st, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1942.268046][T30408] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:13:10 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:11 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1943.337427][T30409] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1945.493541][T30418] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1945.929966][T30423] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1945.956511][T30420] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:13:13 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:13 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x28c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x78, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x28c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1946.161487][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.248709][T30430] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:13:13 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:15 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x0, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1947.304783][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.487627][T30431] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:17 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:17 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1949.554308][T30437] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1949.557491][T26888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1949.572811][T26888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1949.583422][T30441] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:13:17 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x0, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1950.127179][T30438] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:13:18 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x0, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:18 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1950.502632][T30447] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1950.521468][T30452] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:18 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:18 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1952.636704][T30460] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1953.520568][T30463] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:13:21 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:21 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1953.725720][T30468] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1953.808672][T30476] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1954.736121][T30464] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:22 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x0, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:22 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:22 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1954.781098][T30477] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1954.811918][ T5542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.845936][ T5542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1956.796537][T30488] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:13:25 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:25 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x0, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1957.409919][T30494] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1957.432094][T30495] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:25 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:25 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x84, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1957.652910][T30503] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1958.653429][T30504] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1959.054814][T30513] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:13:27 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1959.646323][T30514] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:27 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:27 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:27 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x84, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1961.255486][T30525] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1962.000851][ T4795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.081604][T30524] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1962.090264][ T4795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1962.104639][T30531] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1962.140134][T30532] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:13:29 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1962.286752][T30534] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:30 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:30 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:30 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:30 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x84, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1962.849403][T30546] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1964.920404][T30552] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1964.946204][T30550] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:13:32 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xbd, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:33 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1965.368041][T30555] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1965.384929][T30554] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:13:33 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x84, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:33 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1966.385143][T30564] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1967.139216][T30568] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:13:34 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:34 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xbd, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:34 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1967.209818][ T4795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1967.217826][T30567] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1967.244432][ T4795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1969.176914][T30576] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:13:37 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1969.693556][T30582] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:37 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:37 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1969.751471][T30583] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:13:37 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xbd, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1970.209501][T30595] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1970.798557][T30596] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:13:38 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1972.552507][T30603] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:13:40 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1973.172590][T30605] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1973.184655][T20405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.205910][T20405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:13:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1973.332832][T30608] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1973.556791][T30614] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:13:41 