506][T28902] ? genl_bind+0x1d0/0x1d0 [ 2515.255901][T28902] genl_rcv+0x24/0x40 [ 2515.259865][T28902] netlink_unicast+0x602/0x6d0 [ 2515.264611][T28902] netlink_sendmsg+0x728/0x850 [ 2515.269388][T28902] ? netlink_getsockopt+0x720/0x720 [ 2515.274570][T28902] ____sys_sendmsg+0x39a/0x510 [ 2515.279404][T28902] __sys_sendmsg+0x195/0x230 [ 2515.284005][T28902] __x64_sys_sendmsg+0x42/0x50 [ 2515.288754][T28902] do_syscall_64+0x44/0xd0 [ 2515.293151][T28902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2515.299026][T28902] RIP: 0033:0x7fea9f4a9059 [ 2515.303423][T28902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2515.323026][T28902] RSP: 002b:00007fea9e61f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2515.331457][T28902] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f4a9059 [ 2515.339487][T28902] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2515.347474][T28902] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2515.355420][T28902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2515.363404][T28902] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2515.371364][T28902] 00:59:02 executing program 0: r0 = eventfd2(0x4, 0x0) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1) read$eventfd(r1, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000080)={0x4, 0x0, {0xc, @struct={0x2, 0x20000000}, 0x0, 0x8, 0x8, 0x7, 0x671, 0x4e, 0x440, @struct={0x5}, 0x9, 0x6, [0x800, 0x47170c5f, 0x6, 0x5, 0x100000001, 0x400]}, {0x7fffffff, @struct={0x81, 0x4}, 0x0, 0x0, 0x3000000000000, 0x7, 0x5, 0x100, 0xd8, @usage=0x8, 0x20, 0x5ed, [0x4, 0x4, 0x8, 0x3, 0x5, 0x5]}, {0x9, @struct={0xea7, 0xfffffffb}, 0x0, 0x6, 0x1, 0x81, 0x4, 0x5, 0x465, @usage=0x1f, 0x1, 0x1, [0x81, 0x6, 0x80000000, 0x7, 0x1, 0x401]}, {0xe, 0x477, 0x1}}) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000940)={"684301b412c69a73ee9ee216f378780e", 0x0, 0x0, {0x100, 0x5}, {0x8, 0x4}, 0xff, [0x4, 0x35, 0x1ab, 0x7, 0x27fe, 0x3, 0x9, 0x4, 0x8, 0x1, 0x6, 0x2, 0x7ff, 0x1, 0x6, 0x4000000]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000ac0)={{r1}, r4, 0x14, @inherit={0x68, &(0x7f0000000a40)={0x0, 0x4, 0xfffffffffffffffc, 0x9, {0x4, 0x2, 0x1, 0x1f}, [0x1f, 0x8, 0x8000, 0x2]}}, @devid=r2}) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) (async) openat$cgroup_subtree(r5, &(0x7f0000000900), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r2, 0x5, 0x1, [0x1f, 0x80000001, 0x6, 0x7ff, 0x1], [0x221, 0x100, 0x5, 0x20, 0x66, 0x10001, 0x7ff, 0x55, 0x3, 0x8001, 0x7ff, 0x8, 0xac, 0x9, 0x80000000, 0x4, 0x813, 0x80000001, 0x9, 0x0, 0x2, 0x8001, 0x4, 0x9a, 0xde76, 0x5, 0x8, 0x81, 0x0, 0xfff, 0xfff, 0x4, 0x5, 0x400, 0x80000001, 0x2, 0x7, 0x1, 0x2, 0x1, 0x1, 0x7, 0xffffffffffffe4f3, 0x9, 0xffff, 0x4, 0x2, 0x1f, 0x100, 0x1f, 0x4, 0x6, 0x10001, 0xfffffffffffeffff, 0x7ff, 0x2800000000000000, 0x4ae0, 0x3, 0x5b8, 0x4, 0x1, 0x9, 0x5, 0xfffffffffffffff8, 0x100000000, 0x3, 0x1f, 0xfa, 0x6, 0x4a, 0x9, 0x200, 0x3, 0x9, 0x3f, 0x1000, 0x1f, 0x9, 0x3, 0x9, 0x4, 0x6, 0x3, 0xd8b, 0x1, 0xfffffffffffffff8, 0x76b, 0x7, 0x94, 0xf6, 0xacc, 0x4, 0x6, 0x3ff, 0x81, 0x7, 0x4, 0xba83, 0x0, 0x80000000, 0x9, 0x4, 0x1, 0x9, 0x3f, 0xffffffffffffff8d, 0x4, 0x5, 0xffff, 0x8, 0x32, 0x6, 0x10001, 0x8e, 0xb316, 0x101, 0x7, 0x5, 0x3ff, 0x4, 0x4]}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:02 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) 00:59:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x3}, 0x0) 00:59:02 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xffffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:02 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) (fail_nth: 11) [ 2516.000831][T28933] FAULT_INJECTION: forcing a failure. [ 2516.000831][T28933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2516.013932][T28933] CPU: 0 PID: 28933 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2516.024997][T28933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.035112][T28933] Call Trace: [ 2516.038423][T28933] [ 2516.041352][T28933] dump_stack_lvl+0xd6/0x122 [ 2516.045954][T28933] dump_stack+0x11/0x1b [ 2516.050117][T28933] should_fail+0x23c/0x250 [ 2516.054538][T28933] should_fail_usercopy+0x16/0x20 [ 2516.059609][T28933] _copy_to_user+0x1c/0x90 [ 2516.064025][T28933] simple_read_from_buffer+0xab/0x120 [ 2516.069468][T28933] proc_fail_nth_read+0x10d/0x150 [ 2516.074551][T28933] ? proc_fault_inject_write+0x230/0x230 [ 2516.080204][T28933] vfs_read+0x1e6/0x750 [ 2516.084367][T28933] ? __fget_files+0x1d2/0x210 [ 2516.089058][T28933] ksys_read+0xd9/0x190 [ 2516.093233][T28933] __x64_sys_read+0x3e/0x50 [ 2516.097838][T28933] do_syscall_64+0x44/0xd0 [ 2516.102274][T28933] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2516.108233][T28933] RIP: 0033:0x7fea9f45bc0c [ 2516.112713][T28933] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2516.132396][T28933] RSP: 002b:00007fea9e61f160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2516.140822][T28933] RAX: ffffffffffffffda RBX: 00007fea9f5bbf60 RCX: 00007fea9f45bc0c 00:59:02 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r3 = gettid() r4 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r4], 0x1}, 0x58) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001480), 0x2140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000013c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000040)={0x8008000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r3, r3, r4, r5], 0x4, {r2}}, 0x58) r6 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r6], 0x1}, 0x58) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, 0x0) openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001240)={0x0, 0x0}) r9 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r9], 0x1}, 0x58) syz_clone3(&(0x7f0000001300)={0x80000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000001380), {0x2c}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/239, &(0x7f00000012c0)=[r3, 0x0, r6, r8, r9], 0x5, {r1}}, 0x58) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x4}, 0x0) 00:59:02 executing program 2: r0 = eventfd2(0x0, 0x80800) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async, rerun: 32) r3 = gettid() (rerun: 32) r4 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r4], 0x1}, 0x58) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001480), 0x2140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000013c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000040)={0x8008000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r3, r3, r4, r5], 0x4, {r2}}, 0x58) (async, rerun: 32) r6 = gettid() (rerun: 32) syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r6], 0x1}, 0x58) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, 0x0) openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001240)={0x0, 0x0}) (async) r9 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r9], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000001300)={0x80000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000001380), {0x2c}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/239, &(0x7f00000012c0)=[r3, 0x0, r6, r8, r9], 0x5, {r1}}, 0x58) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x5}, 0x0) 00:59:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x6}, 0x0) 00:59:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x7}, 0x0) 00:59:02 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x3, 0x8) 00:59:02 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:02 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8}, 0x0) 00:59:02 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r3 = gettid() r4 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r4], 0x1}, 0x58) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001480), 0x2140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000013c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000040)={0x8008000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r3, r3, r4, r5], 0x4, {r2}}, 0x58) r6 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r6], 0x1}, 0x58) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, 0x0) openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001240)={0x0, 0x0}) r9 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r9], 0x1}, 0x58) syz_clone3(&(0x7f0000001300)={0x80000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000001380), {0x2c}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/239, &(0x7f00000012c0)=[r3, 0x0, r6, r8, r9], 0x5, {r1}}, 0x58) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x0, 0x80800) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) gettid() (async) gettid() (async) syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r4], 0x1}, 0x58) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001480), 0x2140, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000013c0)) (async) syz_clone3(&(0x7f0000000040)={0x8008000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r3, r3, r4, r5], 0x4, {r2}}, 0x58) (async) gettid() (async) syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r6], 0x1}, 0x58) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, 0x0) (async) openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001240)) (async) gettid() (async) syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r9], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000001300)={0x80000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000001380), {0x2c}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/239, &(0x7f00000012c0)=[r3, 0x0, r6, r8, r9], 0x5, {r1}}, 0x58) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:59:02 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) [ 2516.148805][T28933] RDX: 000000000000000f RSI: 00007fea9e61f1e0 RDI: 0000000000000004 [ 2516.156781][T28933] RBP: 00007fea9e61f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2516.164828][T28933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2516.172826][T28933] R13: 00007ffc81c8b36f R14: 00007fea9e61f300 R15: 0000000000022000 [ 2516.180802][T28933] 00:59:02 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x3, 0x8) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x3, 0x8) (async) 00:59:02 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x9}, 0x0) 00:59:02 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:02 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:02 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) 00:59:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf}, 0x0) 00:59:03 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfeff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:03 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0x8) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) 00:59:03 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x60}, 0x0) 00:59:03 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x3, 0x8) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x3, 0x8) (async) 00:59:03 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:03 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:03 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x0, 0x80800) (async) read$eventfd(r0, &(0x7f0000000040), 0x8) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) 00:59:03 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x300}, 0x0) 00:59:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:03 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:03 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000080)={0x0, 0x4}) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x80, 0x8) 00:59:03 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xca9a3b}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:03 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x500}, 0x0) 00:59:03 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x600}, 0x0) 00:59:04 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r1, 0x1) 00:59:04 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000080)={0x0, 