ffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:27 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) mlockall(0x2) 12:56:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 12:56:27 executing program 4: r0 = socket(0x18, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) 12:56:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x0, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:27 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x184}}, 0x0) [ 531.485706][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.509897][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:56:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x7d, 0x0, &(0x7f0000000040)) 12:56:28 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f00000062c0)={0x14, r0, 0x401}, 0x14}}, 0x0) 12:56:28 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$inet6(0xa, 0x3, 0x6) sendmmsg(r1, &(0x7f00000030c0)=[{{&(0x7f0000000000)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x1, 0x2}], 0x10}}], 0x1, 0x0) 12:56:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004c40)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000005500)={0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000005580)="0f", 0x1}], 0x1}, 0x0) 12:56:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x0, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0xfffffffe, 0x4) 12:56:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x40086602, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 12:56:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x184}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000900), 0xffffffffffffffff) 12:56:29 executing program 2: r0 = socket(0x11, 0x2, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 12:56:29 executing program 5: clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1}, 0x58) openat$autofs(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:56:29 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f00000062c0)={0x2c, r0, 0x401, 0x0, 0x0, {0xa}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 12:56:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0xa, 0x40, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000290000003700000000000000000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32, @ANYBLOB="0000000018000000000000002900000004000000ecffffffffffffff28"], 0x80}}], 0x1, 0x0) 12:56:29 executing program 3: clone3(&(0x7f0000000000)={0xc141900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:56:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 12:56:29 executing program 3: socketpair(0x29, 0x2, 0x0, &(0x7f0000000700)) 12:56:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x0, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0xa, 0x2, 0x0, @remote}, 0x2000005c, 0x0, 0x0, &(0x7f0000000140)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) 12:56:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000780)={0xa, 0x4e22, 0x0, @private0, 0x1f}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffff001}}], 0x18}}], 0x2, 0x0) 12:56:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x74, 0x0, &(0x7f0000000040)) 12:56:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @mcast1}}) 12:56:30 executing program 5: fsopen(&(0x7f0000000000)='jffs2\x00', 0x0) 12:56:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@txtime={{0x18}}], 0x18}, 0x0) 12:56:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8932, &(0x7f00000002c0)={'veth0_to_bond\x00', @ifru_flags}) 12:56:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 12:56:31 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 12:56:31 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x0, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:31 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001640)={&(0x7f0000000140)=@name, 0x10, 0x0}, 0x0) 12:56:31 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast2, @remote, @empty}) 12:56:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@loopback, @remote}, 0x8) 12:56:31 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x0) 12:56:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0xfff, 0xd7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0xca9, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 12:56:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) 12:56:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004c40)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000005500)={&(0x7f0000004c80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) 12:56:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:56:31 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 12:56:31 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f0000000180)=""/151, 0x97) 12:56:31 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x0, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:32 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) 12:56:32 executing program 5: clone3(&(0x7f0000002380)={0x25840100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000002280)={0x0, 0x0, &(0x7f0000001140), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002240)=[0x0], 0x1}, 0x58) clone3(&(0x7f0000002400)={0x4800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:56:32 executing program 2: r0 = clone3(&(0x7f0000002380)={0x25840100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = clone3(&(0x7f0000002280)={0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), {0x1e}, &(0x7f00000011c0)=""/4096, 0x1000, 0x0, &(0x7f0000002240)=[0x0, r0, 0x0, r0, r0, r0], 0x6}, 0x58) clone3(&(0x7f0000002400)={0x4800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xb}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/30, &(0x7f0000002300)=[0x0, r1, r0, r0], 0x4}, 0x58) 12:56:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0xa, 0x2, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdrdstopts={{0x18, 0x29, 0x43}}], 0x18}}], 0x1, 0x0) 12:56:32 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) 12:56:32 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:32 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'sit0\x00', 0x0}) 12:56:33 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f00000062c0)={0x14, r0, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 12:56:33 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x4, 0x0, &(0x7f0000000040)) 12:56:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000008980)=[{{&(0x7f00000024c0)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000002800)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}], 0x28}}], 0x1, 0x0) 12:56:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x891d, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 12:56:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x4, 0x0, 0x4000000) 12:56:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 12:56:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 12:56:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40002040) 12:56:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 12:56:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0xa, 0x2, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr={{0x18, 0x11}}], 0x18}}], 0x1, 0x0) 12:56:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000040)=0xfe9f) 12:56:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="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", 0x2000, 0x0) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}}, 0x50) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) 12:56:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@local, @rand_addr=' \x01\x00', @empty, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1400000}) 12:56:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, 0x0, &(0x7f0000000040)) 12:56:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={0x0}, 0x1, 0x0, 0x2}, 0x0) 12:56:35 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aa337a26"}, 0x0, 0x0, @planes=0x0}) 12:56:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@rights={{0x10}}], 0x10}, 0x0) 12:56:35 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x3, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12:56:35 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}}, 0x24}}, 0x0) 12:56:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x1c, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12:56:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x11, 0x0, &(0x7f0000000040)) 12:56:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000005c0)={{0x1}}) 12:56:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x24, 0x0, &(0x7f0000000040)) 12:56:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000680), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0}) 12:56:36 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:36 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/140, 0x8c}], 0x1, &(0x7f0000001500)=[{&(0x7f0000001480)=""/70, 0x46}], 0x1, 0x0) 12:56:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/126}, {&(0x7f0000000080)=""/238}, {&(0x7f0000000180)=""/176}, {&(0x7f0000000240)=""/37}, {&(0x7f0000000280)=""/167}, {&(0x7f00000004c0)=""/53, 0xfffffffffffffda8}, {0xffffffffffffffff}], 0x1000000000000251, &(0x7f0000000340)=""/73, 0x49}, 0x0) 12:56:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x11, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12:56:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:36 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e5ef0faafb8164, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 12:56:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0x2, 0x2, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0xbb8) 12:56:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0xa, 0x2, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdrdstopts={{0x28, 0x29, 0x32, {0x0, 0x1, '\x00', [@enc_lim, @pad1, @generic={0x0, 0x1, 'w'}]}}}], 0x28}}], 0x1, 0x0) 12:56:36 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 12:56:36 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 12:56:36 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) 12:56:36 executing program 3: r0 = clone3(&(0x7f0000002380)={0x25840100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = clone3(&(0x7f0000002280)={0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), {0x1e}, &(0x7f00000011c0)=""/4096, 0x1000, &(0x7f00000021c0)=""/96, &(0x7f0000002240)=[r0, r0, r0, r0, r0, r0], 0x6}, 0x58) clone3(&(0x7f0000002400)={0x4800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xb}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/30, &(0x7f0000002300)=[r0, r1, r0, r0], 0x4}, 0x58) 12:56:37 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'sit0\x00', 0x0}) 12:56:37 executing program 5: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x84001, 0x0) 12:56:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000006000500210000000b000100636c73616374"], 0x38}}, 0x0) 12:56:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x3, &(0x7f0000000300), 0x20000308) 12:56:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000680), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}) 12:56:37 executing program 4: clone3(&(0x7f0000000200)={0x101000, 0x0, 0x0, &(0x7f0000000080), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:56:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) 12:56:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000680), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[{}], 0x8, 0x0, '\x00', 0x0, 0x1}) 12:56:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 12:56:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000080)) 12:56:38 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12:56:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f00000062c0)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xfffffdef}}, 0x0) 12:56:38 executing program 2: socketpair(0x2, 0xa, 0xa4, &(0x7f00000009c0)) 12:56:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000680), 0x1f, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000000)) 12:56:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev}}}) 12:56:39 executing program 4: process_vm_writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)=""/204, 0xcc}], 0x1, &(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 12:56:39 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000000000)={0x34, r0, 0x401, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) 12:56:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 12:56:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 12:56:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10060) 12:56:39 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000080)) 12:56:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0x2, 0x2, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdrdstopts={{0x18}}, @dstopts_2292={{0x18}}], 0xf}}], 0x1, 0x0) 12:56:39 executing program 4: sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x6e, 0x0, 0x0}, 0xb1) 12:56:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0xfffffffffffffffc}}, 0x0) 12:56:40 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) 12:56:40 executing program 3: syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr=0x64010102}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "e44de253d446bc9d5220fbefa8280d2feef128229139cb969ca21d8bd2d60566", "2f27cca7d09359c25d35b0bff908761b2bdf2bd8704b778abccef80d5e0e2eb0cbdf5cc25418dc1213b35dd49cb56fe3", "820d7c643c5bfd2f9df32d9d26d9f9a9fb60c9ff06b8e54f1d438100", {"6f0e42eff3c51c477a585409d12c098e", "4df1cadfd274e971558b69d48b1bf48b"}}}}}}}, 0x0) 12:56:40 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000001680), &(0x7f00000016c0)=0x4) 12:56:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:40 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 12:56:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000280)={'bridge0\x00', @ifru_ivalue}) 12:56:40 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 543.876894][T17040] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.884371][T17040] bridge0: port 1(bridge_slave_0) entered disabled state 12:56:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, 0xffffffffffffffff]}}], 0x20}, 0x0) 12:56:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0xa, 0x2, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @broadcast}}}}], 0x28}}], 0x1, 0x0) 12:56:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0xb, &(0x7f0000000300), 0x20000308) 12:56:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:42 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x0) 12:56:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x82, 0x0, &(0x7f0000000040)) 12:56:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000006580)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 12:56:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup/syz0\x00', 0x200002, 0x0) 12:56:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 12:56:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 12:56:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000021c0)={0x0, 0x0}) 12:56:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect(0xffffffffffffffff, &(0x7f0000000700)=@pppoe={0x18, 0x0, {0x0, @link_local, 'veth1_vlan\x00'}}, 0x80) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) close(r0) 12:56:42 executing program 5: r0 = socket(0x18, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 12:56:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f00000062c0)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x200062f4}}, 0x0) [ 545.758551][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.767059][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:56:43 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:43 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x40080c1) 12:56:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12:56:43 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x6d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12:56:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) [ 546.835976][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.858334][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:56:44 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0xa, 