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:41 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1975.993666][T30621] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1976.344843][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.351857][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 17:13:44 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:44 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1976.402766][T26888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.419767][T26888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.432933][T30620] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1976.510635][T30625] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:44 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:44 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1976.817138][T30633] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:13:45 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1977.913169][T30634] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1980.004996][T30648] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1980.013482][T30645] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1980.064798][T30647] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:47 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:47 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1980.191661][ T5148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.199501][ T5148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.206842][T29092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.220086][T29092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.305362][T30657] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:13:48 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1981.058224][T30661] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1981.125875][T30664] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:13:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x0, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1981.491394][T30668] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:49 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1981.636467][T26888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.652828][T26888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:13:49 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x80, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1981.756776][T30669] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1981.940472][T30675] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:13:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1982.970154][T30678] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:13:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x0, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1984.161137][T30684] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1984.180215][T29092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1984.188040][T29092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:13:51 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1984.204798][T30683] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:52 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1984.536658][T30691] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1984.560756][T30696] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:13:53 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x80, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1986.752218][T30703] validate_nla: 2 callbacks suppressed [ 1986.752232][T30703] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:54 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:54 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:54 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x0, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:54 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1988.703121][T30713] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:13:56 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x80, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1989.208286][T30719] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:13:56 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="000005"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:57 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x0, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1989.265253][T30720] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:13:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1989.607229][T30727] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:13:58 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x80, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1990.516334][ T5148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.527478][T30729] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:13:58 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1990.659077][ T5148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.962838][T30740] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1991.348051][ T4795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 17:13:59 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:13:59 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x84, 0x51, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1991.560333][T30731] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1991.585113][ T4795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:13:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x0, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1992.949686][T30749] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1993.033837][T30753] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1993.042324][T30742] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1993.414682][T30756] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:14:00 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="000005"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:01 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:01 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x0, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:01 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="000005"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1993.775085][T30766] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1995.404675][T30768] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1995.456261][T30772] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1995.473399][T30773] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:14:03 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:03 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:03 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:03 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x84, 0x51, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:03 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1997.423703][T30786] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:14:06 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1999.214786][T30791] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1999.230530][T20405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1999.239428][T20405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:14:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="000005"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1999.286297][T30789] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1999.305414][T20405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1999.323517][T20405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1999.336422][T30788] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:14:07 