0x4}) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x80, 0x8) 00:59:04 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:04 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x700}, 0x0) 00:59:04 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:04 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000080)={0x0, 0x4}) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x80, 0x8) 00:59:04 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x900}, 0x0) 00:59:04 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r1, 0x1) 00:59:04 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3b9aca00}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:04 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf00}, 0x0) 00:59:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfeffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:04 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async, rerun: 32) r1 = eventfd2(0x0, 0x0) (rerun: 32) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r1, 0x1) 00:59:04 executing program 2: eventfd2(0x0, 0x80800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2c4200, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe5f) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x100000000, 0x1, 0x1}) 00:59:04 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:04 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x5cf3}, 0x0) 00:59:04 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 2: eventfd2(0x0, 0x80800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2c4200, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe5f) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x100000000, 0x1, 0x1}) eventfd2(0x0, 0x80800) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2c4200, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe5f) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x100000000, 0x1, 0x1}) (async) 00:59:04 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xca9a3b00000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:04 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x6000}, 0x0) 00:59:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:04 executing program 2: eventfd2(0x0, 0x80800) (async, rerun: 32) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2c4200, 0x0) (rerun: 32) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe5f) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x100000000, 0x1, 0x1}) 00:59:05 executing program 0: r0 = eventfd2(0x4, 0x0) r1 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000340)=r2, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffe28, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080) r5 = eventfd2(0x3f, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000001c0)=r5, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x0, "8b39fd", 0x7f, 0x4}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8e4d, 0x8, {{0xf, 0x4, 0x1, 0x1f, 0x3c, 0x68, 0x0, 0x1, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf35c}, 0x0) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x400000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x4f84, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 2: r0 = eventfd2(0x0, 0x80800) eventfd(0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 2: r0 = eventfd2(0x0, 0x80800) eventfd(0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x30000}, 0x0) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfeffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 0: r0 = eventfd2(0x4, 0x0) (async) r1 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000340)=r2, 0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffe28, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080) (async, rerun: 32) r5 = eventfd2(0x3f, 0x1) (rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000001c0)=r5, 0x1) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x0, "8b39fd", 0x7f, 0x4}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8e4d, 0x8, {{0xf, 0x4, 0x1, 0x1f, 0x3c, 0x68, 0x0, 0x1, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x34000}, 0x0) 00:59:05 executing program 2: r0 = eventfd2(0x0, 0x80800) eventfd(0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x0, 0x80800) (async) eventfd(0x8) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x844f, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x400300}, 0x0) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x30000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20880) r2 = eventfd2(0x0, 0x80800) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 0: r0 = eventfd2(0x4, 0x0) r1 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000340)=r2, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffe28, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080) r5 = eventfd2(0x3f, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000001c0)=r5, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x0, "8b39fd", 0x7f, 0x4}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8e4d, 0x8, {{0xf, 0x4, 0x1, 0x1f, 0x3c, 0x68, 0x0, 0x1, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) eventfd2(0x4, 0x0) (async) syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000340)=r2, 0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffe28, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080) (async) eventfd2(0x3f, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000001c0)=r5, 0x1) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x0, "8b39fd", 0x7f, 0x4}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8e4d, 0x8, {{0xf, 0x4, 0x1, 0x1f, 0x3c, 0x68, 0x0, 0x1, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) (async) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 00:59:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20880) r2 = eventfd2(0x0, 0x80800) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20880) (async) r2 = eventfd2(0x0, 0x80800) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 0: r0 = eventfd2(0x4, 0x0) r1 = io_uring_setup(0x7fa5, &(0x7f0000000080)={0x0, 0x56cf, 0x20, 0x3, 0x280}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r2, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfeff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 2: r0 = eventfd2(0x0, 0x80800) eventfd2(0x8, 0x800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x3a64, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 0: r0 = eventfd2(0x4, 0x0) (async) r1 = io_uring_setup(0x7fa5, &(0x7f0000000080)={0x0, 0x56cf, 0x20, 0x3, 0x280}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r2, 0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 2: r0 = eventfd2(0x0, 0x80800) eventfd2(0x8, 0x800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 0: r0 = eventfd2(0x4, 0x0) (async) r1 = io_uring_setup(0x7fa5, &(0x7f0000000080)={0x0, 0x56cf, 0x20, 0x3, 0x280}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r2, 0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xca9a3b}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 2: r0 = eventfd2(0x0, 0x80800) eventfd2(0x8, 0x800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x0, 0x80800) (async) eventfd2(0x8, 0x800) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x643a, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x5000000}, 0x0) 00:59:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x30000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:05 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x4000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:05 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x20}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x200, 0x32ee238a, 0x0, 0x60, r1, 0x1, '\x00', r4, r5, 0x1, 0x1, 0x2}, 0x48) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0) 00:59:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x7000000}, 0x0) 00:59:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"37b79194db6bc78c13f030e124387bff", 0x0, 0x0, {0x6, 0x5}, {0x3, 0x7}, 0xffff, [0x9, 0x7f, 0xfffffffffffffff7, 0x3, 0x8, 0x66, 0xd1, 0x4, 0x4, 0x6, 0x80000001, 0x4, 0x800, 0x17, 0x7ff, 0xfc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000a40)={{r2}, r3, 0x1a, @inherit={0x80, &(0x7f0000000280)={0x0, 0x7, 0x9, 0x3, {0x20, 0x2, 0x1, 0x9, 0x1ff}, [0x6, 0x2, 0x2, 0x800, 0x2, 0x7, 0x4000000000]}}, @subvolid=0x20}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) syz_io_uring_setup(0x7d47, &(0x7f0000000080)={0x0, 0xa418, 0x0, 0x2, 0x326}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x64f1, &(0x7f0000000300)={0x0, 0x1f16, 0x2, 0x0, 0xcbe}) r4 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x4010, r4, 0x8000000) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3b9aca00}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8000000}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"37b79194db6bc78c13f030e124387bff", 0x0, 0x0, {0x6, 0x5}, {0x3, 0x7}, 0xffff, [0x9, 0x7f, 0xfffffffffffffff7, 0x3, 0x8, 0x66, 0xd1, 0x4, 0x4, 0x6, 0x80000001, 0x4, 0x800, 0x17, 0x7ff, 0xfc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000a40)={{r2}, r3, 0x1a, @inherit={0x80, &(0x7f0000000280)={0x0, 0x7, 0x9, 0x3, {0x20, 0x2, 0x1, 0x9, 0x1ff}, [0x6, 0x2, 0x2, 0x800, 0x2, 0x7, 0x4000000000]}}, @subvolid=0x20}) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) (async) syz_io_uring_setup(0x7d47, &(0x7f0000000080)={0x0, 0xa418, 0x0, 0x2, 0x326}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_setup(0x64f1, &(0x7f0000000300)={0x0, 0x1f16, 0x2, 0x0, 0xcbe}) (async) r4 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x4010, r4, 0x8000000) 00:59:06 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x20}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x200, 0x32ee238a, 0x0, 0x60, r1, 0x1, '\x00', r4, r5, 0x1, 0x1, 0x2}, 0x48) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfeffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x9000000}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"37b79194db6bc78c13f030e124387bff", 0x0, 0x0, {0x6, 0x5}, {0x3, 0x7}, 0xffff, [0x9, 0x7f, 0xfffffffffffffff7, 0x3, 0x8, 0x66, 0xd1, 0x4, 0x4, 0x6, 0x80000001, 0x4, 0x800, 0x17, 0x7ff, 0xfc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000a40)={{r2}, r3, 0x1a, @inherit={0x80, &(0x7f0000000280)={0x0, 0x7, 0x9, 0x3, {0x20, 0x2, 0x1, 0x9, 0x1ff}, [0x6, 0x2, 0x2, 0x800, 0x2, 0x7, 0x4000000000]}}, @subvolid=0x20}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) (async) syz_io_uring_setup(0x7d47, &(0x7f0000000080)={0x0, 0xa418, 0x0, 0x2, 0x326}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_setup(0x64f1, &(0x7f0000000300)={0x0, 0x1f16, 0x2, 0x0, 0xcbe}) (async) r4 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x4010, r4, 0x8000000) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800110060423188e15d7a8da983bf50a2d4683b839523fdc9e8e123ffddc84f58c77783162affcdfdfe68798e7b4e9c8ca5a0ac403a60", @ANYRES16=0x0, @ANYBLOB="010300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000800000012000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x802) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20) r2 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000080)=r0, 0x1) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf000000}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 0: eventfd2(0x4, 0x0) (async) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x20}}, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x200, 0x32ee238a, 0x0, 0x60, r1, 0x1, '\x00', r4, r5, 0x1, 0x1, 0x2}, 0x48) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xca9a3b00000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x60000000}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800110060423188e15d7a8da983bf50a2d4683b839523fdc9e8e123ffddc84f58c77783162affcdfdfe68798e7b4e9c8ca5a0ac403a60", @ANYRES16=0x0, @ANYBLOB="010300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000800000012000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x802) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20) (async) r2 