0x2, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdrdstopts={{0x18}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x18}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@dev]}}}], 0xf}}], 0x1, 0x0) 12:56:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x300}, 0x0) 12:56:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1}, 0x0) 12:56:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x7, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12:56:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:44 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f00000062c0)={0x34, r0, 0x401, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}}, 0x0) 12:56:44 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f00000062c0)={0x2c, r0, 0x401, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) clock_gettime(0x0, &(0x7f00000039c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003840)=[{{&(0x7f0000001480)=@xdp, 0x80, &(0x7f0000001780)=[{&(0x7f0000001500)=""/207, 0xcf}, {&(0x7f0000001600)=""/95, 0x5f}], 0x2, &(0x7f00000017c0)=""/174, 0xae}}, {{0x0, 0x0, 0x0}}], 0x2, 0x122, &(0x7f0000003a00)={0x0, r2+10000000}) 12:56:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x9}, 0xc) 12:56:44 executing program 5: mq_open(&(0x7f0000000100)='*@&{-^]\x00', 0x40, 0x0, &(0x7f00000001c0)={0x81, 0x8, 0x0, 0x1}) 12:56:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894a, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 12:56:45 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ppoll(&(0x7f0000000280)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) 12:56:45 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:45 executing program 5: mq_open(&(0x7f0000000040)='{\\[\x00', 0x0, 0x0, 0x0) 12:56:45 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) clone3(&(0x7f0000002380)={0xc040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:56:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x21, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12:56:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000040)={'veth1\x00', @ifru_ivalue}) 12:56:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12:56:45 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffc, 0x4) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 12:56:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000008c40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 12:56:46 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0/bus\x00', 0x84000804) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(r1, 0x0, 0x61) 12:56:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002dc0)={&(0x7f0000001800)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001940)="72f17b851255f6c03c9029755fb97eb4f4c644149322dc9b0828d2304ec28387f793df397c06507d418ca0ba", 0x2c}], 0x1}, 0x0) [ 549.193745][ T26] audit: type=1804 audit(1628081806.366:88): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir753547431/syzkaller.yFGDbW/259/bus" dev="sda1" ino=14966 res=1 errno=0 [ 549.266259][ T26] audit: type=1804 audit(1628081806.416:89): pid=17176 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir753547431/syzkaller.yFGDbW/259/bus" dev="sda1" ino=14966 res=1 errno=0 12:56:47 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xa, 0x0, &(0x7f0000000040)) 12:56:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f00000010c0)={&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x10}, 0x0) [ 550.401807][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.461522][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:56:48 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 12:56:48 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, 0x0) 12:56:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) [ 551.908242][T12647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.943095][T12651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.951196][T12647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.981488][T12651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:56:49 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:49 executing program 2: r0 = socket$inet(0x2, 0x3, 0x81) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001200)={&(0x7f0000000e40), 0xc, &(0x7f00000011c0)={0x0}}, 0x0) [ 553.034471][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.057615][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:56:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f00000062c0)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x33fe0}}, 0x0) 12:56:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d40)='pagemap\x00') read$eventfd(r0, 0x0, 0x0) 12:56:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:50 executing program 3: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) 12:56:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x8000}}], 0x18}}], 0x2, 0x0) 12:56:50 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x16}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @empty}}}]}]}, 0x50}}, 0x0) [ 553.646300][T17267] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 12:56:50 executing program 2: r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r0) [ 553.723499][T17267] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 12:56:50 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x12800, 0x0) 12:56:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') 12:56:51 executing program 3: process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 12:56:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_MASK={0x8}]}, 0x38}}, 0x0) 12:56:51 executing program 3: r0 = socket(0x2, 0x3, 0x4) sendmmsg$unix(r0, &(0x7f00000139c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001340)=[{0x0}, {&(0x7f00000012c0)="ae", 0x1}, {&(0x7f0000001300)='\n', 0x1}], 0x3}}], 0x1, 0x0) 12:56:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8}]}, 0x38}}, 0x0) [ 554.285121][T17283] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 12:56:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:51 executing program 3: r0 = fork() process_vm_writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f00000018c0)=[{&(0x7f0000001440)=""/79, 0x4f}], 0x1, 0x0) r1 = fork() process_vm_writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/166, 0xa6}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)=""/14, 0xe}], 0x1, 0x0) 12:56:51 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80012001, 0x0) 12:56:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0xe36}]}) 12:56:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 12:56:51 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:51 executing program 3: socket$inet6(0xa, 0x2, 0x7) 12:56:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x401}, 0x14}}, 0x0) 12:56:52 executing program 5: r0 = eventfd(0x8ed2) read$eventfd(r0, &(0x7f0000000000), 0x8) 12:56:52 executing program 4: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 12:56:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x18, 0x1, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_EXP={0x4}]}, 0x18}}, 0x0) 12:56:52 executing program 3: syz_open_procfs(0x0, &(0x7f0000000200)='net/rt6_stats\x00') 12:56:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:52 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000300)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$unlink(0x9, 0x0, 0x0) 12:56:52 executing program 4: recvfrom$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) 12:56:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x0, @broadcast, 0x0, 0x0, 'wrr\x00'}, 0x2c) 12:56:52 executing program 5: add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 12:56:52 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:52 executing program 3: syz_emit_ethernet(0x19, &(0x7f0000000080)={@link_local, @random="467f0c2325b3", @val, {@x25}}, 0x0) [ 555.666963][T17334] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0 12:56:53 executing program 4: unshare(0x20020400) unshare(0x2020000) 12:56:53 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2801c2, 0x0) 12:56:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 12:56:53 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup.net/syz0\x00', 0x200002, 0x0) 12:56:53 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) [ 556.315945][T10322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.350967][T10322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:56:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:53 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f00000010c0)={&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @private1, 0x8}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)="28d6", 0x2}], 0x1, &(0x7f0000002440)=[{0x10}], 0x10}, 0x0) 12:56:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 12:56:53 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 12:56:53 executing program 4: msgsnd(0x0, &(0x7f00000000c0)={0x2}, 0x8, 0x0) 12:56:54 executing program 3: r0 = socket(0x2, 0x3, 0x8) connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e) 12:56:54 executing program 5: socket$inet(0x2, 0xa, 0x715) 12:56:54 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0xee00, 0xee01, 0xee01}}) 12:56:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents(r0, &(0x7f0000000440)=""/4096, 0x1000) 12:56:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x3f8, 0x1a8, 0xb8, 0xffffffff, 0xb8, 0x1a8, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'bond_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv4=@loopback, @gre_key}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a4b2"}}, @common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @dev, @broadcast}}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'bridge0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@mac={{0x30}}, @common=@icmp={{0x28}, {0x0, '-\\'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@remote, @port, @gre_key}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'macvtap0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @gre_key, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) [ 557.330424][T17386] x_tables: duplicate underflow at hook 1 12:56:54 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 12:56:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:54 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) timerfd_gettime(r0, 0x0) 12:56:54 executing program 2: r0 = socket(0x2, 0x3, 0x4) recvmmsg$unix(r0, &(0x7f0000016680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000139c0)=[{{&(0x7f0000000000)=@abs, 0x6e, 0x0}}], 0x1, 0x0) 12:56:54 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 12:56:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in, @ethernet={0x0, @remote}, @generic={0x0, "4f66179d304d883dd018c120997f"}}) 12:56:54 executing program 3: r0 = socket(0x2, 0x3, 0x4) sendmmsg$unix(r0, &(0x7f00000076c0)=[{{&(0x7f0000000000)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}}], 0x2, 0x0) 12:56:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x101}, 0x14}}, 0x0) 12:56:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @remote}, 0x80, &(0x7f0000001440)=[{&(0x7f00000000c0)="077b37402734312e60da3695fcbf98290be7c9faa8d6370798bb668315b5f853fead73d95f408ab89025e95767f80eee493be1831b80ed1ee1083b1b418b313d7e95ab539b2ce2ecc90846860efcbd1026a153963723a18d7b95e3202a8b361dca77e9a15af990fdf31ffed471", 0x6d}, {&(0x7f0000000140)="0b96ba2420b1ca7024d988f9000ac4a670e138c75c7c89db1b378cccfccf88d97c30da77ebd0040a900653b5c7f27f6d31824bd73fc3d089a6ea47edbfa4e0a4467c416cbbdf2116705a8561159a726a", 0x50}, {&(0x7f00000001c0)="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", 0xa8a}, {&(0x7f00000012c0)='N', 0x1}, {&(0x7f0000001400)=')', 0x1}], 0x5, &(0x7f0000001500)=[{0x10}, {0x10}], 0x20}, 0x0) 12:56:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x40) 12:56:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002280)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)=[@rights={{0x10}}], 0x10}, 0x0) 12:56:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, 0x0, 0x3, 0x201, 0x0, 0x0, {}, [@generic="0a00258f8c6f2b74026a1ba5a3"]}, 0x24}}, 0x0) 12:56:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x38}}, 0x0) [ 558.718459][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:56:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x36, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x40}}, 0x0) 12:56:56 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:56 executing program 4: select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x2}, &(0x7f0000000140)={0x0, 0xea60}) 12:56:56 executing program 3: mq_open(&(0x7f0000000000)='^]{}[\x00', 0x40, 0x0, 0x0) 12:56:56 executing program 3: select(0x40, &(0x7f0000000040)={0x3}, 0x0, 0x0, 0x0) 12:56:56 executing program 3: pipe(&(0x7f00000063c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000004080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xffffff09) write$nbd(r1, &(0x7f0000000080)=ANY=[], 0xfffffe15) 12:56:56 executing program 5: r0 = socket$inet(0x2, 0x3, 0x81) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12100, 0x0) 12:56:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f00000010c0)={&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0x0) 12:56:56 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/uts\x00') 12:56:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) 12:56:56 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) 12:56:57 executing program 2: mq_open(&(0x7f0000000040)='.\x13\x00', 0x0, 0x0, 0x0) 12:56:57 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000d00)=@abs, 0x6e) [ 560.200740][T17472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 560.301753][T17472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:56:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 560.383393][T17472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 12:56:57 executing program 3: r0 = socket(0x2, 0x3, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 12:56:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$P9_RREADLINK(r0, 0x0, 0x0) 12:56:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 12:56:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 12:56:57 executing program 5: syz_emit_ethernet(0x16, &(0x7f0000000000)={@local, @local, @void, {@llc={0x4, {@snap={0x0, 0x0, "dc", "a73c5a"}}}}}, 0x0) 12:56:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:57 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000240)) 12:56:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, 0x0) 12:56:58 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') 12:56:58 executing program 2: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000), 0xfffffffffffffee4) 12:56:58 executing program 3: r0 = socket(0x2, 0x3, 0x4) recvmmsg$unix(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002001, 0x0) 12:56:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') write$P9_RREADLINK(r0, 0x0, 0x0) 12:56:58 executing program 2: syz_open_procfs(0x0, &(0x7f00000019c0)='net/rt_cache\x00') 12:56:58 executing program 3: r0 = socket(0x2, 0x3, 0x4) sendmmsg$unix(r0, &(0x7f00000076c0)=[{{&(0x7f0000000000)=@abs, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000025c0)) 12:56:58 executing program 4: r0 = socket(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 12:56:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r5, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:58 executing program 3: unshare(0x2020000) unshare(0x2000000) 12:56:59 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:56:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x40}}, 0x0) 12:56:59 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000300)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffa) 12:56:59 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x533e02, 0x0) 12:56:59 executing program 4: syz_open_procfs(0x0, &(0x7f00000003c0)='auxv\x00') 12:56:59 executing program 3: unshare(0x20020400) r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000100)) 12:56:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r5, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:56:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0xa, 0x6, 0x301}, 0x14}}, 0x0) 