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:07 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1999.745014][T30800] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:14:07 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x84, 0x51, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x298}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 1999.800818][T28369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1999.838034][T28369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.804634][T30810] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:14:09 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000593"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2001.907126][T30817] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 2001.916936][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.952983][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:14:09 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:09 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2002.041695][T30807] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:14:09 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2002.210040][T30819] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 17:14:10 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2003.280639][T30832] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:14:11 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000593"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:11 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc2, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2003.344176][T30834] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:14:12 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2004.946195][T30842] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2004.964440][T30841] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:14:12 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000593"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2006.392121][T30848] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:14:14 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc2, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2006.625652][T30852] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:14:14 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:15 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:15 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="000005"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2007.706210][T30859] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 2007.727355][T30858] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2007.743703][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2007.779746][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:14:15 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:15 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2008.070230][T30870] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:14:16 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc2, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2009.401056][T30881] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:14:17 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2010.063443][T30872] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 2010.083131][T30885] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 2010.091781][T30886] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:14:17 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:17 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:17 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="000005"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2011.904222][T30891] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 2011.934718][T30893] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:14:20 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2013.035829][T30899] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:14:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1c, 0xf, &(0x7f0000000780)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, &(0x7f0000000300)='GPL\x00'}, 0x90) 17:14:20 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2013.097440][T30900] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 2013.108480][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.410308][T30910] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:14:20 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:21 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2014.256730][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.273926][T30911] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2014.691664][T30920] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:14:23 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="000005"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:23 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 17:14:23 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2015.319352][T20405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2015.372699][T20405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:14:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:23 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2017.325014][T30933] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:14:23 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001280)='ns/mnt\x00') [ 2018.328104][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2018.355266][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2018.920304][T30947] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:14:26 executing program 5: bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)) 17:14:26 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2019.130054][T30938] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:14:26 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:26 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2019.188769][T30937] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 2019.644734][T30965] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:14:27 executing program 5: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001e00)={'caif0\x00'}) 17:14:27 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000593"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:27 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2022.556598][T30966] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 2022.635620][T30974] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2022.650566][T30979] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:14:30 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:30 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:30 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(0x0, &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:30 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:30 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000593"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2024.652939][T30991] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2026.519789][T30995] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 17:14:34 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:34 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f00000001c0)=""/15, 0x26, 0xf, 0x1}, 