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000080)=r0, 0x1) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x400000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 0: eventfd2(0x4, 0x0) r0 = eventfd2(0x5, 0x800) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200682, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3f) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xefffffff}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x844f0000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800110060423188e15d7a8da983bf50a2d4683b839523fdc9e8e123ffddc84f58c77783162affcdfdfe68798e7b4e9c8ca5a0ac403a60", @ANYRES16=0x0, @ANYBLOB="010300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000800000012000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x802) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20) (async) r2 = syz_io_uring_setup(0x35bf, &(0x7f0000000940), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000080)=r0, 0x1) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfeffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) 00:59:06 executing program 0: eventfd2(0x4, 0x0) (async) r0 = eventfd2(0x5, 0x800) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200682, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) (async) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3f) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xefffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80003) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:06 executing program 0: eventfd2(0x4, 0x0) (async) r0 = eventfd2(0x5, 0x800) read$eventfd(r0, &(0x7f0000000040), 0x8) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200682, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) (async) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3f) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf35c0000}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80003) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) 00:59:06 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='+\xcb\'\x00', 0x0, 0xffffffffffffffff) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80003) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x0, 0x80003) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xffffffef}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='+\xcb\'\x00', 0x0, 0xffffffffffffffff) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='+\xcb\'\x00', 0x0, 0xffffffffffffffff) (async) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfeff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = mq_open(&(0x7f0000000000)='\x00', 0x800, 0x4b, &(0x7f0000000080)={0x7, 0x25da, 0x4, 0xfffffffffffffffc}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000000c0)={0x10, 0x1, {0xff, @usage=0x9, 0x0, 0x6, 0x1, 0x0, 0x485, 0x60000000000000, 0x402, @usage=0x3, 0x579d678b, 0x1, [0x0, 0x1000, 0x0, 0xf3, 0x0, 0x4]}, {0x40, @usage=0x2, 0x0, 0x7, 0x0, 0x6fbdd2d0, 0x100000000, 0x9, 0x490, @usage=0x21, 0x779c, 0x0, [0x80000001, 0x3f, 0x0, 0x574, 0x4, 0x8]}, {0x9, @usage=0xfffffffffffffffa, 0x0, 0x96, 0xe5d, 0x1ff, 0xa52, 0x8, 0x8e, @usage=0x5, 0x3, 0x7, [0x100, 0x4, 0x20, 0x8000, 0xfffffffffffffffa, 0x6]}, {0x6, 0x7fff, 0x640304ad}}) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xffffffef, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x3a640000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:06 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r1 = mq_open(&(0x7f0000000000)='\x00', 0x800, 0x4b, &(0x7f0000000080)={0x7, 0x25da, 0x4, 0xfffffffffffffffc}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000000c0)={0x10, 0x1, {0xff, @usage=0x9, 0x0, 0x6, 0x1, 0x0, 0x485, 0x60000000000000, 0x402, @usage=0x3, 0x579d678b, 0x1, [0x0, 0x1000, 0x0, 0xf3, 0x0, 0x4]}, {0x40, @usage=0x2, 0x0, 0x7, 0x0, 0x6fbdd2d0, 0x100000000, 0x9, 0x490, @usage=0x21, 0x779c, 0x0, [0x80000001, 0x3f, 0x0, 0x574, 0x4, 0x8]}, {0x9, @usage=0xfffffffffffffffa, 0x0, 0x96, 0xe5d, 0x1ff, 0xa52, 0x8, 0x8e, @usage=0x5, 0x3, 0x7, [0x100, 0x4, 0x20, 0x8000, 0xfffffffffffffffa, 0x6]}, {0x6, 0x7fff, 0x640304ad}}) 00:59:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x3000000000000}, 0x0) 00:59:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:06 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xca9a3b}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='+\xcb\'\x00', 0x0, 0xffffffffffffffff) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = mq_open(&(0x7f0000000000)='\x00', 0x800, 0x4b, &(0x7f0000000080)={0x7, 0x25da, 0x4, 0xfffffffffffffffc}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000000c0)={0x10, 0x1, {0xff, @usage=0x9, 0x0, 0x6, 0x1, 0x0, 0x485, 0x60000000000000, 0x402, @usage=0x3, 0x579d678b, 0x1, [0x0, 0x1000, 0x0, 0xf3, 0x0, 0x4]}, {0x40, @usage=0x2, 0x0, 0x7, 0x0, 0x6fbdd2d0, 0x100000000, 0x9, 0x490, @usage=0x21, 0x779c, 0x0, [0x80000001, 0x3f, 0x0, 0x574, 0x4, 0x8]}, {0x9, @usage=0xfffffffffffffffa, 0x0, 0x96, 0xe5d, 0x1ff, 0xa52, 0x8, 0x8e, @usage=0x5, 0x3, 0x7, [0x100, 0x4, 0x20, 0x8000, 0xfffffffffffffffa, 0x6]}, {0x6, 0x7fff, 0x640304ad}}) eventfd2(0x0, 0x80800) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) mq_open(&(0x7f0000000000)='\x00', 0x800, 0x4b, &(0x7f0000000080)={0x7, 0x25da, 0x4, 0xfffffffffffffffc}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000000c0)={0x10, 0x1, {0xff, @usage=0x9, 0x0, 0x6, 0x1, 0x0, 0x485, 0x60000000000000, 0x402, @usage=0x3, 0x579d678b, 0x1, [0x0, 0x1000, 0x0, 0xf3, 0x0, 0x4]}, {0x40, @usage=0x2, 0x0, 0x7, 0x0, 0x6fbdd2d0, 0x100000000, 0x9, 0x490, @usage=0x21, 0x779c, 0x0, [0x80000001, 0x3f, 0x0, 0x574, 0x4, 0x8]}, {0x9, @usage=0xfffffffffffffffa, 0x0, 0x96, 0xe5d, 0x1ff, 0xa52, 0x8, 0x8e, @usage=0x5, 0x3, 0x7, [0x100, 0x4, 0x20, 0x8000, 0xfffffffffffffffa, 0x6]}, {0x6, 0x7fff, 0x640304ad}}) (async) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x40030000000000}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xa, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xf, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) 00:59:07 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) eventfd(0xe7eb) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffc00, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4004) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xefffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000100)='\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3b9aca00}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000100)='\x00', 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) eventfd(0xe7eb) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffc00, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4004) eventfd2(0x4, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) eventfd2(0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) eventfd(0xe7eb) (async) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffc00, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4004) (async) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (rerun: 32) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000100)='\x00', 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xec0, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x3, 0x801) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x4e8cb514}, 0x4) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74750077d321bdcb40b39f589b000000000000000000b6e61238e5a2c069620bd5dcb142acce78baf3e475d8f62f3ce345", @ANYRES32=0x0, @ANYRESHEX=r1]}) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x500000000000000}, 0x0) 00:59:07 executing program 0: r0 = eventfd2(0x4, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) eventfd(0xe7eb) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffc00, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4004) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xffffffef, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xca9a3b00000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x33fe0, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x3, 0x801) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x4e8cb514}, 0x4) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74750077d321bdcb40b39f589b000000000000000000b6e61238e5a2c069620bd5dcb142acce78baf3e475d8f62f3ce345", @ANYRES32=0x0, @ANYRESHEX=r1]}) eventfd2(0x3, 0x801) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x4e8cb514}, 0x4) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) syz_io_uring_complete(0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74750077d321bdcb40b39f589b000000000000000000b6e61238e5a2c069620bd5dcb142acce78baf3e475d8f62f3ce345", @ANYRES32=0x0, @ANYRESHEX=r1]}) (async) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20000060, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x600000000000000}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x3, 0x801) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x4e8cb514}, 0x4) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74750077d321bdcb40b39f589b000000000000000000b6e61238e5a2c069620bd5dcb142acce78baf3e475d8f62f3ce345", @ANYRES32=0x0, @ANYRESHEX=r1]}) eventfd2(0x3, 0x801) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x4e8cb514}, 0x4) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) (async) syz_io_uring_complete(0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74750077d321bdcb40b39f589b000000000000000000b6e61238e5a2c069620bd5dcb142acce78baf3e475d8f62f3ce345", @ANYRES32=0x0, @ANYRESHEX=r1]}) (async) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x700000000000000}, 0x0) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x7ffff000, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfeffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x9, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x800000000000000}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000827bd7000fedbdf250500000600000e0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40480c1}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c010}, 0x40824) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xf, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', r4, 0x4, 0x0, 0x1, 0x9c, 0x18, @mcast2, @mcast2, 0x8, 0x10, 0x0, 0x59}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x124, r3, 0x1, 0x0, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x4}}, {{0x8, 0x1, r8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf8000000}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0xffffffffffffff48}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800009}}, {0x8, 0x6, r4}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40808}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8d5) r9 = eventfd2(0x4, 0x0) read$eventfd(r9, &(0x7f0000000040), 0xfffffd3b) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffdef, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000827bd7000fedbdf250500000600000e0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40480c1}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c010}, 0x40824) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', r4, 0x4, 0x0, 0x1, 0x9c, 0x18, @mcast2, @mcast2, 0x8, 0x10, 0x0, 0x59}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x124, r3, 0x1, 0x0, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x4}}, {{0x8, 0x1, r8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf8000000}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0xffffffffffffff48}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800009}}, {0x8, 0x6, r4}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40808}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8d5) (async) r9 = eventfd2(0x4, 0x0) read$eventfd(r9, &(0x7f0000000040), 0xfffffd3b) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x900000000000000}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x2, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf00000000000000}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000827bd7000fedbdf250500000600000e0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40480c1}, 