12:56:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x87}, {0x6}]}) [ 562.488173][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.494546][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 12:56:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x801}, 0x14}}, 0x0) 12:56:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"3de1344427ad103aa3fea58daba20d0d"}) 12:57:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002240)={&(0x7f00000021c0), 0xc, &(0x7f0000002200)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x1}, 0x24}}, 0x0) [ 563.109899][ T26] audit: type=1326 audit(1628081820.287:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17551 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 12:57:00 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:00 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400476c, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 12:57:00 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0), 0x0) 12:57:00 executing program 5: add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="e8", 0x1, 0xfffffffffffffffe) 12:57:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @remote}, 0x80, &(0x7f0000001440)=[{&(0x7f00000000c0)="077b37402734312e60da3695fcbf98290be7c9faa8d6370798bb668315b5f853fead73d95f408ab89025e95767f80eee493be1831b80ed1ee1083b1b418b313d7e95ab539b2ce2ecc90846860efcbd1026a153963723a18d7b95e3202a8b361dca77e9a15af990fdf31ffed471", 0x6d}, {&(0x7f0000000140)="0b96ba2420b1ca7024d988f9000ac4a670e138c75c7c89db1b378cccfccf88d97c30da77ebd0040a900653b5c7f27f6d31824bd73fc3d089a6ea47edbfa4e0a4467c416cbbdf2116705a8561159a726a", 0x50}, {&(0x7f00000001c0)="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", 0xffe}, {&(0x7f00000011c0)="be4727068f3e6097448e4f47b0e2dbd2b5eb97e51349bdeedc0a7de484a9ca7ad5a41496dd4121eecc973cb70e28d88a2645f600718fe4fa81b6ae4a3571c42087a9e80f191121c1550c80e9ab6b9f58b253a808547539ad93ab4072e1385aa68b26be5a68a4fe562c2e7a3c9b5b6a984faa11d5", 0x74}, {&(0x7f00000012c0)='N', 0x1}, {&(0x7f0000001400)=')', 0x1}], 0x6}, 0x0) 12:57:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r5, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 12:57:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x81) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000006ec00)={0x393a, [], 0x0, "db1b724db7c80f"}) 12:57:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) 12:57:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12:57:01 executing program 2: open(&(0x7f0000000540)='./file0/file0\x00', 0x0, 0x0) 12:57:01 executing program 3: creat(&(0x7f00000034c0)='./file0\x00', 0x0) creat(&(0x7f00000047c0)='./file0/file0\x00', 0x0) 12:57:01 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:01 executing program 4: perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 12:57:01 executing program 3: perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 12:57:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 12:57:01 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x18, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x6}]}}}}}}}}, 0x0) 12:57:02 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x21, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts]}}}}}, 0x0) 12:57:02 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x2f, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts={0x30}]}}}}}, 0x0) 12:57:02 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 12:57:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(0x0, 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000000), 0x4, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x34}}, 0x0) 12:57:02 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x11, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts]}}}}}, 0x0) 12:57:02 executing program 3: syz_emit_ethernet(0x92, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x4, 0x2f, 0x0, @dev, @local, {[@hopopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}, 0x0) 12:57:02 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:02 executing program 2: accept(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000001bc0)) 12:57:02 executing program 5: pipe(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, 0x0, 0x0) 12:57:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 12:57:02 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "40a61b", 0x44, 0x2f, 0x0, @private1, @private0, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}, 0x0) 12:57:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x123001, 0x0) write$tun(r0, 0x0, 0x0) 12:57:03 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000180)=ANY=[], 0xfa) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:57:03 executing program 3: syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x18, 0x0, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@pad1]}, @srh={0x62}]}}}}}, 0x0) 12:57:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(0x0, 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:03 executing program 5: syz_emit_ethernet(0x56, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x20, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "8da72763584c40"}]}}}}}}}}, 0x0) 12:57:03 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x18, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x4, 0x4}]}}}}}}}}, 0x0) 12:57:03 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts]}}}}}, 0x0) 12:57:03 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:03 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x0, 0x0, @dev, @private2, {[@routing]}}}}}, 0x0) 12:57:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) 12:57:03 executing program 4: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 12:57:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x44001) 12:57:03 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 12:57:03 executing program 3: syz_emit_ethernet(0xb6, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "0019e0", 0x80, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2, {[@hopopts={0x0, 0xa, '\x00', [@enc_lim, @generic={0x0, 0x50, "d4840934347876dacae1ee3be26595fdddc643c7e49ed975ee6a53e10976695a26cbc495ec9140eb2184f2bd2991a236358bee20f0b9ff6e150538bf5376b3cb80bcf23ccc5d60dcc64873e538b69041"}]}], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) 12:57:04 executing program 3: syz_emit_ethernet(0x92, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x4, 0x2b, 0x0, @dev, @local, {[@hopopts={0x2c, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}, 0x0) 12:57:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(0x0, 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:04 executing program 3: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts]}}}}}, 0x0) 12:57:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff000100000b00010074617072696f0000740002"], 0xa4}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 12:57:04 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:04 executing program 5: r0 = socket(0x29, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 12:57:04 executing program 2: socket$caif_seqpacket(0x25, 0x5, 0x1) 12:57:04 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x3a, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts]}}}}}, 0x0) 12:57:04 executing program 2: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x24, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x10, 0x9, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x2, 0xb, "8da72763584c405c24"}]}}}}}}}}, 0x0) 12:57:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000d80)) [ 567.635868][ T26] audit: type=1804 audit(1628081824.818:91): pid=17707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir886267189/syzkaller.gu77Za/289/cgroup.controllers" dev="sda1" ino=15105 res=1 errno=0 12:57:04 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x0, 0x3a, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) 12:57:05 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x18, 0x0, 0x0, @dev, @private2, {[@routing={0x0, 0x2, 0x1, 0x0, 0x0, [@dev]}]}}}}}, 0x0) 12:57:05 executing program 4: syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, 0x0) 12:57:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x0, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) 12:57:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x101}, 0x14}}, 0x0) 12:57:05 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x14, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 12:57:05 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:05 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000040)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x0, 0x0, 0x0, @dev, @local}}}}, 0x0) 12:57:05 executing program 4: pipe(&(0x7f0000001bc0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) 12:57:05 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$llc(r0, 0x0, 0x0) 12:57:05 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) 12:57:05 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00 ', 0x14, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 569.465249][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.487183][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:57:07 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 12:57:07 executing program 4: syz_open_procfs(0x0, &(0x7f00000019c0)='gid_map\x00') 12:57:07 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) 12:57:07 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x0, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:08 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "abe3b8", 0x28, 0x6, 0x0, @local, @loopback, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0) 12:57:08 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x0, 0x0, 0x0, @dev, @mcast1}}}}, 0x0) 12:57:08 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, 0x0, 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x0, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:08 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x0, 0x3c, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) 12:57:08 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x20, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x2, 0xa, "8da72763584c405c"}]}}}}}}}}, 0x0) 12:57:08 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts={0x2c}]}}}}}, 0x0) 12:57:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) 12:57:08 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x44, 0x3a, 0x0, @dev, @local}}}}, 0x0) 12:57:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x3}}, {0x8}, {0xc}, {0xc}}]}, 0x50}}, 0x0) 12:57:08 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000100)={@link_local, @broadcast, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @link_local}}}}, 0x0) 12:57:09 executing program 2: pipe(0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), 0xffffffffffffffff) 12:57:09 executing program 4: syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x18, 0x0, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@pad1]}, @routing={0x89}]}}}}}, 0x0) 12:57:09 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x18, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x9, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x2, 0x2}]}}}}}}}}, 0x0) [ 572.155224][T17800] smc: net device wg0 applied user defined pnetid SYZ0 12:57:09 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, 0x0, 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:09 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0xc00e}}, 0x0) 12:57:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan3\x00'}) 12:57:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) 12:57:09 executing program 4: syz_emit_ethernet(0x30, &(0x7f0000000200)={@local, @dev, @void, {@generic={0x88f7, "13685bdd7f819db413b392f8e47d9a9115d184ae99f0fb65191efed7fc008f223aa2"}}}, 0x0) 12:57:09 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12:57:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x2304}, 0x0) 12:57:10 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x58, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x0, 0xa, 0x4, 0x5, 0x0, 0x0, 0x0, [@private1, @mcast1, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}]}}}}}, 0x0) 12:57:10 executing program 3: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) 12:57:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x10e, 0x4, 0x0, 0x2e) 12:57:10 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x2f, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts]}}}}}, 0x0) 12:57:10 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, 0x0, 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:10 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 12:57:10 executing program 5: syz_emit_ethernet(0x88, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88ca"], 0x0) 12:57:10 executing program 2: socket(0x1d, 0x0, 0xfffffe01) 12:57:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="8c012d"], 0x34}}, 0x0) 12:57:10 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x1}}}}}}}, 0x0) 12:57:11 executing program 5: syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x4c, 0x2f, 0x0, @dev, @local, {[@hopopts]}}}}}, 0x0) 12:57:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x101, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) 12:57:11 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x0, 0x0, @dev, @local, {[@hopopts={0x29}]}}}}}, 0x0) 12:57:11 executing program 3: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x10, 0x0, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh]}}}}}, 0x0) 12:57:11 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @private}}}}}, 0x0) 12:57:11 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:11 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000d00)={@random="4dcf5a661bb7", @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2}}}}}, 0x0) 12:57:11 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), 0xffffffffffffffff) 12:57:11 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x18, 0x2c, 0x0, @dev, @private1, {[@routing={0x2f, 0x2, 0x0, 0x0, 0x0, [@mcast1]}]}}}}}, 0x0) 12:57:11 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000700)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "eaf39a", 0x10, 0x3a, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x41}, {[], @ni}}}}}, 0x0) 12:57:12 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x18, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x4, 0x2}]}}}}}}}}, 0x0) 12:57:12 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts]}}}}}, 0x0) 12:57:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x6f}}]}, 0x28}}, 0x0) 12:57:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 12:57:12 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @dev, @remote, @multicast, @remote}}}}, 0x0) 12:57:12 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:12 executing program 2: syz_emit_ethernet(0x92, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6009f84f005c2f00fe800000000000000000000000000200000000000000000000000000000000aa"], 0x0) 12:57:13 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601074c400003a00fe8000000000000000000000004a07e39d"], 0x0) 12:57:13 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 12:57:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x10e, 0x5, 0x0, 0x0) 12:57:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r5, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={0x0}}, 0x0) 12:57:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x101, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5}]}, 0x2c}}, 0x0) 12:57:13 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000080), 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 12:57:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "c6f04c02c64569c960ff154ede073f66398620d6491b6ab8560211e97ef7343f"}]}, 0x44}}, 0x0) 12:57:13 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x2, 0x2c, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts]}}}}}, 0x0) [ 576.423121][ T26] audit: type=1804 audit(1628081833.608:92): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir121964345/syzkaller.1gIRvl/184/memory.events" dev="sda1" ino=15135 res=1 errno=0 12:57:13 executing program 2: pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$llc(r0, &(0x7f0000000f00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) [ 576.658130][ T26] audit: type=1800 audit(1628081833.648:93): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15135 res=0 errno=0 12:57:14 executing program 4: syz_emit_ethernet(0x92, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x4, 0x11, 0x0, @dev, @local, {[@hopopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}, 0x0) [ 576.792647][ T26] audit: type=1804 audit(1628081833.648:94): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir121964345/syzkaller.1gIRvl/184/memory.events" dev="sda1" ino=15135 res=1 errno=0 12:57:14 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0xfa) [ 576.823159][ T26] audit: type=1804 audit(1628081833.808:95): pid=17957 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir121964345/syzkaller.1gIRvl/184/memory.events" dev="sda1" ino=15135 res=1 errno=0 [ 576.873008][ T26] audit: type=1804 audit(1628081834.048:96): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir121964345/syzkaller.1gIRvl/184/memory.events" dev="sda1" ino=15135 res=1 errno=0 [ 576.932429][ T26] audit: type=1800 audit(1628081834.048:97): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15135 res=0 errno=0 [ 576.961460][ T26] audit: type=1804 audit(1628081834.048:98): pid=17959 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir121964345/syzkaller.1gIRvl/184/memory.events" dev="sda1" ino=15135 res=1 errno=0 12:57:14 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:14 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x0, 0x11, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) 12:57:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r5, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) 12:57:14 executing program 3: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x24, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x2, 0xb, "8da72763584c405c24"}]}}}}}}}}, 0x0) 12:57:14 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x44, 0x11, 0x0, @dev, @local}}}}, 0x0) 12:57:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0) 12:57:14 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x0, 0x2f, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) 12:57:14 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00'}}}}, 0x0) 12:57:14 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000005c0), 0x2, 0x0) 12:57:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) 12:57:15 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) 12:57:15 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:15 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) write$tun(r0, 0x0, 0x0) 12:57:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) 12:57:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r5, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:15 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x18, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@private1]}]}}}}}, 0x0) 12:57:15 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000200)={@local, @dev, @void, {@generic={0x88f7}}}, 0x0) 12:57:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000e680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000e640)={&(0x7f0000000080)=@newtaction={0x7ec4, 0x30, 0x0, 0x0, 0x0, {}, [{0x38c, 0x1, [@m_xt={0x1e0, 0x0, 0x0, 0x0, {{0x7}, {0x164, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x0, 0x0, "175c9871f3f96d251751d658724ccc11395848bb9282b03372be3e17bcf101618c9ea9490dcc741cbc126d4f6274b908fbfa81dda72585352c9cf5dc8f82ff5de3ef406633dcef"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xa5, 0x6, {0x0, 'security\x00', 0x0, 0x0, "858e918d29068e6328af807014b8cbe34ebf6a66bfbf043bbe5d14d6ebe51733054834819c9fc10334e36104c1924ceae0f263526c3d93625fbd14420e4f96c38f0cfcb38225879dadac1fedc3ac5b98367bdf376c8742d8854224fcabde4409ad269e11bbe48e6e5079a3adc689d9d924313f18f0da03299bf55a"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}]}, {0x55, 0x6, "40439bab49b546edc797635e9cc3bd7b1114d5ed87ce8fd3194a7b5a122a0d480ed547c72896c900b7467b4438e405fbb6e0ebb56af836efc2096edc647df4d00f93bbd10f2bd59e94301b9ce8abbf6408"}, {0xc}, {0xc}}}, @m_mirred={0x1a8, 0x0, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0xd9, 0x6, "e2148975195ce1d9b0313d6c7bbf710d51e72baafb44383395e1fc9350d464f322cc03f4bc25cc24534816bf5e67195056abff70020037ffd6b1492deededef37c9715aa3bb540fef3d88ee5277f71b40e4f714940246a77fda3ad302ecb85084be2a840115f35abf1ccfd6ccc6a192165714311c06981a2f6cc277f27a8678ea126b8e5628fafcf38dbd32e6515431b7b0422c4ee0dbf6f99c035dc4850dcb16908b86afe73e333722cc3982e8e2c32c2c6ffaafc772ba29ea7eeeee8b7dfb0d41b00273b78e4be9c419c44816b3c835e8b3ed152"}, {0xc}, {0xc}}}]}, {0x2020, 0x1, [@m_pedit={0x1e4c, 0x0, 0x0, 0x0, {{0xa}, {0x1df8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xd8, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{}, 0x0, 0x0, [{}]}}}, @TCA_PEDIT_KEYS_EX={0x9c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{}, 0x0, 0x0, [{}]}}}]}, {0x29, 0x6, "b6bfa6d9843fb5db0818454755342f9855cc8fee573be376404707d94795e0f5589a1e70d8"}, {0xc}, {0xc}}}, @m_police={0x1d0, 0x0, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE64={0xc}]]}, {0xc9, 0x6, "7d8d488475aa6348c85337a98dcb5e774480f16ad477ae365421695a5a2458b3497a01e645044b2f86b047be4bf6a208ce977d95ba0587d359ebd43a86d46de794cd0c3131d2aa7159c7ec580e05bca0eeee116609a8e84b2b5611b16e772c70c2e6a6ad671b0c7b8a5db6fff2ed8e2aa42e2c94814448cd7241b236802bb3d659af08a072b68c29d9f2a3043d39ba729fade96d304814dd0abc7901d4f3bf4c120ede91e28d910e9da76d22059c799e490b515ebc7ceb3a7b878979c239538a45a3b945bd"}, {0xc}, {0xc}}}]}, {0x1430, 0x1, [@m_gact={0x150, 0x0, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x18}]}, {0x79, 0x6, "d57f342dfa9096208b1980136d1830c2bc12ebc0a3a8248e95b0e9e8357885cee8f2a1267a2f8b7ccfaa62e4fbde8c351270d90b8ac8f73653efe5b3f744c79c8384ae4bf62038186af72e3c22fe6c60192bf32b8f4a26ab6121f02fff8d239818d216385d0d7f393669e50aced83477be54f596bb"}, {0xc}, {0xc}}}, @m_simple={0xa8, 0x0, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0xc, 0x3, 'batadv0\x00'}, @TCA_DEF_DATA={0x7, 0x3, '}.\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}]}, {0x5, 0x6, '\x00'}, {0xc}, {0xc}}}, @m_ctinfo={0xf0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xc1, 0x6, "a08400dbdc483975c20ca58140ae213083dd41596a02494bc9dfa8a3bf9b4ad9afe0deaaeaf4ebeb3fe24b13f8b30ac3e02fd2cb13f8b984a26dea22e9c9ff3f1f27d89ce916a1863ab0f966658282910b1c05936e7f81ed7d9fae464ac82b5ffe708fe44e548e1d1fc288b6c431475a4c8f1adfd73acc8448c8ab7d26d7feab6ca57142e95461bd4919905be0b5fae0a62ec266404b950d10966eedea39c42223cd8d90a1e633e790ce50a4aaf01cf3499722a1f7a56206cae51c2261"}, {0xc}, {0xc}}}, @m_simple={0x17c, 0x0, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'batadv0\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x8, 0x3, '::]\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'batadv0\x00'}, @TCA_DEF_DATA={0x6, 0x3, '&\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'batadv0\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0xb, 0x3, '\xfe#)$&,\x00'}]}, {0xdd, 0x6, "bd075519a48ed9ae0de44e539f979c58d21871f5d61e62dd3776d976f22d5071a5363cd53d028387f7180cdf6c7decf86ce97de357e41fd16061712583b2468e7e56706c95e8da5795c0a6adf4bb271a2800e42bdeb77e8907c790ce9ffb2e600de345f6ce693d5021dc0a43412484f686084ea1efb68193ac9c058a3f12b09b314955ec0fd1121d307e60e086cc5cba71f7280996a370626d7d1142a298648a680b2ed6182960b5e82404274db8159a03e88f5e993d880256e928914de49ce3d7da2f5e6876461484dfeddad79ab321ddd36a49cadd554c1d"}, {0xc}, {0xc}}}, @m_ife={0x11c, 0x0, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x99, 0x6, "185dfebc8935f28330b0d3866f4f7038b1aa5ae8eb15a1e9d09f7043e65be49a768121ada03bde72aaed2fa687f0c00e1135297c4afc6483a609a7e139fbc10bf646a07110c7b96fab40b7092b0638a80fbda24efbfd63f9f1abbfd62357d8e569551c305b3078f13c17db4fc0188a66026d3a832b88a8497f6eced6dbcc0e5f9e7b785f2f3983573f9291007ba4d6c38984adb3c5"}, {0xc}, {0xc}}}, @m_skbedit={0x148, 0x0, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0xc9, 0x6, "e69c9f70d59cb5a10f20467b2714b253fec6d2f1846c47939b7558b70375eaf3942ee0f761c2472827ad61dd4809c7e3f407dfe6f9a071880571473e3a8c70e01e11c3baa18f8515aabb61318cfbc8b0d265c95f58ad3626d9e0fbaebdaaf10bbb73bf9437c6816d21901d0e7f69a886b8fced756ca97eac950c9015513db414b49e62398bc51e978f3712d7dd5f5ec727ad51cdc82422433a841ca36953f4bce7ee1138a782bd4119031de2893e4c0c751d9aff9c247cbdba2e15036192b5aaeb7ee9c316"}, {0xc}, {0xc}}}, @m_connmark={0xd64, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xd31, 0x6, "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"}, {0xc}, {0xc}}}]}, {0x46d4, 0x1, [@m_pedit={0x46d0, 0x0, 0x0, 0x0, {{0xa}, {0x46a4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}, @TCA_PEDIT_PARMS_EX={0xe20}, @TCA_PEDIT_PARMS_EX={0xe20}, @TCA_PEDIT_PARMS_EX={0xe20}, @TCA_PEDIT_PARMS_EX={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7ec4}}, 0x0) 12:57:15 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601074c400080000fe2a89ec9542aba7e1be225d000000000000f8"], 0x0) 12:57:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60002, 0x0) write$tun(r0, 0x0, 0x0) 12:57:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 12:57:16 executing program 5: syz_emit_ethernet(0x1234, &(0x7f0000001940)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6040599011fe2f01fc000012260000000000000000000001fe8000000000000000000000000000aa"], 0x0) 12:57:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x10e, 0x65, 0x0, 0x0) 12:57:16 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:16 executing program 3: syz_emit_ethernet(0x47, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x11, 0x2c, 0x0, @dev, @private1, {[], "696fbed1a16c1441f7bc02d0bca4e70fa1"}}}}}, 0x0) 12:57:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 12:57:16 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00 ', 0x14, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 12:57:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 12:57:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, 0x0, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x18}}, 0x0) 12:57:17 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x10, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts={0x0, 0x0, '\x00', [@padn]}]}}}}}, 0x0) 12:57:17 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x14, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 12:57:17 executing program 3: r0 = socket(0x2a, 0x2, 0x0) bind$xdp(r0, &(0x7f0000003d00), 0x10) 12:57:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xffffffffffffff7a, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9dc333c53f191bbe5b582c853e00000000c5ef996a521de60000", @ANYRES16, @ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x8080) 12:57:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0xf0}, 0x0) 12:57:17 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:17 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601074c400080000fe80000000000000000000000000000020010000000000000000000000000001290000000000005a"], 0x0) 12:57:17 executing program 2: socketpair(0x10, 0x3, 0x3, &(0x7f0000003400)) 12:57:17 executing program 4: socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000001bc0)) 12:57:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffe}}, 0x0) 12:57:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, 0x0, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:18 executing program 3: syz_emit_ethernet(0x40, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0xa, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts], "c3f0"}}}}}, 0x0) 12:57:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000cdcf7b"], 0x14}}, 0x0) 12:57:18 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 12:57:18 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x44, 0x29, 0x0, @dev, @local}}}}, 0x0) 12:57:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0x3, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="8c012dbd0300fedbdf08110000000c000600020000000200000005001200240000000c00060002121e205f5829e4f10000000000000067b5aa66c1c064fa85114420f54f62a1822a1da3a0f7efd4a1b5e12821b3637e32112db3c00df18327352adaaa1e8cd68e54ad8eebb31306d0bc"], 0x34}}, 0x4004814) 12:57:18 executing program 2: syz_emit_ethernet(0x92, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x4, 0x4, 0x0, @dev, @local, {[@hopopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}, 0x0) 12:57:18 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x1c}}, 0x0) 12:57:18 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000900)='ns/time\x00') 12:57:18 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x1d30c0, 0x0) 12:57:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 12:57:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, 0x0, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:19 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x18, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x9, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 12:57:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) 12:57:19 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) 12:57:19 executing program 2: syz_emit_ethernet(0x37, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x1, 0x3b, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], "c3"}}}}}, 0x0) 12:57:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)={0x14}, 0x33fe0}}, 0x0) 12:57:19 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x0, 0x0, @dev, @mcast2, {[@hopopts={0x3c}]}}}}}, 0x0) 12:57:19 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:19 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x14, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6}}}}}}}, 0x0) 12:57:19 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "0019e0", 0x20, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) 12:57:19 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffddffffffffaaaaaaaaaabb86dd60"], 0x0) 12:57:20 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x8, 0x2c, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts={0x29}]}}}}}, 0x0) 12:57:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:20 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000700)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "eaf39a", 0x10, 0x3a, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x41}, {[], @ni={0x8c}}}}}}, 0x0) 12:57:20 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x44, 0x2b, 0x0, @dev, @local}}}}, 0x0) 12:57:20 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x20, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x2, 0xa, "8da72763584c405c"}]}}}}}}}}, 0x0) 12:57:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:57:20 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x20, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x2, 0x7, "8da7276358"}]}}}}}}}}, 0x0) 12:57:20 executing program 2: syz_emit_ethernet(0x58, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0x22, 0x2c, 0x0, @dev, @private1, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@mcast2]}], "696fbed1a16c1441f7bc"}}}}}, 0x0) 12:57:21 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:21 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) accept(0xffffffffffffffff, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f00000002c0)=0x80) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000001bc0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000001e00)={'syztnl0\x00', &(0x7f0000001d80)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x7, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x10, 0x8, 0xd0e6}}) 12:57:21 executing program 3: syz_emit_ethernet(0x92, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x5c, 0x33, 0x0, @dev, @local, {[@hopopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}, 0x0) 12:57:21 executing program 5: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 12:57:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 584.422114][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.430010][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:57:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:21 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f36c07", 0x10, 0x21, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e368f2", 