0x20) [ 2026.598005][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2026.606773][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2026.657249][T30996] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 2026.741659][T30994] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:14:34 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(0x0, &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2027.071251][T31006] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:14:34 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:34 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000593"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:34 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xc}]}}, 0x0, 0x26}, 0x20) [ 2027.112784][T31004] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 2027.125486][T26888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2027.138636][T26888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:14:34 executing program 5: syz_clone(0x4482b400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2029.194307][T31022] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 17:14:37 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x25c, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0x82, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x25c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2029.672856][T31021] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 2029.731030][T31026] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:14:37 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:37 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(0x0, &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:37 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2029.897515][T31029] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2031.155448][T31039] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:14:38 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2031.217644][T31037] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 2032.300397][T31046] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 2032.312597][T31048] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:14:40 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:40 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x25c, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0x82, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x25c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:40 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:41 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2033.485048][T31054] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2033.511265][T31053] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:14:41 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x25c, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0x82, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x25c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:41 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2035.568943][T31065] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 2037.357398][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.367858][T31066] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 2037.376348][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 17:14:45 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:45 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2037.405988][ T5148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.426398][ T5148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.443728][T31067] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2037.477371][T31072] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:14:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:46 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2038.976367][T31081] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 2039.212001][T31079] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 2040.676935][T31088] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2041.151129][T31094] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 2041.160096][T31095] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 17:14:48 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:48 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:48 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2043.252147][T31106] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 2043.832455][T31114] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 2043.856964][T31115] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 2043.950272][T31116] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 17:14:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:51 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:51 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:52 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x29c}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2044.373650][T31119] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:14:52 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2044.981407][T31132] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 2046.568431][T31137] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 2046.581055][T31133] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 17:14:55 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) 17:14:55 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2048.064993][T27139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2048.072994][T27139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:14:55 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, &(0x7f0000000e40), 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x294, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x9, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x294}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2048.205523][T31141] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2048.215178][ T4795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2048.223813][ T4795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2048.236435][T31138] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 17:14:57 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r4, &(0x7f0000000240), &(0x7f0000000440)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffc0fe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f1d86fc02d2ea88d", "27a605b1448a937e9491625b5f6d2952", "eded3af2", "46609d5f85235740"}, 0x28) recvmmsg(r6, 0x0, 0x0, 0x2061, 0x0) shutdown(r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1, @ANYBLOB="0000059331"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x16}}}}, [@NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fcc44f3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38ab593f35"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9419b73d17b3e90e3a8e0179b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x0, 0x1ffd, 0x0, 0x3a6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_SSID={0x14, 0x34, @random="ffe0e04bd168ec7302c48bce002bd691"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xc5, 0x2a, [@supported_rates={0x1, 0x1, [{0x60}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x71, @device_b, 0x1ff, 0x704, 0x10000}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0xb8}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x0, 0x2, 0x0, @device_b, 0x51b6f628, @device_b, 0x7, 0xb75, 0x3, [{{0x1}, @device_a, 0x4}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x401}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7, 0x25, 