0x8040) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c010}, 0x40824) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', r4, 0x4, 0x0, 0x1, 0x9c, 0x18, @mcast2, @mcast2, 0x8, 0x10, 0x0, 0x59}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x124, r3, 0x1, 0x0, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x4}}, {{0x8, 0x1, r8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf8000000}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0xffffffffffffff48}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800009}}, {0x8, 0x6, r4}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40808}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8d5) (async, rerun: 32) r9 = eventfd2(0x4, 0x0) (rerun: 32) read$eventfd(r9, &(0x7f0000000040), 0xfffffd3b) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0x2, 0x0, [0x10000, 0x3, 0x100000001, 0x4, 0x4f], [0x1, 0x1ff, 0x1, 0x8, 0xffffffff, 0x3, 0x916, 0x6, 0x2, 0x3, 0x40, 0xa3, 0x299, 0x0, 0x9, 0xdeb, 0x401, 0x4, 0x8, 0xffffffffffffff7f, 0x6, 0x8, 0x10001, 0x6, 0x1, 0x9, 0x8, 0x5, 0x34, 0x3ff, 0xbe8a, 0x9, 0xffffffff, 0x1, 0x8000, 0x0, 0x6, 0x1f, 0x100000001, 0x3, 0x3ff, 0x7, 0x2, 0xc3, 0x1, 0x0, 0xe5, 0x681b062f, 0x10000, 0x9, 0x0, 0xb31, 0x5, 0x1, 0x1, 0x2d00000000, 0x81, 0x0, 0x0, 0x100000001, 0x4, 0x80, 0x4d35, 0x120000000, 0x7, 0xbe, 0x401, 0x4d, 0x1f, 0x2, 0x6, 0x40, 0x13, 0x80d, 0x4, 0xa0, 0x9, 0x9, 0xffffffff, 0x8001, 0x5eb7, 0x80000000, 0x6, 0x9, 0xfffffffffffffff8, 0x58680476, 0x9, 0x1, 0x100, 0x5, 0x1f8, 0xf671, 0x5, 0x7, 0xfffffffffffffffe, 0x94f, 0xc5, 0x800, 0x7, 0x248000000, 0x4c8c, 0x0, 0x5504, 0xffffffffffffff7f, 0x1, 0x101, 0x101, 0x7, 0x8001, 0xd27e9b9, 0x3, 0x0, 0x2, 0x38ae9d6d, 0x7fff, 0x5, 0x5, 0x3, 0x1ff, 0x81, 0x8]}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000004c0), &(0x7f0000000500)=0x4) syz_io_uring_setup(0x138d, &(0x7f0000000540)={0x0, 0xe92a, 0x22, 0x3, 0x1cc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd=r3, 0x9, &(0x7f0000000640)="a48e4bb16052a8d5cad10f6fc7ef38d35d5f8c69182808e861da36872ee193008aa47e7a3654e3928b2d2178a1c96776e0ce8a3b7c1bf2d686109778a838e4c7aa0c77a1ee870e20bf3f4f249e37384614808ca387050e513f25f5", 0x5b, 0x5, 0x1}, 0x81) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x8, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x6000000000000000}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xec0, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0x2, 0x0, [0x10000, 0x3, 0x100000001, 0x4, 0x4f], [0x1, 0x1ff, 0x1, 0x8, 0xffffffff, 0x3, 0x916, 0x6, 0x2, 0x3, 0x40, 0xa3, 0x299, 0x0, 0x9, 0xdeb, 0x401, 0x4, 0x8, 0xffffffffffffff7f, 0x6, 0x8, 0x10001, 0x6, 0x1, 0x9, 0x8, 0x5, 0x34, 0x3ff, 0xbe8a, 0x9, 0xffffffff, 0x1, 0x8000, 0x0, 0x6, 0x1f, 0x100000001, 0x3, 0x3ff, 0x7, 0x2, 0xc3, 0x1, 0x0, 0xe5, 0x681b062f, 0x10000, 0x9, 0x0, 0xb31, 0x5, 0x1, 0x1, 0x2d00000000, 0x81, 0x0, 0x0, 0x100000001, 0x4, 0x80, 0x4d35, 0x120000000, 0x7, 0xbe, 0x401, 0x4d, 0x1f, 0x2, 0x6, 0x40, 0x13, 0x80d, 0x4, 0xa0, 0x9, 0x9, 0xffffffff, 0x8001, 0x5eb7, 0x80000000, 0x6, 0x9, 0xfffffffffffffff8, 0x58680476, 0x9, 0x1, 0x100, 0x5, 0x1f8, 0xf671, 0x5, 0x7, 0xfffffffffffffffe, 0x94f, 0xc5, 0x800, 0x7, 0x248000000, 0x4c8c, 0x0, 0x5504, 0xffffffffffffff7f, 0x1, 0x101, 0x101, 0x7, 0x8001, 0xd27e9b9, 0x3, 0x0, 0x2, 0x38ae9d6d, 0x7fff, 0x5, 0x5, 0x3, 0x1ff, 0x81, 0x8]}) (async, rerun: 64) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) syz_io_uring_setup(0x138d, &(0x7f0000000540)={0x0, 0xe92a, 0x22, 0x3, 0x1cc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) (async, rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) syz_io_uring_submit(0x0, r2, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd=r3, 0x9, &(0x7f0000000640)="a48e4bb16052a8d5cad10f6fc7ef38d35d5f8c69182808e861da36872ee193008aa47e7a3654e3928b2d2178a1c96776e0ce8a3b7c1bf2d686109778a838e4c7aa0c77a1ee870e20bf3f4f249e37384614808ca387050e513f25f5", 0x5b, 0x5, 0x1}, 0x81) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1b, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8000000000000000}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x33fe0, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 0: r0 = eventfd2(0x4, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x69}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40400d0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x300, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20000060, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfeff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xefffffff00000000}, 0x0) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0x2, 0x0, [0x10000, 0x3, 0x100000001, 0x4, 0x4f], [0x1, 0x1ff, 0x1, 0x8, 0xffffffff, 0x3, 0x916, 0x6, 0x2, 0x3, 0x40, 0xa3, 0x299, 0x0, 0x9, 0xdeb, 0x401, 0x4, 0x8, 0xffffffffffffff7f, 0x6, 0x8, 0x10001, 0x6, 0x1, 0x9, 0x8, 0x5, 0x34, 0x3ff, 0xbe8a, 0x9, 0xffffffff, 0x1, 0x8000, 0x0, 0x6, 0x1f, 0x100000001, 0x3, 0x3ff, 0x7, 0x2, 0xc3, 0x1, 0x0, 0xe5, 0x681b062f, 0x10000, 0x9, 0x0, 0xb31, 0x5, 0x1, 0x1, 0x2d00000000, 0x81, 0x0, 0x0, 0x100000001, 0x4, 0x80, 0x4d35, 0x120000000, 0x7, 0xbe, 0x401, 0x4d, 0x1f, 0x2, 0x6, 0x40, 0x13, 0x80d, 0x4, 0xa0, 0x9, 0x9, 0xffffffff, 0x8001, 0x5eb7, 0x80000000, 0x6, 0x9, 0xfffffffffffffff8, 0x58680476, 0x9, 0x1, 0x100, 0x5, 0x1f8, 0xf671, 0x5, 0x7, 0xfffffffffffffffe, 0x94f, 0xc5, 0x800, 0x7, 0x248000000, 0x4c8c, 0x0, 0x5504, 0xffffffffffffff7f, 0x1, 0x101, 0x101, 0x7, 0x8001, 0xd27e9b9, 0x3, 0x0, 0x2, 0x38ae9d6d, 0x7fff, 0x5, 0x5, 0x3, 0x1ff, 0x81, 0x8]}) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000004c0), &(0x7f0000000500)=0x4) syz_io_uring_setup(0x138d, &(0x7f0000000540)={0x0, 0xe92a, 0x22, 0x3, 0x1cc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd=r3, 0x9, &(0x7f0000000640)="a48e4bb16052a8d5cad10f6fc7ef38d35d5f8c69182808e861da36872ee193008aa47e7a3654e3928b2d2178a1c96776e0ce8a3b7c1bf2d686109778a838e4c7aa0c77a1ee870e20bf3f4f249e37384614808ca387050e513f25f5", 0x5b, 0x5, 0x1}, 0x81) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x7ffff000, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 0: r0 = eventfd2(0x4, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x69}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40400d0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x2, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 0: r0 = eventfd2(0x4, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x69}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40400d0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffdef, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:07 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xca9a3b}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:07 executing program 2: r0 = eventfd2(0x0, 0x80800) eventfd2(0x1200, 0x1) r1 = syz_io_uring_complete(0x0) openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x3, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf35c000000000000}, 0x0) 00:59:08 executing program 0: r0 = eventfd2(0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='*.\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x2, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 2: r0 = eventfd2(0x0, 0x80800) eventfd2(0x1200, 0x1) (async) r1 = syz_io_uring_complete(0x0) openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 00:59:08 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:08 executing program 0: r0 = eventfd2(0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='*.\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x4, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x8, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 2: r0 = eventfd2(0x0, 0x80800) (async) eventfd2(0x1200, 0x1) r1 = syz_io_uring_complete(0x0) openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:08 executing program 0: r0 = eventfd2(0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='*.\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x4, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='*.\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:59:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 00:59:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x5, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:08 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3b9aca00}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1a, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x6, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 00:59:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x7, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x300, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:08 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xbc9e}, 0x20) r1 = eventfd2(0x4, 0x0) syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x11d5, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) getsockopt$inet6_dccp_int(r5, 0x21, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) 00:59:08 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x804, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5e}}}}, [""]}, 0x28}}, 0x20000000) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r2, 0x1) read$eventfd(r1, &(0x7f0000000080), 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x700, 0x11, 0x101, 0x6, {{0x2f, 0x4, 0x0, 0x26, 0xbc, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010102, {[@cipso={0x86, 0x37, 0x3, [{0x5, 0x11, "7fd1de74430d8740b187327a2b0364"}, {0x2, 0x6, "490c0f58"}, {0x6, 0x2}, {0x7, 0x7, "6c8ccef9df"}, {0x2, 0x2}, {0x1, 0x5, "971d10"}, {0x2, 0xa, "1292848a61f22444"}]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0xe, [0x3]}, @timestamp_addr={0x44, 0x34, 0x45, 0x1, 0xb, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x2}, {@remote}, {@loopback, 0x1}, {@loopback, 0xd0}]}, @noop, @timestamp_addr={0x44, 0x14, 0x81, 0x1, 0x3, [{@loopback, 0xfffffff8}, {@remote, 0x6}]}, @end, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x44, 0x1, 0xd, [{@remote, 0xebf7}, {@loopback, 0x5}]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x6, [0x1000]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000005c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x280, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x42ffcbfd}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf51}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x4004001) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000001c0)={0x0, 0x800, 0x3}) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x3f, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) 00:59:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) 00:59:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x8, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:08 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x9, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:59:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x2, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) 00:59:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xf, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xbc9e}, 0x20) r1 = eventfd2(0x4, 0x0) syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x11d5, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) getsockopt$inet6_dccp_int(r5, 0x21, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) socket$l2tp6(0xa, 0x2, 0x73) (async) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xbc9e}, 0x20) (async) eventfd2(0x4, 0x0) (async) syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_setup(0x11d5, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) (async) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x200) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) (async) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) getsockopt$inet6_dccp_int(r5, 0x21, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) 00:59:09 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x400000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:09 