0x0, "2e5692"}}}}}}}, 0x0) 12:57:21 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b0ad36", 0x18, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 12:57:21 executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x4c, 0x2f, 0x0, @dev, @local, {[@fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}]}}}}}, 0x0) 12:57:21 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:21 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1074c4", 0xc, 0x0, 0x0, @dev, @private1, {[@routing={0x2f}], "696fbed1"}}}}}, 0x0) 12:57:21 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601074c40008000000000000000000000020010000000000000000000000000001"], 0x0) 12:57:22 executing program 4: syz_emit_ethernet(0x92, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "09f84f", 0x5c, 0x2f, 0x0, @dev, @local, {[@hopopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}, 0x0) 12:57:22 executing program 5: clone(0x40001f00, 0x0, &(0x7f00000012c0), 0x0, 0x0) 12:57:22 executing program 2: unshare(0x62000400) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 12:57:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}}, 0x0) 12:57:22 executing program 3: select(0x1e, &(0x7f0000000040), &(0x7f00000000c0), 0x0, &(0x7f0000000080)) 12:57:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:22 executing program 4: unshare(0x20000280) unshare(0x28040080) 12:57:22 executing program 3: select(0x88, &(0x7f0000000000), &(0x7f0000000080), 0x0, 0x0) 12:57:23 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:23 executing program 2: unshare(0x62000400) mq_notify(0xffffffffffffffff, 0x0) 12:57:23 executing program 4: unshare(0x62000400) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_notify(r0, 0x0) 12:57:23 executing program 3: set_mempolicy(0x2, &(0x7f0000000000)=0x401, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 12:57:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0}) tkill(r2, 0x800000015) 12:57:27 executing program 5: unshare(0x28000000) unshare(0x22000000) 12:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:27 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0}) tkill(r2, 0x800000015) 12:57:27 executing program 2: unshare(0x62000400) r0 = socket$inet6(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 12:57:27 executing program 4: unshare(0x62000400) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) 12:57:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0}) tkill(r2, 0x800000015) 12:57:27 executing program 5: unshare(0x62000400) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) 12:57:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0}) tkill(r2, 0x800000015) 12:57:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0}) 12:57:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x29, 0x0, 0x0, 0x0) 12:57:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0}) 12:57:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000040)={0x4}, &(0x7f0000000080)={0x8}, 0x0, 0x0) 12:57:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) [ 593.530079][T10322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.566906][T10322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:57:34 executing program 2: unshare(0x62000400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) 12:57:34 executing program 5: clone3(&(0x7f0000000780)={0x80008200, 0x0, 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58) 12:57:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0}) 12:57:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:34 executing program 4: mq_open(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0, 0x0) 12:57:34 executing program 5: unshare(0x62000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, 0x0, 0x0) 12:57:35 executing program 4: unshare(0x62000400) r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 12:57:35 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:57:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:57:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) [ 599.152612][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.177935][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:57:39 executing program 2: unshare(0x62000400) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140), 0x4) 12:57:39 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:57:39 executing program 5: unshare(0x62000400) unshare(0x24000200) 12:57:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000240)) 12:57:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) tkill(r2, 0x800000015) 12:57:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x4}]}]}]}]}, 0x38}}, 0x0) [ 603.261616][T18784] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 603.373433][T18786] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 12:57:40 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:40 executing program 4: unshare(0x62000400) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) 12:57:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:41 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:47 executing program 2: unshare(0x62000400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) 12:57:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:47 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) tkill(r2, 0x800000015) 12:57:47 executing program 5: unshare(0x62000400) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 12:57:47 executing program 4: unshare(0x44060200) 12:57:48 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:48 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:49 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:50 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:55 executing program 2: unshare(0x6c000000) unshare(0x40020000) 12:57:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) tkill(r2, 0x800000015) 12:57:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:55 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x0, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:55 executing program 5: unshare(0x40020000) unshare(0x2000600) 12:57:56 executing program 4: set_mempolicy(0x4002, &(0x7f0000000040)=0x1, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000100)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 12:57:56 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x0, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:57:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:57:57 executing program 4: r0 = gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000001140), 0x0, 0x0) read(r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 12:57:57 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x0, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) [ 620.294567][T19327] ptrace attach of "/root/syz-executor.4"[19326] was attempted by "/root/syz-executor.4"[19327] 12:57:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, &(0x7f0000000540)='pids') ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:57:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) [ 621.175799][T10322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.212818][T10322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.924580][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.930903][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 12:58:01 executing program 2: set_mempolicy(0x2, &(0x7f0000000140)=0x1, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:58:01 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x0, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:58:01 executing program 4: unshare(0x28000000) unshare(0x40020000) 12:58:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:02 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) set_mempolicy(0x1, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 12:58:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000140)) 12:58:03 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x0, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:58:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x800000015) 12:58:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:03 executing program 2: unshare(0x62000400) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x240800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) [ 626.478310][ T26] audit: type=1326 audit(1628081883.661:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19412 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 12:58:04 executing program 5: unshare(0x28000000) io_uring_setup(0x5c37, &(0x7f0000000000)={0x0, 0x0, 0x2}) 12:58:06 executing program 4: socket(0x10, 0x0, 0x8) 12:58:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x800000015) 12:58:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c00990004"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:06 executing program 5: select(0xfffffffffffffe89, &(0x7f0000000000), &(0x7f0000000080), 0x0, 0x0) 12:58:06 executing program 2: unshare(0x62000400) r0 = socket$inet6(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0xc9e1f55fff28d1f5) 12:58:06 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x0, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:58:07 executing program 5: unshare(0x400) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 12:58:07 executing program 4: unshare(0x62000400) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 12:58:07 executing program 5: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)="200000000002000019000000500100000f001300000000000000000001000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0xa08041, &(0x7f0000000040)) 12:58:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x800000015) 12:58:07 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:58:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c00990004"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) [ 630.922607][T19564] loop5: detected capacity change from 0 to 4 [ 631.133867][T19564] loop5: detected capacity change from 0 to 4 12:58:08 executing program 4: unshare(0x62000400) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x4d) 12:58:08 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:58:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000080)) 12:58:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) [ 631.986308][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.035288][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:13 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5351, &(0x7f0000000040)={0x52, @time}) 12:58:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:13 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:58:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x4d) 12:58:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c00990004"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:13 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001ac0)='ns/cgroup\x00') setns(r0, 0x0) 12:58:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:13 executing program 5: unshare(0x62000400) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 12:58:13 executing program 4: unshare(0x62000400) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x301800, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x78) [ 636.243101][T10446] Bluetooth: hci3: command 0x0406 tx timeout 12:58:13 executing program 2: unshare(0x62000400) unshare(0x4a040400) 12:58:13 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 12:58:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a0006"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@private, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) sendfile(r3, r2, 0x0, 0x100007000) 12:58:14 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85352, &(0x7f0000000040)={0x0, @time}) 12:58:14 executing program 2: unshare(0x62000400) unshare(0x4a040400) 12:58:15 executing program 5: unshare(0x62000400) r0 = epoll_create(0x2e) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 12:58:15 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 12:58:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000080)) 12:58:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a0006"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:16 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 12:58:16 executing program 4: select(0x40, &(0x7f0000000040)={0x6}, 0x0, 0x0, &(0x7f0000000100)) 12:58:16 executing program 5: unshare(0x62000400) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4020940d, &(0x7f0000000040)={0x0, @time}) 12:58:16 executing program 2: syz_io_uring_setup(0x1112, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0) 12:58:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:58:16 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:58:16 executing program 2: unshare(0x62000480) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) 12:58:17 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:58:17 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x401c5820, &(0x7f0000000040)={0x95686564c5a32bcb, @time}) 12:58:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a0006"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) [ 640.931016][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.940838][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:19 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @private=0xa010100}, 'veth1_to_bridge\x00'}) 12:58:19 executing program 2: unshare(0x28000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x40020000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x50) unshare(0x30000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) 12:58:19 executing program 4: r0 = socket(0xa, 0x3, 0x81) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x2f1a, 0x4) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) read(r0, &(0x7f0000000240)=""/49, 0x31) 12:58:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 12:58:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:22 executing program 4: unshare(0x40000) unshare(0x8000200) 12:58:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x3, 0x4) 12:58:22 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private}, 'veth1_to_bridge\x00'}) 12:58:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:23 executing program 4: unshare(0x400) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 12:58:23 executing program 2: unshare(0x62000400) r0 = socket$inet6(0xa, 0x1, 0x0) getpeername$inet6(r0, 0x0, 0x0) 12:58:23 executing program 5: mq_open(&(0x7f0000000000)='.