0x3f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4b, 0x9, 0xd9f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2f, @broadcast, 0x3, "", 0xffffffe0, 0x785f, @broadcast, 0x20}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x1f, @broadcast, 0x3, 0x2, 0x883}}]}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "50cced8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "793ec78158305578c244b1d6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e077ac1b0e5e199e8e7c6e22f"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1af37732fcf6d59e00bb7ac89a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x683b4ffb7ae1ea7a}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2a0}}, 0x1000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001000000007b86f0198c722a1600", @ANYRES32=0x0, @ANYBLOB="000c0000000000000e00000008000d0000000000280008801c000a0000000000000000000000000000000000000000000200000008001b000000000018a56109299bbc0e07271bf36a7ae64ef2d45b889236938594b1b82dce08af11e36ea05e82a75c4120d78756fef4cae3edcaa036fed85ae1c5ba8d452f37524d426342e474d22e9cbdcd5062e96ed851a7e1e4519ab37406c8b4b8fad6c20d1c688ff6875b9091affc"], 0x54}}, 0x40) [ 2050.047215][T31149] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 2050.074795][T31148] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 2050.093978][T17339] ------------[ cut here ]------------ [ 2050.099493][T17339] WARNING: CPU: 0 PID: 17339 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x4b7/0x560 [ 2050.109791][T17339] Modules linked in: [ 2050.114093][T17339] CPU: 0 PID: 17339 Comm: kworker/u4:2 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 2050.124338][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2050.134958][T17339] Workqueue: cfg80211 cfg80211_event_work [ 2050.140987][T17339] RIP: 0010:__cfg80211_ibss_joined+0x4b7/0x560 [ 2050.147156][T17339] Code: ff ff e8 bc 4d 9d f7 90 0f 0b 90 e9 66 fe ff ff e8 4e c4 f4 f7 e9 41 fc ff ff e8 04 c4 f4 f7 e9 85 fc ff ff e8 9a 4d 9d f7 90 <0f> 0b 90 e9 8e fc ff ff e8 8c 4d 9d f7 90 0f 0b e8 44 c4 f4 f7 e9 [ 2050.167092][T17339] RSP: 0018:ffffc90015577b70 EFLAGS: 00010293 [ 2050.173405][T17339] RAX: 0000000000000000 RBX: ffff88807ccecc90 RCX: 1ffffffff1e758d3 [ 2050.181662][T17339] RDX: ffff888038dd1dc0 RSI: ffffffff89eac306 RDI: ffffffff814fe874 [ 2050.189638][T17339] RBP: ffffc90015577c20 R08: 0000000000000000 R09: 0000000000000000 [ 2050.198055][T17339] R10: ffffffff8f3a92d7 R11: ffffffff8acf1fa0 R12: ffff88807ccec000 [ 2050.206391][T17339] R13: 1ffff92002aaef72 R14: 0000000000000000 R15: ffffc90015577bb0 [ 2050.214396][T17339] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 2050.223351][T17339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2050.229939][T17339] CR2: 000000c00cfeb000 CR3: 000000000cf79000 CR4: 0000000000350ef0 [ 2050.237938][T17339] Call Trace: [ 2050.241239][T17339] [ 2050.244337][T17339] ? show_regs+0x8f/0xa0 [ 2050.248580][T17339] ? __warn+0xe6/0x390 [ 2050.252671][T17339] ? __cfg80211_ibss_joined+0x4b7/0x560 [ 2050.258264][T17339] ? report_bug+0x3bc/0x580 [ 2050.262843][T17339] ? handle_bug+0x3d/0x70 [ 2050.267172][T17339] ? exc_invalid_op+0x17/0x40 [ 2050.271879][T17339] ? asm_exc_invalid_op+0x1a/0x20 [ 2050.276917][T17339] ? __cfg80211_ibss_joined+0x4b6/0x560 [ 2050.282495][T17339] ? __local_bh_enable_ip+0xa4/0x120 [ 2050.289344][T17339] ? __cfg80211_ibss_joined+0x4b7/0x560 [ 2050.294948][T17339] ? cfg80211_ibss_joined+0x590/0x590 [ 2050.300474][T17339] ? do_raw_spin_unlock+0x173/0x230 [ 2050.305763][T17339] ? cfg80211_process_wdev_events+0x3e6/0x5d0 [ 2050.312205][T17339] cfg80211_process_wdev_events+0x3e6/0x5d0 [ 2050.318110][T17339] cfg80211_process_rdev_events+0x9f/0x130 [ 2050.323986][T17339] cfg80211_event_work+0x2b/0x40 [ 2050.328929][T17339] process_one_work+0x886/0x15d0 [ 2050.334016][T17339] ? wake_up_kfence_timer+0x30/0x30 [ 2050.339291][T17339] ? workqueue_congested+0x300/0x300 [ 2050.344742][T17339] ? assign_work+0x1a0/0x250 [ 2050.349414][T17339] worker_thread+0x8b9/0x1290 [ 2050.354255][T17339] ? __kthread_parkme+0x14b/0x220 [ 2050.359339][T17339] ? process_one_work+0x15d0/0x15d0 [ 2050.364650][T17339] kthread+0x2c6/0x3a0 [ 2050.368777][T17339] ? kthread_complete_and_exit+0x40/0x40 [ 2050.374529][T17339] ? kthread_complete_and_exit+0x40/0x40 [ 2050.380284][T17339] ret_from_fork+0x45/0x80 [ 2050.384759][T17339] ? kthread_complete_and_exit+0x40/0x40 [ 2050.390520][T17339] ret_from_fork_asm+0x11/0x20 [ 2050.395357][T17339] [ 2050.398434][T17339] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2050.405714][T17339] CPU: 0 PID: 17339 Comm: kworker/u4:2 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 2050.415601][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2050.425652][T17339] Workqueue: cfg80211 cfg80211_event_work [ 2050.431383][T17339] Call Trace: [ 2050.434661][T17339] [ 2050.437585][T17339] dump_stack_lvl+0xd9/0x1b0 [ 2050.442195][T17339] panic+0x6dc/0x790 [ 2050.446097][T17339] ? panic_smp_self_stop+0xa0/0xa0 [ 2050.451212][T17339] ? show_trace_log_lvl+0x363/0x4f0 [ 2050.456416][T17339] ? check_panic_on_warn+0x1f/0xb0 [ 2050.461538][T17339] ? __cfg80211_ibss_joined+0x4b7/0x560 [ 2050.467091][T17339] check_panic_on_warn+0xab/0xb0 [ 2050.472031][T17339] __warn+0xf2/0x390 [ 2050.475929][T17339] ? __cfg80211_ibss_joined+0x4b7/0x560 [ 2050.481493][T17339] report_bug+0x3bc/0x580 [ 2050.485830][T17339] handle_bug+0x3d/0x70 [ 2050.489995][T17339] exc_invalid_op+0x17/0x40 [ 2050.494503][T17339] asm_exc_invalid_op+0x1a/0x20 [ 2050.499357][T17339] RIP: 0010:__cfg80211_ibss_joined+0x4b7/0x560 [ 2050.505536][T17339] Code: ff ff e8 bc 4d 9d f7 90 0f 0b 90 e9 66 fe ff ff e8 4e c4 f4 f7 e9 41 fc ff ff e8 04 c4 f4 f7 e9 85 fc ff ff e8 9a 4d 9d f7 90 <0f> 0b 90 e9 8e fc ff ff e8 8c 4d 9d f7 90 0f 0b e8 44 c4 f4 f7 e9 [ 2050.525167][T17339] RSP: 0018:ffffc90015577b70 EFLAGS: 00010293 [ 2050.531242][T17339] RAX: 0000000000000000 RBX: ffff88807ccecc90 RCX: 1ffffffff1e758d3 [ 2050.539218][T17339] RDX: ffff888038dd1dc0 RSI: ffffffff89eac306 RDI: ffffffff814fe874 [ 2050.548408][T17339] RBP: ffffc90015577c20 R08: 0000000000000000 R09: 0000000000000000 [ 2050.556378][T17339] R10: ffffffff8f3a92d7 R11: ffffffff8acf1fa0 R12: ffff88807ccec000 [ 2050.564353][T17339] R13: 1ffff92002aaef72 R14: 0000000000000000 R15: ffffc90015577bb0 [ 2050.572340][T17339] ? __cfg80211_ibss_joined+0x4b6/0x560 [ 2050.577909][T17339] ? __local_bh_enable_ip+0xa4/0x120 [ 2050.583213][T17339] ? cfg80211_ibss_joined+0x590/0x590 [ 2050.588592][T17339] ? do_raw_spin_unlock+0x173/0x230 [ 2050.593797][T17339] ? cfg80211_process_wdev_events+0x3e6/0x5d0 [ 2050.599865][T17339] cfg80211_process_wdev_events+0x3e6/0x5d0 [ 2050.605768][T17339] cfg80211_process_rdev_events+0x9f/0x130 [ 2050.611579][T17339] cfg80211_event_work+0x2b/0x40 [ 2050.616524][T17339] process_one_work+0x886/0x15d0 [ 2050.621477][T17339] ? wake_up_kfence_timer+0x30/0x30 [ 2050.626762][T17339] ? workqueue_congested+0x300/0x300 [ 2050.632066][T17339] ? assign_work+0x1a0/0x250 [ 2050.636662][T17339] worker_thread+0x8b9/0x1290 [ 2050.641353][T17339] ? __kthread_parkme+0x14b/0x220 [ 2050.646400][T17339] ? process_one_work+0x15d0/0x15d0 [ 2050.651621][T17339] kthread+0x2c6/0x3a0 [ 2050.655696][T17339] ? kthread_complete_and_exit+0x40/0x40 [ 2050.661335][T17339] ? kthread_complete_and_exit+0x40/0x40 [ 2050.666973][T17339] ret_from_fork+0x45/0x80 [ 2050.671393][T17339] ? kthread_complete_and_exit+0x40/0x40 [ 2050.677037][T17339] ret_from_fork_asm+0x11/0x20 [ 2050.681816][T17339] [ 2050.685033][T17339] Kernel Offset: disabled [ 2050.689334][T17339] Rebooting in 86400 seconds..