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x3, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:09 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x0) 00:59:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x60, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:09 executing program 2: r0 = eventfd2(0x0, 0x80800) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x804, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5e}}}}, [""]}, 0x28}}, 0x20000000) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r2, 0x1) read$eventfd(r1, &(0x7f0000000080), 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x700, 0x11, 0x101, 0x6, {{0x2f, 0x4, 0x0, 0x26, 0xbc, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010102, {[@cipso={0x86, 0x37, 0x3, [{0x5, 0x11, "7fd1de74430d8740b187327a2b0364"}, {0x2, 0x6, "490c0f58"}, {0x6, 0x2}, {0x7, 0x7, "6c8ccef9df"}, {0x2, 0x2}, {0x1, 0x5, "971d10"}, {0x2, 0xa, "1292848a61f22444"}]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0xe, [0x3]}, @timestamp_addr={0x44, 0x34, 0x45, 0x1, 0xb, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x2}, {@remote}, {@loopback, 0x1}, {@loopback, 0xd0}]}, @noop, @timestamp_addr={0x44, 0x14, 0x81, 0x1, 0x3, [{@loopback, 0xfffffff8}, {@remote, 0x6}]}, @end, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x44, 0x1, 0xd, [{@remote, 0xebf7}, {@loopback, 0x5}]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x6, [0x1000]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000005c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x280, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x42ffcbfd}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf51}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x4004001) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000001c0)={0x0, 0x800, 0x3}) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x3f, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) 00:59:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xbc9e}, 0x20) (async) r1 = eventfd2(0x4, 0x0) syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x3c51}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) syz_io_uring_setup(0x11d5, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) (async) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x200) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) read$eventfd(r1, &(0x7f0000000040), 0xfffffd3b) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) getsockopt$inet6_dccp_int(r5, 0x21, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) 00:59:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x300, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:09 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x4, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:09 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x7}, 0x0) 00:59:09 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x500, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:09 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:09 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) 00:59:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x600, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:09 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x20}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x200, 0x32ee238a, 0x0, 0x60, r1, 0x1, '\x00', r4, r5, 0x1, 0x1, 0x2}, 0x48) 00:59:09 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x5, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:10 executing program 2: r0 = eventfd2(0x0, 0x80800) (async) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x804, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5e}}}}, [""]}, 0x28}}, 0x20000000) (async) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r2, 0x1) read$eventfd(r1, &(0x7f0000000080), 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x700, 0x11, 0x101, 0x6, {{0x2f, 0x4, 0x0, 0x26, 0xbc, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010102, {[@cipso={0x86, 0x37, 0x3, [{0x5, 0x11, "7fd1de74430d8740b187327a2b0364"}, {0x2, 0x6, "490c0f58"}, {0x6, 0x2}, {0x7, 0x7, "6c8ccef9df"}, {0x2, 0x2}, {0x1, 0x5, "971d10"}, {0x2, 0xa, "1292848a61f22444"}]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0xe, [0x3]}, @timestamp_addr={0x44, 0x34, 0x45, 0x1, 0xb, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x2}, {@remote}, {@loopback, 0x1}, {@loopback, 0xd0}]}, @noop, @timestamp_addr={0x44, 0x14, 0x81, 0x1, 0x3, [{@loopback, 0xfffffff8}, {@remote, 0x6}]}, @end, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x44, 0x1, 0xd, [{@remote, 0xebf7}, {@loopback, 0x5}]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x6, [0x1000]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000005c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x280, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x42ffcbfd}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf51}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x4004001) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000001c0)={0x0, 0x800, 0x3}) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x3f, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) 00:59:10 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:10 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) 00:59:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x6, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x700, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:10 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x20}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x200, 0x32ee238a, 0x0, 0x60, r1, 0x1, '\x00', r4, r5, 0x1, 0x1, 0x2}, 0x48) 00:59:10 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf}, 0x0) 00:59:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x900, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x7, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:10 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xf00, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:10 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x60}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x8, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x4f84, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x20}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x200, 0x32ee238a, 0x0, 0x60, r1, 0x1, '\x00', r4, r5, 0x1, 0x1, 0x2}, 0x48) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x6000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x20}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, 0x0) 00:59:11 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x9, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x844f, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x20}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x500}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xf, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') (async) r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x30000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x20}}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x60, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x34000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 2: eventfd2(0x0, 0x80800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)=']^%!\x00', 0x0, r0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x81, 0x3, 0x7f, 0x0, 0x6, 0x12108, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x70000000, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0x3, 0x1, 0x7, 0x401, 0x401, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x8) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x700}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x300, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x400300, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 2: eventfd2(0x0, 0x80800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)=']^%!\x00', 0x0, r0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x81, 0x3, 0x7f, 0x0, 0x6, 0x12108, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x70000000, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0x3, 0x1, 0x7, 0x401, 0x401, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x8) eventfd2(0x0, 0x80800) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)=']^%!\x00', 0x0, r0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x81, 0x3, 0x7f, 0x0, 0x6, 0x12108, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x70000000, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0x3, 0x1, 0x7, 0x401, 0x401, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x8) (async) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x900}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x500, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x1000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x600, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x700, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 2: eventfd2(0x0, 0x80800) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)=']^%!\x00', 0x0, r0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x81, 0x3, 0x7f, 0x0, 0x6, 0x12108, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x70000000, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0x3, 0x1, 0x7, 0x401, 0x401, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x8) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x2000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x900, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x5cf3}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xf00, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x3000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x3a64, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x4000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x6000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf35c}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x643a, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x5000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 00:59:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x6000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x30000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:11 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x7000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x34000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x8000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x400300, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x9000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x1000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xf000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 0: eventfd2(0x4, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x2000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:59:12 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbbc801bf083bc2ad3c26c2516df2502000000140008006772657461703000000000000000000ac80002000100000008000c0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x6000081) r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x9, 0x1, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8, 0x7f9, 0x40, 0x401}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x7c, 0xfa, 0x0, 0x40, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x20, 0xde2e, 0x6b4}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xff, 0x9, 0x5c, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x5, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x60) r8 = eventfd2(0x0, 0x80800) read$eventfd(r8, &(0x7f0000000040), 0xfffffd3b) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x60000000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbbc801bf083bc2ad3c26c2516df2502000000140008006772657461703000000000000000000ac80002000100000008000c0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x6000081) r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x9, 0x1, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8, 0x7f9, 