\\\x00', 0x0, 0x0, 0x0) 12:58:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:23 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private}, 'veth1_to_bridge\x00'}) 12:58:23 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$P9_RREMOVE(r0, 0x0, 0x0) 12:58:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:23 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$P9_RAUTH(r0, 0x0, 0x0) 12:58:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:24 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 12:58:24 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 12:58:24 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2103, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c08f3235008000000f30660f38f8a90a0000003e0f07", 0xffffffffffffff25}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000041000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x282400, 0xff92766c845bcc45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x9, 0x62, 0x7, 0xfff]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @private}, 'veth1_to_bridge\x00'}) 12:58:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') write$tun(r0, 0x0, 0x57) 12:58:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:25 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$P9_RXATTRCREATE(r0, 0x0, 0x0) 12:58:25 executing program 5: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 12:58:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:25 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$P9_RXATTRCREATE(r0, 0x0, 0x23) 12:58:25 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$P9_RRENAMEAT(r0, 0x0, 0x0) 12:58:25 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:25 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4815, 0x0, 0x0) 12:58:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x30) 12:58:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0xc) 12:58:25 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:25 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system', 0x400, 0x11a) 12:58:25 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8240, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000001740)='./file1\x00', 0xee01, 0x0, 0x0) 12:58:25 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4000045, 0x0, 0x42) 12:58:25 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 649.028240][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.103528][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:58:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400), 0x0, 0x80) 12:58:26 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:26 executing program 5: socket(0x2, 0x3, 0x1) 12:58:26 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0xc000, 0x0, 0x2c5d983b53904eb) 12:58:26 executing program 0: get_mempolicy(0x0, 0x0, 0x3ff, &(0x7f0000ffc000/0x4000)=nil, 0x4) 12:58:26 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8040, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 12:58:26 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:26 executing program 0: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000001) 12:58:26 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x50041, 0x0) 12:58:26 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x600c085, 0x0, 0x0) [ 649.786768][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.822339][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:27 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x2008000, 0x0, 0x0) 12:58:27 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 12:58:27 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x329841, 0x15) 12:58:27 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:27 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 12:58:27 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000019280)='/sys/devices/system', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 12:58:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=@abs, 0x6e) 12:58:27 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:27 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 12:58:27 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, 0xee01, 0x1000) 12:58:27 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 650.542316][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.550297][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:27 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x27c000, 0x1c) 12:58:27 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109240, 0x1c2) 12:58:27 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) 12:58:27 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:27 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x4, 0x103) 12:58:27 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 12:58:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x164) 12:58:28 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:28 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 12:58:28 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x109242, 0x152) 12:58:28 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109240, 0x103) [ 651.321066][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.363003][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff00"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:28 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$P9_RSETATTR(r0, 0x0, 0x0) 12:58:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000000c0)) 12:58:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$char_usb(r0, 0x0, 0x0) 12:58:28 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8240, 0x0) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r0, 0x0) 12:58:28 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r0, 0x0, 0x35) 12:58:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 12:58:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:29 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) 12:58:29 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8240, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1, 0xc5) 12:58:29 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x5d0103, 0x0) [ 652.109149][ T26] audit: type=1804 audit(1628081909.292:100): pid=20406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir753547431/syzkaller.yFGDbW/345/file1" dev="sda1" ino=13936 res=1 errno=0 [ 652.155333][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.182815][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff00"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:29 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) 12:58:29 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x240, 0x0) lstat(&(0x7f0000000340)='./file1/file1\x00', 0x0) 12:58:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=@abs, 0x6e) 12:58:29 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x41, 0x0) 12:58:29 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100) 12:58:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000140)) 12:58:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:29 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 12:58:29 executing program 5: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000b) 12:58:29 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x600c0, 0x22) [ 652.888381][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.922787][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff00"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:30 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8042, 0x10) 12:58:30 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8240, 0x142) 12:58:30 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 12:58:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:30 executing program 5: memfd_create(&(0x7f0000000040)='S\\[\xf5\x00', 0x3) 12:58:30 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800c0, 0x10) 12:58:30 executing program 0: timer_create(0x2, &(0x7f00000003c0)={0x0, 0xe, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) 12:58:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:30 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd41) 12:58:30 executing program 5: memfd_create(&(0x7f0000000400)='Y\x00', 0x1) 12:58:30 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x44040, 0x0, 0x0) [ 653.609173][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.634751][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:58:30 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) 12:58:30 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 12:58:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) 12:58:31 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000019280)='/sys/devices/system', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/186, 0xba) 12:58:31 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f00000001c0)) 12:58:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:31 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 12:58:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 12:58:31 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000040)) [ 654.379087][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.414966][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:31 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x22) 12:58:31 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000002500), 0x80, 0x0) 12:58:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = getpid() ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 12:58:31 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 12:58:31 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_settime(r0, 0x0, 0x0, 0x0) 12:58:31 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88241, 0x1c3) 12:58:31 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0xe9) 12:58:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:32 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x2c5d983b53904eb) 12:58:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x40000, &(0x7f00000003c0)=@abs, 0x6e) 12:58:32 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0x2b8801, 0xd2) [ 655.161119][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.200775][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:32 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) timerfd_gettime(r0, 0x0) 12:58:32 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) 12:58:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:32 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x103) 12:58:32 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 12:58:32 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8240, 0x1c2) 12:58:32 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x2200c884, 0x0, 0x0) 12:58:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:32 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={0x0}) 12:58:32 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x103) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) 12:58:32 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0xa80, 0x0) [ 655.881864][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.929185][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:33 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 12:58:33 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80, 0x0) 12:58:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 12:58:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:33 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 12:58:33 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 12:58:33 executing program 0: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) 12:58:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f107ffeb3cd038098a78ccf30408070001000600f2dd9b000780180001808018000000010000ff000000000002000000100006000465000000000c00090000000020000014aa140017007665746800008000616e0000000080000500070088000000140004000000000000003cd957bf001b120100000900120000007a33000000000c00f6bc87bbdd0bbd0c80000c00148008200191edfbed879db145000806028aab8600005c1bede412d367930036453d0900020073797a30"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2e1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x8c3713, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) 12:58:33 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) 12:58:33 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, 0xee01, 0x0) [ 656.387476][T20586] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 656.662139][T12643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.686727][T12643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000180)) 12:58:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:34 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x181000, 0x0) 12:58:34 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8240, 0x1c3) 12:58:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:34 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xb9) 12:58:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 12:58:34 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x5a, 0xa01}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:58:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) getsockname(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3d, 0x0, "a3cc25cd8b71fce55c57f9175e48ffc428397f4a9dbd18410dfb81c120bfd02561190478d6fbfdc53ddf937aaf10b37198d6b03d74d942046c39507f84990c0678099971f64ac90a954914b81f9c1ecb"}, 0xd8) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000440)={@local, @random="f8968583fe2f", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x28, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "cf317901c738b823619bc18f06ead949"}]}}}}}}}}, 0x0) 12:58:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 657.522544][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.530486][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.615676][T20629] MD5 Hash mismatch for [fe80::aa]:0->[ff02::1]:20002 L3 index 0 12:58:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xcc}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000103"], 0x14}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000400)={'syztnl2\x00', 0x0}) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x140}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x0, 0x4, 0x0, 0xab86}, 0x10}, 0x74) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004001) 12:58:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:34 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getsockname$unix(r0, 0x0, &(0x7f0000000100)) 12:58:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x100000, 0x4) 12:58:35 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80) 12:58:35 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x2) write$P9_RLCREATE(r0, 0x0, 0x0) 12:58:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20040218, &(0x7f0000000100), 0x1c) 12:58:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0xcfdd8e58c3f0fb4c, 0x0, 0x0) 12:58:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg$unix(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@cred], 0x20}, 0x1) 12:58:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000001c0)=0x8, 0x4) 12:58:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000080)={0x10}, 0x10}, {&(0x7f00000000c0)={0x10}, 0x10}], 0x2}, 0x0) [ 658.539491][T10322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.559913][T10322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:35 executing program 0: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)) [ 658.942855][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.966794][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:37 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}]}) 12:58:37 executing program 5: prctl$PR_GET_IO_FLUSHER(0x35) 12:58:37 executing program 4: socketpair(0x0, 0x80406, 0x0, 0x0) 12:58:37 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1d, &(0x7f0000004bc0)=0xffffffffffffffff, 0x4) 12:58:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0x1b0, 0x11c, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'lo\x00'}, 0x0, 0xc0, 0x11c, 0x0, {}, [@common=@unspec=@realm={{0x2c}}, @common=@ttl={{0x24}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@CONNSECMARK={0x24}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x36c) 12:58:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xc}, 0x40) 12:58:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000640)=[{0x0, 0x0, 0x100}], 0x0, &(0x7f00000006c0)) [ 660.999138][T20697] loop0: detected capacity change from 0 to 1 [ 661.019947][T20697] EXT4-fs (loop0): unable to read superblock 12:58:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000004c0)) 12:58:38 executing program 5: r0 = syz_io_uring_setup(0x4b2c, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x0, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 12:58:38 executing program 2: socketpair(0x10, 0x2, 0x400, &(0x7f0000000000)) [ 661.088082][T20697] loop0: detected capacity change from 0 to 1 [ 661.096620][T20697] EXT4-fs (loop0): unable to read superblock [ 661.246290][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.272966][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8904, &(0x7f0000002280)) 12:58:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) 12:58:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}}, 0x0) 12:58:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000008f00)={0x0, 0x0, &(0x7f0000008ec0)={0x0}}, 0x0) 12:58:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000100)=0x2, 0x4) 12:58:41 executing program 0: prctl$PR_GET_IO_FLUSHER(0xe) 12:58:41 executing program 0: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) 12:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) 12:58:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000008f00)={0x0, 0x0, &(0x7f0000008ec0)={&(0x7f0000008e80)={0x14}, 0x14}}, 0x0) 12:58:41 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x1406, 0x201}, 0x10}}, 0x0) [ 664.297842][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.344189][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440), &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:44 executing program 4: migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000040)=0xf6) 12:58:44 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000a80), 0x5, 0x0) read$ptp(r0, &(0x7f0000000000)=""/235, 0xeb) 12:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 12:58:44 executing program 2: mq_unlink(&(0x7f0000000000)=',\\.]\x00') 12:58:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:44 executing program 0: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0xc0189436, &(0x7f0000002280)) 12:58:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x7ffffff2, &(0x7f0000000640)=[{0x0}], 0x0, &(0x7f00000006c0)) 12:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000040)) 12:58:44 executing program 4: r0 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7b9, &(0x7f0000000000)) 12:58:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x60036ec1, 0x0, 0x1}, 0x40) 12:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f00000005c0)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) 12:58:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440), &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:47 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0) 12:58:47 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, r0) 12:58:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:47 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xfffffffffffffd6b, 0x0) 12:58:47 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000001380)='/proc/cgroups\x00', 0x0, 0x0) 12:58:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000080)) 12:58:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000001340)=0x80000001, 0x4) 12:58:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast1}}) 12:58:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000480), 0x4) 12:58:47 executing program 5: r0 = syz_io_uring_setup(0x5460, &(0x7f0000000140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000380)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/26, 0x1a}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 12:58:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8982, 0x0) [ 670.380742][ T2594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.464805][ T2594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440), &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:50 executing program 2: r0 = syz_io_uring_setup(0x18b, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r4}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 12:58:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x3f, 0x4) 12:58:50 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000a80), 0x0, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 12:58:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0xa8, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) 12:58:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:50 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1f]}, 0x0, 0x8) 12:58:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001cc0)=[{&(0x7f0000000500)="67e574d27fd43af5b680e75616", 0xd, 0x4}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000001d40)) [ 673.165428][T20863] loop0: detected capacity change from 0 to 15 [ 673.180752][T20863] FAT-fs (loop0): invalid media value (0x00) [ 673.188840][T20863] FAT-fs (loop0): Can't find a valid FAT filesystem 12:58:50 executing program 5: syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x450000) 12:58:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6cb, &(0x7f0000000000), 0x4) 12:58:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6b1, &(0x7f0000000000), 0x4) [ 673.295531][T20863] loop0: detected capacity change from 0 to 15 [ 673.305955][T20863] FAT-fs (loop0): invalid media value (0x00) [ 673.313793][T20863] FAT-fs (loop0): Can't find a valid FAT filesystem 12:58:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000100)=0x9, 0x4) [ 673.514749][T10322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.550592][T10322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001cc0), 0x0, &(0x7f0000001d40)={[{@fat=@time_offset}]}) 12:58:53 executing program 5: r0 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7b9, 0x0) 12:58:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6bf, &(0x7f0000000000), 0x4) 12:58:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000840)) 12:58:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) [ 676.102745][T20901] FAT-fs (loop0): bogus number of reserved sectors [ 676.110092][T20901] FAT-fs (loop0): Can't find a valid FAT filesystem [ 676.187344][T20901] FAT-fs (loop0): bogus number of reserved sectors [ 676.194104][T20901] FAT-fs (loop0): Can't find a valid FAT filesystem 12:58:53 executing program 4: getpid() migrate_pages(0x0, 0x6, &(0x7f0000000000)=0xffffffff9515e67f, &(0x7f0000000040)=0x1) 12:58:53 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee01) ioctl$KDMKTONE(r0, 0x4b66, 0x816e00b) 12:58:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)=ANY=[], 0x6c}}, 0x0) 12:58:53 executing program 5: syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 12:58:53 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000001580)) 12:58:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8910, &(0x7f0000002280)) [ 676.590518][T12647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.599143][T20933] fuse: Bad value for 'fd' [ 676.630571][T12647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.669445][T20933] fuse: Bad value for 'fd' 12:58:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:56 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x2de1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7994, &(0x7f0000000240)={0x0, 0xc335, 0x8, 0x0, 0xcf}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000002c0)) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0) 12:58:56 executing program 4: syz_open_dev$vcsa(&(0x7f0000000a80), 0x0, 0x0) mlockall(0x7) 12:58:56 executing program 2: getcwd(&(0x7f00000001c0)=""/217, 0xd9) 12:58:56 executing program 5: r0 = syz_io_uring_setup(0x4b2c, &(0x7f0000000140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 12:58:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:56 executing program 0: socketpair(0x11, 0x3, 0x4, &(0x7f00000001c0)) 12:58:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8970, &(0x7f0000000240)={'sit0\x00', 0x0}) 12:58:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8970, &(0x7f0000002280)) 12:58:56 executing program 5: prctl$PR_GET_IO_FLUSHER(0x1d) [ 679.620175][T10322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.652625][T10322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004580)=[{{&(0x7f00000000c0)={0x2, 0x4e21}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000100)='u', 0x1}], 0x1, &(0x7f0000000640)=[@ip_tos_int={{0x10}}], 0x10}}], 0x1, 0x4014) 12:58:57 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x8) 12:58:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:58:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) 12:58:59 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) 12:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:58:59 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) 12:58:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 12:58:59 executing program 0: syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:58:59 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 12:58:59 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x432100, 0x0) 12:58:59 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x121f02, 0x0) [ 682.590008][T12647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.618703][T12647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:58:59 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200040, 0x31) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) r1 = syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x33, 0x5, &(0x7f0000001280)=[{&(0x7f0000000100)="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", 0x1000, 0x6e8}, {&(0x7f0000001100)="c38a0db1f7c956ef2e5d2af7c598efde2ba5440784a5a2bdadd337318b0856504685404094a1ec43daf7722165068e", 0x2f, 0x1}, {&(0x7f0000001140)="16edc0008e53d1b2e88a609c8ba3e404caa3b1d5baeed054aa0f25902bd65e3d8b043a97e0550cc8e9461781c5f77748f880ce510fc1bb7a2313c917752d8299e0b03082c6710d19e2ae22494ce15d5d77270401a5", 0x55, 0x7}, {&(0x7f00000011c0)="a94ff8b8f799ba1d928abc961187798cbf5eb3533cd72ab648e012d50165cf84d0", 0x21, 0x4fbe}, {&(0x7f0000001200)="e3e54d91bfa84a37ac1744bda3b3511b4d5bf2a9f516021167f683e31ea7073f6efbba07e148ab7ca9a870ef4c602deb11ae404ba9fe40627c060ae1d2926171c043a063ab9c35338ea90afd26de2227a37c0696623b1eba82191a5e2fb090d126feb138983e14679952493b3c4e7132", 0x70, 0xfffffffffffffffd}], 0x4800, &(0x7f0000001300)={[{}, {@flock_local}, {@flock_openafs}, {}, {}, {@dyn}, {@flock_write}, {@flock_local}, {@flock_openafs}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@fowner_gt={'fowner>', 0xee01}}, {@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@obj_user={'obj_user', 0x3d, '['}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '.pending_reads\x00'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '.pending_reads\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) mknodat$loop(r1, &(0x7f0000001480)='./file0\x00', 0x400, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f00000014c0)=0x7ff, 0x0, 0x4) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001940)={&(0x7f00000018c0)=[{0x3, 0x600, 0xaf, &(0x7f0000001500)="00c21260949df611e00bbfb0e685bed815ea5cb0bc8fcca1a68c7554e7e25ab95b3fa101c2555b4a3703c4f942d9f3f991767d8e60171d361e867ca3bf3e0fcf0e1b8ea89a43e10cba290b4515833fddcae7e4fdb781ad3da9d520be617bafc46c11f9de193c5fee0f58fd5acb51c436d16e260ce24808f44133db3ed61d64b2cc684e94f482472768fd04a372b4caea7bc8de4c995d6b77df137e4e1c555c7982b655c2b97e51c8c556bcf2a87643"}, {0xd2b2, 0x1210, 0xb, &(0x7f00000015c0)="ff95be45dc9ced8531b835"}, {0x0, 0x1410, 0xd9, &(0x7f0000001600)="5b5e14c2f196ac05954ec35d705eccc5aecb1ecfbff5bc63af7b9d39a194cb4cef8643ad6c22242e44ac4045cd78d85118d89395a80725f648ba28e493cd4647c2110643817b62aa385af85b1078ddc2bf5a0ac95280b8ef29d0cb3841d37ffe9852a4250d93a0abf38008d66ff6ddba7b7c28fbd1d19d73321ba9cec66be15d263b0cbd6d59b983140b4610c0420db65f3dc9c60ccc171a19a3b58bb9f741a261c64f845eaf5ccba8b111fa8c28fafb5f7563b6542e9518fd12da4267699dbd36a5f1985bf3dcbdd50f45d299aff776e68e18a7287c08562c"}, {0x8, 0x8000, 0xaa, &(0x7f0000001700)="bea301421221731361225b381ed789cf17ff152a447c8dd00ab9931c62125936b6ad3af59ed84fd1ed9c92f377df95017ae14dd8f0f88d40a07fe0d3263be7126dd54177a03c86c50a61ab91fae3285c50317dd8bb205a979def8d74aa4dbedb8a9c99597a486c7f5851b075dd0cc3b0b273e29091bf47801be0f748027ebfbeb8eb95e3a20ef3cd078a1e32f5afd40e55b20c871dfee750029c6b6201e6d3e6bbf924eeaa75706cf756"}, {0x0, 0x9001, 0x16, &(0x7f00000017c0)="bcc09d4294a97abad3c2d77ebe4521055e546dcaea73"}, {0x9, 0x9000, 0xa1, &(0x7f0000001800)="5cc805d69bee4ca4c1a807f5d1b1e0dddefaea2e630f177d318cbf21f4481eda1d73120c37f5c45948dc1165c5cdece9c10597f54bae87b0f36ce38808af71bf8cdbed0c6ff373efa01428aa8f3b6abb4fad1ae1bd37d94102f4426e3b5249c6dd3fa57a8f0b82a0d1450be6fd99172b9b5da7f794e3598a00fdb494b9b059dba573b2f118070dec3eae59b4b0c537cfa36fb547c1a6ed021d1445caab1617c274"}], 0x6}) fanotify_mark(r0, 0x80, 0x40000019, r0, &(0x7f0000001980)='./file0\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x5c}}, 0x8010) r2 = pidfd_getfd(r0, r1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r2, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000001b40), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x44, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x8a4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d80)={'veth1_to_bond\x00'}) syz_mount_image$afs(&(0x7f0000001dc0), &(0x7f0000001e00)='./file0\x00', 0x4, 0x6, &(0x7f0000002200)=[{&(0x7f0000001e40)="d0334a9cae70ff594ea7b34d9ba495b73f34b1685988b5a68e5cc01985c18c23866655c8b0a5af8c6a9ffd8e8c", 0x2d, 0x7}, {&(0x7f0000001e80)="fb76d3c5982e340b0532a693a8a86aa88853533e92bff722da4f8ffe6891e05aa68171e6d6db2812e3f479ebfe0f39f8f3a16f852cd078e6982f3e7a5ce06e61a741e915931d5f9f37e166661abd9ecba46e2536a869dfe8faf12a376aac7e6b1ad3ef1851b82a6615668506db0efc4f4a598e3600c4c866f2ada6495ecc566d4c", 0x81, 0x40}, {&(0x7f0000001f40)="135ee106721374f2c15506f66c282c3e3c8f33de030a7e78aa7aa420d6c5b8d2a7c964284c22b49e91be32cec873b294b21759ef343088939e7e0a425e880192150313d02e161625dc9ba0ca8156a04148f27565f2cef7a1d16dbf483009db96bbe0d02017b0743f58140dc0", 0x6c, 0x6}, {&(0x7f0000001fc0)="587ff0982618ddad52e2ca0b1655a13d66638ed27db9ab377457b84c1d89c428b1cf5b97a3e47d", 0x27, 0x80000001}, {&(0x7f0000002000)="8446a7674619fcf50f840ca41b4c7d32ae42ae1cc0e91a3a9c8236d609cb212219829b585b74517cb339d0403293c3223c96feb2ff79dd7e5984a29c0c4d4c2450635fc8d8ff3b05f9dfcf32e683d708fac19bca8d17235d9d961a65c78ff7ab3ed3c51155d484aa2ee99c32288f3c195320e03bf60671849416b8deb2b7d006910c984a3d14b3dfd36699da0866f51fc670889ca5d5a97081fe019dda8b1739a9f7b8d651426a725348f8a223d9bc285959a917c9105d0ad04dd19a517173a9ac", 0xc1, 0xdd82}, {&(0x7f0000002100)="312a2db0c0639b0a796cf923160a4d728f1b415fa5e46b4d401a4a51ef4084ebf56bba533b199f866b5001c41d4924d0ac4b5af8724d7dcb97fc33240c0e55e48544f75d72ed9f2f1deca858b6280acd303ed3e38777f354cb4c54b9372a0e11398c743bc09a7e112b210d7fb1be3f03e7c53c6b8ce51f51053d0c9d757c5ff12c0bb5de04ab0ae03abfd5162e0bc2c4acd182e642f3b53c3a1243f3d6842e4aa342ecd81a9f7a06fa6b68a20ace207e988ea9fab71fc54e612dafda637d10aa09e9217d85fc276b3a55666b09397c005f0e41041c16bb", 0xd7, 0xffffffffb7cd3ac3}], 0x40, &(0x7f00000022c0)={[{@dyn}, {@flock_local}, {@source={'source', 0x3d, ',!}\\}[-*,'}}, {@flock_local}], [{@fsmagic={'fsmagic', 0x3d, 0xa}}]}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000002340)) recvmmsg(r2, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000002380)}, {&(0x7f00000023c0)=""/196, 0xc4}, {&(0x7f00000024c0)=""/241, 0xf1}, {&(0x7f00000025c0)=""/115, 0x73}, {&(0x7f0000002640)=""/24, 0x18}, {&(0x7f0000002680)=""/192, 0xc0}, {&(0x7f0000002740)=""/69, 0x45}, {&(0x7f00000027c0)=""/4, 0x4}, {&(0x7f0000002800)=""/85, 0x55}, {&(0x7f0000002880)=""/4096, 0x1000}], 0xa, &(0x7f0000003940)=""/4096, 0x1000}, 0xfc}, {{&(0x7f0000004940)=@ax25={{0x3, @null}, [@rose, @bcast, @bcast, @rose, @remote, @remote, @rose, @bcast]}, 0x80, &(0x7f0000004e80)=[{&(0x7f00000049c0)=""/166, 0xa6}, {&(0x7f0000004a80)=""/53, 0x35}, {&(0x7f0000004ac0)=""/218, 0xda}, {&(0x7f0000004bc0)=""/159, 0x9f}, {&(0x7f0000004c80)=""/251, 0xfb}, {&(0x7f0000004d80)=""/88, 0x58}, {&(0x7f0000004e00)=""/105, 0x69}], 0x7, &(0x7f0000004f00)=""/172, 0xac}, 0x800}, {{&(0x7f0000004fc0)=@sco={0x1f, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000005040)=""/85, 0x55}], 0x1, &(0x7f0000005100)=""/171, 0xab}, 0x6268}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000051c0)=""/49, 0x31}, {&(0x7f0000005200)=""/15, 0xf}, {&(0x7f0000005240)=""/84, 0x54}, {&(0x7f00000052c0)=""/118, 0x76}], 0x4, &(0x7f0000005380)=""/22, 0x16}, 0x40}, {{&(0x7f00000053c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000005500)=[{&(0x7f0000005440)=""/177, 0xb1}], 0x1, &(0x7f0000005540)=""/209, 0xd1}, 0x5}, {{&(0x7f0000005640)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000067c0)=[{&(0x7f00000056c0)=""/4096, 0x1000}, {&(0x7f00000066c0)=""/196, 0xc4}], 0x2}, 0x9}], 0x6, 0x20, 0x0) syz_io_uring_setup(0x1589, &(0x7f0000006b40)={0x0, 0x9f94, 0x8, 0x1, 0x51, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000006bc0)=0x0, &(0x7f0000006c00)) syz_io_uring_submit(r4, 0x0, &(0x7f0000006d40)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2}, 0x8001) 12:58:59 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0xc000001}, 0x10) [ 682.903608][T21025] netlink: 1192 bytes leftover after parsing attributes in process `syz-executor.4'. [ 682.950542][T21026] netlink: 1192 bytes leftover after parsing attributes in process `syz-executor.4'. 