0x40, 0x401}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x7c, 0xfa, 0x0, 0x40, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x20, 0xde2e, 0x6b4}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xff, 0x9, 0x5c, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x5, 0x7}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x60) r8 = eventfd2(0x0, 0x80800) read$eventfd(r8, &(0x7f0000000040), 0xfffffd3b) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x3000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x844f0000, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:12 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbbc801bf083bc2ad3c26c2516df2502000000140008006772657461703000000000000000000ac80002000100000008000c0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x6000081) (async) r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x9, 0x1, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8, 0x7f9, 0x40, 0x401}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x7c, 0xfa, 0x0, 0x40, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x20, 0xde2e, 0x6b4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xff, 0x9, 0x5c, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x5, 0x7}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x60) (async) r8 = eventfd2(0x0, 0x80800) read$eventfd(r8, &(0x7f0000000040), 0xfffffd3b) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x4000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x9effffff, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x5000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000000), 0x8) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xefffffff, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x6000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000000), 0x8) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xf0ffffff, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x7000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xffffff7f, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:12 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x0, 0x80800) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x8000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xffffff9e, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44084}, 0x40041) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000660000000c0099000000000000000000050018010a0000004600220100000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4030}, 0x20008084) r2 = eventfd2(0x0, 0x80800) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xffffffef, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x9000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xfffffff0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 00:59:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xf000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) [ 2525.816341][T30113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:59:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44084}, 0x40041) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000660000000c0099000000000000000000050018010a0000004600220100000000"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4030}, 0x20008084) r2 = eventfd2(0x0, 0x80800) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:59:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) 00:59:12 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:13 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x3a640000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x2, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:13 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 00:59:13 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44084}, 0x40041) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000660000000c0099000000000000000000050018010a0000004600220100000000"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4030}, 0x20008084) r2 = eventfd2(0x0, 0x80800) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:59:13 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:13 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf35c0000}, 0x0) 00:59:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x3, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x60000000, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:13 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 00:59:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x4, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) [ 2526.839077][T30156] ================================================================== [ 2526.847154][T30156] BUG: KCSAN: data-race in random_recv_done / virtio_read [ 2526.854272][T30156] [ 2526.856591][T30156] write to 0xffff88810254d8cc of 4 bytes by interrupt on cpu 1: [ 2526.864213][T30156] random_recv_done+0x58/0x80 [ 2526.868891][T30156] vring_interrupt+0x15d/0x180 [ 2526.873658][T30156] __handle_irq_event_percpu+0x92/0x450 [ 2526.879210][T30156] handle_irq_event+0x7b/0x110 [ 2526.883980][T30156] handle_edge_irq+0x18e/0x5f0 [ 2526.888750][T30156] __common_interrupt+0x60/0x100 [ 2526.893685][T30156] common_interrupt+0x9a/0xc0 [ 2526.898343][T30156] asm_common_interrupt+0x1e/0x40 [ 2526.903345][T30156] __sanitizer_cov_trace_pc+0x14/0x60 [ 2526.908716][T30156] zap_pte_range+0x87d/0x10e0 [ 2526.913377][T30156] unmap_page_range+0x2dc/0x3d0 [ 2526.918207][T30156] unmap_single_vma+0x157/0x210 [ 2526.923037][T30156] unmap_vmas+0xd0/0x180 [ 2526.927261][T30156] exit_mmap+0x261/0x4b0 [ 2526.931482][T30156] __mmput+0x27/0x1b0 [ 2526.935445][T30156] mmput+0x3d/0x50 [ 2526.939146][T30156] exit_mm+0xdb/0x170 [ 2526.943107][T30156] do_exit+0x569/0x16a0 [ 2526.947242][T30156] do_group_exit+0x8b/0x160 [ 2526.951724][T30156] __do_sys_exit_group+0xb/0x10 [ 2526.956552][T30156] __se_sys_exit_group+0x5/0x10 [ 2526.961379][T30156] __x64_sys_exit_group+0x16/0x20 [ 2526.966380][T30156] do_syscall_64+0x44/0xd0 [ 2526.970773][T30156] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2526.976645][T30156] [ 2526.978945][T30156] write to 0xffff88810254d8cc of 4 bytes by task 30156 on cpu 0: [ 2526.986634][T30156] virtio_read+0x1a0/0x450 [ 2526.991028][T30156] rng_dev_read+0x1b4/0x630 [ 2526.995507][T30156] vfs_read+0x1e6/0x750 [ 2526.999637][T30156] ksys_read+0xd9/0x190 [ 2527.003771][T30156] __x64_sys_read+0x3e/0x50 [ 2527.008267][T30156] do_syscall_64+0x44/0xd0 [ 2527.012658][T30156] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2527.018527][T30156] [ 2527.020826][T30156] value changed: 0x00000040 -> 0x00000000 [ 2527.026516][T30156] [ 2527.028815][T30156] Reported by Kernel Concurrency Sanitizer on: [ 2527.034937][T30156] CPU: 0 PID: 30156 Comm: syz-executor.0 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2527.045930][T30156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.055964][T30156] ================================================================== 00:59:14 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:14 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:14 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x9effffff, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:14 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 00:59:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x5, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:14 executing program 2: eventfd2(0x0, 0x80800) 00:59:14 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:14 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xefffffff, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:14 executing program 2: eventfd2(0x0, 0x80800) eventfd2(0x0, 0x80800) (async) 00:59:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x6, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:14 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) 00:59:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x7, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xf0ffffff, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 00:59:15 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x8, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 2: eventfd2(0x0, 0x80800) 00:59:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xffffff7f, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x9, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x2) 00:59:15 executing program 2: eventfd2(0x10000000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 00:59:15 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xffffff9e, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xf, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x3) 00:59:15 executing program 2: eventfd2(0x10000000, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 00:59:15 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xffffffef, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:15 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:15 executing program 2: eventfd2(0x10000000, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x4) 00:59:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x60, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, 0x0, 0x0) 00:59:15 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0xfffffff0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x300, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x5) 00:59:15 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x5, 0x1) 00:59:15 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, 0x0, 0x0) 00:59:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x6) 00:59:15 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x500, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, 0x0, 0x0) 00:59:15 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x5, 0x1) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x7) 00:59:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x2, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x600, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:15 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:15 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x5, 0x1) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x8) 00:59:15 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x700, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x3, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x9) 00:59:15 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) r0 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = eventfd2(0x1f, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 00:59:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x900, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x4, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xf) 00:59:16 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xf00, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:16 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:16 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x5, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:16 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) r0 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = eventfd2(0x1f, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) (async) syz_io_uring_complete(0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) eventfd2(0x1f, 0x80800) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) 00:59:16 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x60) 00:59:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x4f84, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:16 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x6, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:16 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x300) 00:59:16 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffd3b) r0 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = eventfd2(0x1f, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 00:59:16 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:16 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:17 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x500) 00:59:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x7, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:17 executing program 2: r0 = eventfd2(0x5096231b, 0x40001) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x6000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:17 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x8, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x600) 00:59:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x844f, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:17 executing program 2: r0 = eventfd2(0x5096231b, 0x40001) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:17 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x9, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 0: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x700) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x30000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 2: r0 = eventfd2(0x5096231b, 0x40001) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x5096231b, 0x40001) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xf, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x900) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x34000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 0: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x60, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x20000108}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xf00) 00:59:18 executing program 0: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x400300, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x300, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x5cf3) 00:59:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"afaf3d04529afa32530580efeae40f68", 0x0, 0x0, {0x69, 0x40}, {0x1000, 0x3b5}, 0x1, [0x101, 0x101, 0x461330d9, 0xff, 0x2, 0x4, 0x0, 0xfff, 0xf0, 0x401, 0xfffffffffffffff8, 0x9, 0x5, 0xc0000000000, 0x1fa3, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"abf0778803e8826796595a5255f378e2", r1, 0x0, {0x9, 0x1ff}, {0x1, 0x8001}, 0x2, [0x4, 0xda24, 0x4, 0x9, 0x10001, 0x9, 0xec, 0x2b64, 0x33, 0xfff, 0x90, 0xffffffff, 0xffffffffffffffe0, 0x401, 0x9e, 0xa80]}) r2 = eventfd2(0x0, 0x80800) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)="623d50f415db66eb9b46f078de9a874de0acc6f3af4b61f4bc7a91d48ec36fbfef5978a0178fbdaf39d445d565b0e2ef8dafba2811eb37c73809527d3316068b7b3c5311fc725c52e9c035b38c0b44d0e86d9c6f09413f4777c317c4e3d3f5f13f2a4717c19baf6869af8cbe61e83eb140945d0e5bb902dba75fb1ba21c232", 0x7f) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x20000148}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x1000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"afaf3d04529afa32530580efeae40f68", 0x0, 0x0, {0x69, 0x40}, {0x1000, 0x3b5}, 0x1, [0x101, 0x101, 0x461330d9, 0xff, 0x2, 0x4, 0x0, 0xfff, 0xf0, 0x401, 0xfffffffffffffff8, 0x9, 0x5, 0xc0000000000, 0x1fa3, 0x4]}) (rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"abf0778803e8826796595a5255f378e2", r1, 0x0, {0x9, 0x1ff}, {0x1, 0x8001}, 0x2, [0x4, 0xda24, 0x4, 0x9, 0x10001, 0x9, 0xec, 0x2b64, 0x33, 0xfff, 0x90, 0xffffffff, 0xffffffffffffffe0, 0x401, 0x9e, 0xa80]}) (async) r2 = eventfd2(0x0, 0x80800) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)="623d50f415db66eb9b46f078de9a874de0acc6f3af4b61f4bc7a91d48ec36fbfef5978a0178fbdaf39d445d565b0e2ef8dafba2811eb37c73809527d3316068b7b3c5311fc725c52e9c035b38c0b44d0e86d9c6f09413f4777c317c4e3d3f5f13f2a4717c19baf6869af8cbe61e83eb140945d0e5bb902dba75fb1ba21c232", 0x7f) (async) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x6000) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x500, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"afaf3d04529afa32530580efeae40f68", 0x0, 0x0, {0x69, 0x40}, {0x1000, 0x3b5}, 0x1, [0x101, 0x101, 0x461330d9, 0xff, 0x2, 0x4, 0x0, 0xfff, 0xf0, 0x401, 0xfffffffffffffff8, 0x9, 0x5, 0xc0000000000, 0x1fa3, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"abf0778803e8826796595a5255f378e2", r1, 0x0, {0x9, 0x1ff}, {0x1, 0x8001}, 0x2, [0x4, 0xda24, 0x4, 0x9, 0x10001, 0x9, 0xec, 0x2b64, 0x33, 0xfff, 0x90, 0xffffffff, 0xffffffffffffffe0, 0x401, 0x9e, 0xa80]}) r2 = eventfd2(0x0, 0x80800) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)="623d50f415db66eb9b46f078de9a874de0acc6f3af4b61f4bc7a91d48ec36fbfef5978a0178fbdaf39d445d565b0e2ef8dafba2811eb37c73809527d3316068b7b3c5311fc725c52e9c035b38c0b44d0e86d9c6f09413f4777c317c4e3d3f5f13f2a4717c19baf6869af8cbe61e83eb140945d0e5bb902dba75fb1ba21c232", 0x7f) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"afaf3d04529afa32530580efeae40f68", 0x0, 0x0, {0x69, 0x40}, {0x1000, 0x3b5}, 0x1, [0x101, 0x101, 0x461330d9, 0xff, 0x2, 0x4, 0x0, 0xfff, 0xf0, 0x401, 0xfffffffffffffff8, 0x9, 0x5, 0xc0000000000, 0x1fa3, 0x4]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"abf0778803e8826796595a5255f378e2", r1, 0x0, {0x9, 0x1ff}, {0x1, 0x8001}, 0x2, [0x4, 0xda24, 0x4, 0x9, 0x10001, 0x9, 0xec, 0x2b64, 0x33, 0xfff, 0x90, 0xffffffff, 0xffffffffffffffe0, 0x401, 0x9e, 0xa80]}) (async) eventfd2(0x0, 0x80800) (async) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)="623d50f415db66eb9b46f078de9a874de0acc6f3af4b61f4bc7a91d48ec36fbfef5978a0178fbdaf39d445d565b0e2ef8dafba2811eb37c73809527d3316068b7b3c5311fc725c52e9c035b38c0b44d0e86d9c6f09413f4777c317c4e3d3f5f13f2a4717c19baf6869af8cbe61e83eb140945d0e5bb902dba75fb1ba21c232", 0x7f) (async) read$eventfd(r2, &(0x7f0000000040), 0xfffffd3b) (async) 00:59:18 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x4}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x2000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x600, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x3000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xf35c) 00:59:18 executing program 2: r0 = eventfd2(0x80800003, 0x80000) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:18 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x4000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x700, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xfe}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x30000) 00:59:18 executing program 2: r0 = eventfd2(0x80800003, 0x80000) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x900, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xfeff}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x5000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x34000) 00:59:18 executing program 2: r0 = eventfd2(0x80800003, 0x80000) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xfffe}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xf00, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x6000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x400300) 00:59:18 executing program 2: r0 = eventfd2(0x101, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/141, 0x8d) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x3a64, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x7000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xca9a3b}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x1000000) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x6000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x8000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 2: r0 = eventfd2(0x101, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/141, 0x8d) eventfd2(0x101, 0x80800) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/141, 0x8d) (async) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x4000000}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x2000000) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x643a, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x9000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 2: r0 = eventfd2(0x101, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/141, 0x8d) eventfd2(0x101, 0x80800) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/141, 0x8d) (async) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x8000000}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x3000000) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x30000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x33}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x6, 0x1}, {0x48}, {0x9, 0x1}, {0x16}, {0x6}, {0x1b, 0x1}, {0x6, 0x1}, {0x30}, {0x0, 0x1}, {0x1, 0x1}, {0x16}, {0xa, 0x1}, {0x5}, {0x48, 0x1}, {0x4, 0x1}, {0x48}]}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1ab}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x40004) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x13}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8003}, 0xc00c015) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xf000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x3b9aca00}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x4000000) 00:59:18 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x34000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x33}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x6, 0x1}, {0x48}, {0x9, 0x1}, {0x16}, {0x6}, {0x1b, 0x1}, {0x6, 0x1}, {0x30}, {0x0, 0x1}, {0x1, 0x1}, {0x16}, {0xa, 0x1}, {0x5}, {0x48, 0x1}, {0x4, 0x1}, {0x48}]}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1ab}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x40004) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x13}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8003}, 0xc00c015) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xfeffffff}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x60000000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x5000000) 00:59:18 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x400300, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x6000000) 00:59:18 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x33}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x6, 0x1}, {0x48}, {0x9, 0x1}, {0x16}, {0x6}, {0x1b, 0x1}, {0x6, 0x1}, {0x30}, {0x0, 0x1}, {0x1, 0x1}, {0x16}, {0xa, 0x1}, {0x5}, {0x48, 0x1}, {0x4, 0x1}, {0x48}]}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1ab}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x40004) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x13}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8003}, 0xc00c015) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xfffffffe}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x1000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x844f0000, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x7000000) 00:59:18 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:59:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x2000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x9effffff, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:18 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xca9a3b00000000}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 2531.957746][ C1] ================================================================== [ 2531.965801][ C1] BUG: KCSAN: data-race in random_recv_done / virtio_read [ 2531.972887][ C1] [ 2531.975187][ C1] write to 0xffff88810254d8cc of 4 bytes by task 30540 on cpu 0: [ 2531.982879][ C1] virtio_read+0x1a0/0x450 [ 2531.987273][ C1] rng_dev_read+0x1b4/0x630 [ 2531.991763][ C1] vfs_read+0x1e6/0x750 [ 2531.995900][ C1] ksys_read+0xd9/0x190 [ 2532.000043][ C1] __x64_sys_read+0x3e/0x50 [ 2532.004531][ C1] do_syscall_64+0x44/0xd0 [ 2532.008932][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2532.014809][ C1] [ 2532.017119][ C1] write to 0xffff88810254d8cc of 4 bytes by interrupt on cpu 1: [ 2532.024725][ C1] random_recv_done+0x58/0x80 [ 2532.029384][ C1] vring_interrupt+0x15d/0x180 [ 2532.034134][ C1] __handle_irq_event_percpu+0x92/0x450 [ 2532.039656][ C1] handle_irq_event+0x7b/0x110 [ 2532.044396][ C1] handle_edge_irq+0x18e/0x5f0 [ 2532.049136][ C1] __common_interrupt+0x60/0x100 [ 2532.054048][ C1] common_interrupt+0x9a/0xc0 [ 2532.058702][ C1] asm_common_interrupt+0x1e/0x40 [ 2532.063706][ C1] acpi_idle_enter+0x282/0x300 [ 2532.068448][ C1] cpuidle_enter_state+0x2b4/0x7d0 [ 2532.073539][ C1] cpuidle_enter+0x3c/0x60 [ 2532.077932][ C1] do_idle+0x1b2/0x250 [ 2532.081981][ C1] cpu_startup_entry+0x15/0x20 [ 2532.086736][ C1] secondary_startup_64_no_verify+0xc4/0xcb [ 2532.092615][ C1] [ 2532.094916][ C1] value changed: 0x00000040 -> 0x00000000 [ 2532.100607][ C1] [ 2532.102908][ C1] Reported by Kernel Concurrency Sanitizer on: [ 2532.109032][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2532.119243][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2532.129288][ C1] ================================================================== [ 2532.469858][ C1] virtio_rng virtio3: input:id 0 is not a head! 00:59:19 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:19 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:59:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x8000000) 00:59:19 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x3000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:19 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x400000000000000}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xefffffff, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:19 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:59:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x9000000) 00:59:19 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x800000000000000}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xf0ffffff, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xf000000) 00:59:19 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x4000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:20 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:20 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xfeffffffffffffff}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:20 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x5000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:20 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x60000000) 00:59:20 executing program 2: r0 = eventfd2(0x0, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0xd1) 00:59:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xffffff7f, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xffffff9e, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:20 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x9effffff) 00:59:20 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:20 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x6000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:20 executing program 2: r0 = eventfd2(0x0, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0xd1) 00:59:20 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x7000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xefffffff) 00:59:21 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xffffffef, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 2: r0 = eventfd2(0x0, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0xd1) 00:59:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x8000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x4}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:21 executing program 2: r0 = eventfd2(0x0, 0x40001) write$eventfd(r0, &(0x7f0000000000)=0x3f, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xf0ffffff) 00:59:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xfffffff0, {{0x1b}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x9000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:21 executing program 2: r0 = eventfd2(0x0, 0x40001) write$eventfd(r0, &(0x7f0000000000)=0x3f, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) eventfd2(0x0, 0x40001) (async) write$eventfd(r0, &(0x7f0000000000)=0x3f, 0x8) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) 00:59:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xf35c0000) 00:59:21 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:21 executing program 0: eventfd2(0x4, 0x0) syz_io_uring_complete(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xf000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xffffff7f) 00:59:21 executing program 2: r0 = eventfd2(0x0, 0x40001) write$eventfd(r0, &(0x7f0000000000)=0x3f, 0x8) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) (fail_nth: 1) 00:59:21 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0xfe}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xffffff9e) 00:59:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x5}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 2: r0 = eventfd2(0x0, 0x800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x3a640000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0xfeff}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x6}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 2: r0 = eventfd2(0x0, 0x800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) 00:59:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xffffffef) 00:59:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x60000000, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:21 executing program 2: r0 = eventfd2(0x0, 0x800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) [ 2535.402910][T30670] FAULT_INJECTION: forcing a failure. [ 2535.402910][T30670] name failslab, interval 1, probability 0, space 0, times 0 [ 2535.415536][T30670] CPU: 0 PID: 30670 Comm: syz-executor.0 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef-dirty #0 [ 2535.426747][T30670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2535.436829][T30670] Call Trace: [ 2535.440090][T30670] [ 2535.443004][T30670] dump_stack_lvl+0xd6/0x122 [ 2535.447631][T30670] dump_stack+0x11/0x1b [ 2535.451765][T30670] should_fail+0x23c/0x250 [ 2535.456223][T30670] ? taskstats_exit+0x10c/0x6b0 [ 2535.461114][T30670] __should_failslab+0x81/0x90 [ 2535.465860][T30670] should_failslab+0x5/0x20 [ 2535.470348][T30670] kmem_cache_alloc+0x4f/0x320 [ 2535.475105][T30670] ? __rcu_read_unlock+0x5c/0x290 [ 2535.480133][T30670] taskstats_exit+0x10c/0x6b0 [ 2535.484790][T30670] ? acct_collect+0x3a5/0x400 [ 2535.489457][T30670] do_exit+0x564/0x16a0 [ 2535.493621][T30670] ? __fput+0x47a/0x520 [ 2535.497757][T30670] do_group_exit+0xa5/0x160 [ 2535.502285][T30670] get_signal+0x8cf/0x15d0 [ 2535.506757][T30670] ? vfs_read+0x4e3/0x750 [ 2535.511086][T30670] arch_do_signal_or_restart+0x8c/0x2e0 [ 2535.516662][T30670] exit_to_user_mode_prepare+0x113/0x190 [ 2535.522277][T30670] syscall_exit_to_user_mode+0x20/0x40 [ 2535.527799][T30670] do_syscall_64+0x50/0xd0 [ 2535.532243][T30670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2535.538117][T30670] RIP: 0033:0x7f48a368c059 [ 2535.542508][T30670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2535.562110][T30670] RSP: 002b:00007f48a2802168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2535.570523][T30670] RAX: fffffffffffffe00 RBX: 00007f48a379ef60 RCX: 00007f48a368c059 [ 2535.578552][T30670] RDX: 00000000fffffe7a RSI: 0000000020000000 RDI: 0000000000000003 [ 2535.586568][T30670] RBP: 00007f48a28021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2535.594518][T30670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:59:22 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffe7a) 00:59:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x7}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:22 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0xfffe}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:22 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0xfffffff0) 00:59:22 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x9effffff, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:22 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=0x10000, 0x4) r2 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r2], 0x1}, 0x58) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x76, 0x3d, 0xf8, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x9}, 0x452e4, 0xd31f, 0xff, 0x9, 0x5, 0x8001, 0x6, 0x0, 0x80000001, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x8, 0x2, 0x1, 0x0, 0x9, 0x24000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080)}, 0x40c9, 0xfffffffffffffffd, 0xffffff00, 0x0, 0x5, 0x9, 0x80, 0x0, 0x3, 0x0, 0x4}, r2, 0xc, r3, 0x0) 00:59:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x8}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:22 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xefffffff, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:22 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0xca9a3b}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:22 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x3000000000000) [ 2535.602481][T30670] R13: 00007ffdc834474f R14: 00007f48a2802300 R15: 0000000000022000 [ 2535.610434][T30670] 00:59:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0x9}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:22 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x4000000}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:23 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x7ffff000) 00:59:23 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=0x10000, 0x4) r2 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r2], 0x1}, 0x58) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x76, 0x3d, 0xf8, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x9}, 0x452e4, 0xd31f, 0xff, 0x9, 0x5, 0x8001, 0x6, 0x0, 0x80000001, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x8, 0x2, 0x1, 0x0, 0x9, 0x24000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080)}, 0x40c9, 0xfffffffffffffffd, 0xffffff00, 0x0, 0x5, 0x9, 0x80, 0x0, 0x3, 0x0, 0x4}, r2, 0xc, r3, 0x0) eventfd2(0x0, 0x80800) (async) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=0x10000, 0x4) (async) gettid() (async) syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r2], 0x1}, 0x58) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x76, 0x3d, 0xf8, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x9}, 0x452e4, 0xd31f, 0xff, 0x9, 0x5, 0x8001, 0x6, 0x0, 0x80000001, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x8, 0x2, 0x1, 0x0, 0x9, 0x24000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080)}, 0x40c9, 0xfffffffffffffffd, 0xffffff00, 0x0, 0x5, 0x9, 0x80, 0x0, 0x3, 0x0, 0x4}, r2, 0xc, r3, 0x0) (async) 00:59:23 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x40030000000000) 00:59:23 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xf0ffffff, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0xa}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:23 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x8000000}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:23 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x100000000000000) 00:59:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{0xb}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:23 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0xffffff7f, {{0x1a}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 00:59:23 executing program 5: eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8, 0x0, 0x3b9aca00}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:59:23 executing program 2: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000040), 0xfffffd3b) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=0x10000, 0x4) (async) r2 = gettid() syz_clone3(&(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r2], 0x1}, 0x58) (async) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x76, 0x3d, 0xf8, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x9}, 0x452e4, 0xd31f, 0xff, 0x9, 0x5, 0x8001, 0x6, 0x0, 0x80000001, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x8, 0x2, 0x1, 0x0, 0x9, 0x24000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080)}, 0x40c9, 0xfffffffffffffffd, 0xffffff00, 0x0, 0x5, 0x9, 0x80, 0x0, 0x3, 0x0, 0x4}, r2, 0xc, r3, 0x0) 00:59:23 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x200000000000000)