12:59:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:59:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x9, 0x6, 0x101}, 0x14}}, 0x0) 12:59:02 executing program 0: syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$afs(0x0, &(0x7f0000001e00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:59:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:02 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 12:59:02 executing program 4: io_uring_setup(0x3d51, &(0x7f0000000180)={0x0, 0x56c9, 0x8}) 12:59:02 executing program 0: syz_mount_image$omfs(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, 0x2, &(0x7f0000001c00)=[{&(0x7f0000000ac0)='R', 0x1, 0x10001}, {&(0x7f0000000b00)="7f", 0x1}], 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB='s']) 12:59:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 685.371590][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.377957][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 12:59:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 685.441959][T21055] loop0: detected capacity change from 0 to 256 12:59:02 executing program 2: mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:59:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 12:59:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 685.535543][T21055] loop0: detected capacity change from 0 to 256 12:59:02 executing program 5: syz_mount_image$qnx6(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)) 12:59:02 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 12:59:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 685.897963][T12647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.928452][T12647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:59:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:59:03 executing program 0: syz_mount_image$afs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)) 12:59:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc) 12:59:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x301}, 0x14}}, 0x0) 12:59:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_NEWFLOWTABLE={0x400, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x134, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x1c0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x830, 0x8, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0xf9, 0x7, 0x1, 0x0, "0fc24e8e2b87b26e4d4dc36ce84bcc50f6e8573026406a59f8a511684663b63f540a297e670ffa1e7b142b273e9fa369fa3fa8bd56b67a3eefa15eb5ff79198c810a33e3cf9f9b4121993d76705ac49fa96aeab94b5b6a1b6016f4df3e826a450df3ce4ef760eabc993e139e493a248b0ccea9cbb5a83477da12be33608d2908e838942f41196e2cdaf5621fd15a9c907b4f00c88f6cfbdbad63eac0f9f0a37bbb8d5f223dc3178d52c50f4d936cf1f107a31288dc3454a32b92ad4451846d67a4ca1569ad3646b84fb7f2cfd61973c8d6e550e18c8cf3ebe2589c627a0de343eb1a41366531c707b816ddd4389d6a377a6d8f9a76"}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0x4}, {0x44, 0x1, 0x0, 0x1, [@numgen={{0xb}, @void}, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_DREG={0x8}]}}]}, {0x84, 0x1, 0x0, 0x1, [@dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}]}}, @dup={{0x8}, @void}, @range={{0xa}, @void}, @dup_ipv4={{0x8}, @void}, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}]}}]}]}, @NFTA_RULE_EXPRESSIONS={0x518, 0x4, 0x0, 0x1, [{0xc8, 0x1, 0x0, 0x1, [@quota={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc}]}}, @fib={{0x8}, @void}, @meta={{0x9}, @void}, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}, @tproxy={{0xb}, @void}, @hash={{0x9}, @void}, @objref={{0xb}, @void}, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8}]}}]}, {0x124, 0x1, 0x0, 0x1, [@socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}]}}, @tunnel={{0xb}, @void}, @dynset={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x28, 0x7, 0x0, 0x1, {{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, @NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_TIMEOUT={0xc}]}}, @limit={{0xa}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_FLAGS={0xfefb}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc}]}}, @limit={{0xa}, @val={0x4}}, @range={{0xa}, @void}]}, {0x94, 0x1, 0x0, 0x1, [@fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_DEV={0x8}]}}, @log={{0x8}, @void}, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}, @notrack={{0xc}, @void}, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}]}}]}, {0x13c, 0x1, 0x0, 0x1, [@nat={{0x8}, @void}, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}, @lookup={{0xb}, @void}, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}]}}, @quota={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc}]}}, @notrack={{0xc}, @void}, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8}]}}, @masq={{0x9}, @void}, @lookup={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8}]}}]}, {0x34, 0x1, 0x0, 0x1, [@nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_TYPE={0x8}]}}, @numgen={{0xb}, @void}, @rt={{0x7}, @void}]}, {0x14, 0x1, 0x0, 0x1, [@immediate={{0xe}, @void}]}, {0x70, 0x1, 0x0, 0x1, [@tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}, @masq={{0x9}, @void}, @immediate={{0xe}, @void}]}, {0x10, 0x1, 0x0, 0x1, [@limit={{0xa}, @void}]}, {0x90, 0x1, 0x0, 0x1, [@dup_ipv4={{0x8}, @void}, @dup_ipv6={{0x8}, @void}, @exthdr={{0xb}, @void}, @objref={{0xb}, @void}, @synproxy={{0xd}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE, @NFTA_SYNPROXY_FLAGS, @NFTA_SYNPROXY_FLAGS, @NFTA_SYNPROXY_FLAGS]}}, @limit={{0xa}, @void}, @socket={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8}]}}]}]}, @NFTA_RULE_USERDATA={0xbe, 0x7, 0x1, 0x0, "077de36d903e0ceeba47f4b28c1d5eca01934dcb318989ccc57d7e7cc144f54d44f7ec9b27682184e2479365513c2e7f09ae6078b1a76c51f07a994ba414c19e67a4be9e5be25a1051e6bb7f61a665ffcd87a635c2c92b13135590f910ad34962a516eaa84dbaa7247dee661ebc7f1791c81312b5cdea9cdc8b0b71b37c6c21e3ead5df249c678c7d0ab723aa2ce76cba764227550a09d4177ab32a1074880cd09b5390e7c2ac4e015ced29b72e30d74150db305ba6514b573a0"}, @NFTA_RULE_POSITION={0xc}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x21, 0x7, 0x1, 0x0, "f592ff624b69c19202de97ee882d3cfe41adac142354b6cde1d3d94b8b"}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14}}, 0xd10}}, 0x0) 12:59:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000007f35bf"], 0x1c}}, 0x0) 12:59:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, 0x0) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 686.194725][T21088] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:03 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={'sha224-arm64-neon\x00'}}) 12:59:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, 0x0) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:59:03 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0x400, 0x1) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001940)={&(0x7f00000018c0)=[{0x3, 0x600, 0x0, 0x0}, {0x0, 0x0, 0x0, &(0x7f0000001600)}, {0x0, 0x8000, 0x0, 0x0}, {0x0, 0x9001, 0x0, 0x0}, {0x9, 0x9000, 0x0, &(0x7f0000001800)}], 0x5}) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x4c}}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000001b40), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x44, r1, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8a4) syz_mount_image$afs(&(0x7f0000001dc0), &(0x7f0000001e00)='./file0\x00', 0x4, 0x4, &(0x7f0000002200)=[{&(0x7f0000001e40)="d0334a9cae70ff594ea7b34d9ba495b73f34b1685988b5", 0x17}, {&(0x7f0000001f40)="135ee106", 0x4, 0x6}, {&(0x7f0000001fc0)="587ff0982618ddad52e2ca0b1655a13d66638ed27db9ab377457b84c1d89", 0x1e, 0x80000001}, {&(0x7f0000002000)="8446a7674619fcf50f840ca41b4c7d32ae42ae1cc0e91a3a9c8236d609cb212219829b585b74517cb339d0403293c3223c96feb2ff79dd7e5984a29c0c4d4c2450635fc8d8ff3b05f9dfcf32e683d708fac19bca8d17235d9d961a65c78ff7ab3ed3c51155d484aa2ee99c32288f3c195320e03bf60671849416b8deb2b7d006910c984a", 0x84}], 0x40, &(0x7f00000022c0)={[{@flock_local}, {@source={'source', 0x3d, ',!}\\}[-*,'}}, {@flock_local}], [{@fsmagic={'fsmagic', 0x3d, 0xa}}]}) syz_io_uring_setup(0x1589, &(0x7f0000006b40)={0x0, 0x9f94, 0x8, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 12:59:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x15, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x0) 12:59:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, 0x0) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:59:03 executing program 5: add_key$user(&(0x7f00000005c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 12:59:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:59:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 686.618262][T21112] loop4: detected capacity change from 0 to 264192 12:59:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 686.719270][T21100] could not allocate digest TFM handle sha224-arm64-neon [ 686.739240][T21112] kAFS: unparsable volume name [ 686.767768][T12651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.779527][T21100] could not allocate digest TFM handle sha224-arm64-neon [ 686.802393][T12651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:59:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:04 executing program 2: syz_mount_image$afs(&(0x7f0000001dc0), &(0x7f0000001e00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={[], [{@fsmagic}]}) 12:59:04 executing program 0: syz_open_dev$vcsu(&(0x7f0000002e00), 0x85f, 0x6182) 12:59:04 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname$netlink(r0, 0x0, 0x0) 12:59:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) 12:59:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000), 0x10) 12:59:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000300)) 12:59:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 687.117763][T21143] afs: Unknown parameter 'fsmagic' [ 687.167387][T21143] afs: Unknown parameter 'fsmagic' 12:59:04 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000280)) 12:59:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x15, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 12:59:04 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fork() 12:59:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x800000015) [ 687.596224][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.622163][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:59:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x0) 12:59:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x800000015) 12:59:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) 12:59:04 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000380)) 12:59:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 12:59:05 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0xd40c0, 0x0) 12:59:05 executing program 0: syz_mount_image$omfs(&(0x7f0000000a40), 0x0, 0x0, 0x2, &(0x7f0000001c00)=[{&(0x7f0000000ac0)='R', 0x1, 0x10001}, {&(0x7f0000000c00)="c11a6115280ba579e630e5d20f110919cff0c64d4a220a39ab321db447c0e9b7ad04a3059e0c535d09b2e27aa30629e1c75a29186810fd33c7b9864d6f221af278b0ca38a959fcf00519f824eed25add34b3c43647bc3ee824c1e5735d494dbf1a5d2f755e95afbdeed9a55a0d3e07aa8676c711d2830785de1dd14da9bca17514f8bcd2b1c8393d6115366c832e625664352b958640d13ad77d4675aa4e2ae099aed74729f0b304124b1d00db7d19614fdbf1f6675c076b801243846c978d84f8ec7f667459a379b3af24b7334f610a6ceaa1e7755040c3fab317066cc091c2c44b87addd1bc2e363750079a410cbc489741f192ff54733667216aa401e3b9bf1d4d93c2539447b2e59146dc1b74ebbc04aa2be0b691be5cbbaf90aaaf92c0291d264d0380e4c13746c85404b28ff9ce0180738bc336eb64a6ee5d28e5bfddd769529b1d35581c3f93fbb831e07643f63075eecd42fdeddae012a90d3475d525cab95fe90411fa5ca87de95e55da8b860318cde0ea1c0fa4aa8dc81aa930f21d1d7fd24f68f2d2e7c9c185d433ffc6e6f289ada60cacac2fafda5406b90aab072f61d08ff3739446cfd75b4ea07503725f603685f230b7f20443361ac86467dcdf1890cf10fc19099e20ec5f5761ba91f89e16d0b8ea4c7ace504ddeff35fda7b6c7899b7483ab3cbccf9ed497d247441708866ba5a2251a24a963fe6b94efe639d4af3a42c8f597cc00a497560d3005af1d87a6f902097fbade36e31d635c4112245126894c5eb66984916475485f95359817522e54b62be0998eebbfc4bb09e35821d8be5845146693e88687345d52e2c047ce4795cf9c4c2d2dbf4f4ea265ac41c87f87aa8c50e94d33aa2dd612d4322f8df209b7bcad8e83c2555ce1555bd04372aeb62ffc9ac2d228087d475d77bfaef6535f4c3f5e703ea87805e32741e396044345cbacfdbf3229312c56dde64362c64c53d205d055270d3fe38c76b95556c62fd0fe0f959c59e41a0b430cdf395025c8ff894a0ae6a30b78197eb2fa2dc5b933544cb05dce352870b5249c40fa601ffda898311301142a43b745dbe2219b7b2566d5e359cc04b71bdff1a9eda5593b150ab970f6bc04476e003e4cbecd9574cd3130ad3471f6516be92e1a2aeb309ba62a958c09f7d9eb5d7d9164945da075e90e5c9afd7bf823dfe87c0d424bd4eb112d218eac45d147fa6a40f36aa07692ab528f48a52d830939243afaa70fc8327f1135f747f079e7e33cedff200a8f331ee6caff0375d28884e556bf56ec53df35e5a18493892ffb1db85b1eb6ca4acc3bbb6b7bc34a386088fe59d967c7d263573133a69d10683f5db6f18ca8afa34bda6e4e3ebe5e4e75530a6f1279c21347b04bd092aa2354748d5afd502a4f0b9f9ecbc27103cc7c873f77e055b573db7bb5dff06c6038223bd18b503bbba2caf013713cdef0ea6c52cab8cab83b5268116d562ed7f79d022f8f8037ce78f646184c1123c31f27a8539edfcad0354ce4762db77dab7b94bfd540a1d6d5c0f274dc0039c5c238c996ae832fc4d58bacd40c1b8b3366bfa6efe69f64d8524716eb1f3dda22c95abcea78adf7aa469278281d9bad5c0ef383647626ac807c1cdb50eecbcb7ffc50dc91ee6d3b9c7324c811d161639cf6dfacf4ce4849a05092bf0e2c8d8e2ac5fb3761a6724205be0187120903c17af7b7f077e7bfc7a0bf85b98051eaf1cd849fda54026d33c9d5ced83da555822afbcd3220a3d2445fcae2cd34b1fdd0387b557c4b5ce1c4b8651fc9456eeedafb10f14264f48d12af22495b881eb1718cfe2b925163683859467f2e691743f5871d2427f79c36472f740d821897f26b65c47451812c2ac29d06f7c91c0f07d55b2ea9c223107d0d82c50e0b0617ca6a67db79a0cd308a753e17c021127284987ae8d35ce3da65c90ba70717180972f17e8d32c45e0bb6811eb5f790520029f75b19755ef45878dc44690427ecf55ecc4a9070f9d4d05f44b6ab674d770709514779e43ac7ef6bfe9020d0d53e0aefbe0e8a72c7d0d4b6b446e2ac779a1f49af1cd70bcc7f5c10b335705e7829bd6b931a20253af9b11beac257bf4dfc0f6310e9058519c2374f4b32f9d04e1b4c8c20813e61afcaa5893903b6a7469c6a97af64dbf4857759153ce37f3f6a85711a5a46ce6b39b2fde2d6fc06ea2bbedf4fe5281a0e83d1bf1a69c4f1e6227a43859224357b629d5aa6a559a93610c9c8d3d2fe1fe7d8c60e771822b7560368badada466efb164962985d633838d976bbf7bad6d8139bec9ebbeaa0e9ca9b2125e3c1777bc34fbfbe93308136f96f28856f91d9661a34e3dd8bfe5f97ac4db8ae114dba7a411db2932843bc79a5e8ae1aacdc77b63530cf2572362a77adec298740df2380437ad94b1f20c41bcda4e159961324ce2162be60498f169e099796d7f97c787783f6351d43baf9c7f88695b56ab7a21da399a1105d9c66df23103cb7cad30d39e216f82f62dbce57b1f22f7cb0291750db666e12ef2989a665a56319f8c2655003562be99b2aeae506417399329551febee32162b5939681b07a8da9c10d79b7f462963ee2e43f83ca23c7cfd5b09de1779c066f9ef6704c666ad2c7a91c4e539c2325a7d33f7d32709b725785c5fb47a1500ad685378fbc93c0f8283d74b8f27a64ff44c71531201833a2651b6ade9b93baebe5f5c2a48ec901f72ae0c5664db7ab510e9028f54760c85cc0737c6c543c743e3fa0bb08ca74bc00688514b7f166f271599ab05deaa8b05eae2fbbb806ed37554f042ad7db32e5be545b049057828f6e74e158351e2e6b97b0cf4495edd6884ebdf988140dffe58bf481a5582317887a00650447ce2c9a273619125cf164aa06642e030c9f3cfffd0f3abea39a28ac4b14c7361c361e0fc4bcc905a9711c72b24cacd09b496d200edf3c5cb57739b8943d5d77eb55cfac89e0caba12fec1c699d58a15de1fd1d56053f056ef0f8132419fa8a2ad178302d57a670de842d9037c4ae4c6aeac9d060c9ca1cc946671544dfdbd814e79e842a0381d559ec7864c2419be9c072752827738074fa059fe3115829b5f6beaaf82dadafdeee54e168db9d826c2d04b5ad973279ac9eb577a85e6d69d13f34193fb67f8235beccb8d43913d444baa1875c9e6327f97378b569ce5e87f9561c13a5b7b1df6247aba9c765cfa6330ffe15bd709b8fe79bed70b891b76f1a601c9e69df028c1096b9d53d6adec368f8be5aa562168154ca2907c4df52584f22eda441e5993125f7cd4fce71c84a3edc425cda4d7be29318d2d675190060796a883c002d56996de6a6910eac8e1d9b4571e65fc6444c3c7e3f515c9e60ca1587d9001f152107d07b7ca75ff5520b9324912ccf61cce4cdc5dfb9904fd1765cfbba4fe00af4f2203cb534992c703814402fef465ec6145871d932a1c8b06fdee1fd14b1a424ce8953117f60490a4890b9bd255825a83e74c3271614c259d07a3f550d6cd20f8fd96119cb7855c6c1e1cd087029c13956cdc4e57208c986842757bb24c283ef1ad4e22cb463282dbab24142ad331866be36c723255fd84fd13688850a9b8a78d356addfb5b49c8cc220a608685f706754d88fac28fd53048ac846a24a5f8f44123dd438fc7c19d09406ccd51bff272a4a7b2b70f646b5bfdecd8fbf2816565a702bf2f53b5a60f899e1ba498794c07671eeef171f18aeb3df6117273b89d327d6710c958af1c2e140fade7ba900f008cdf20a1e076b1142c66d568671291a2e5d3e64d7a7e5b4199f8010928d4fcefdb9be78b050bddc0148b7ca9c2ab7e56a71b6885df59c3f2052cdbfdf1b6ab7e32a3d794c25a3794494726231ed52b0cc181cf8f1b74ed870a53b6409256e359d2c591fc82e1057319ed6c96b8d9a2d430fb0ba3d4a3449646f4599cce34b36046414da820fc5bc51e3b170ec3bdbe1c744ac8aa88b00fc5abbff3a3e32a2cd0325710c24871322055e0254c0471edef39c13a44881621027494469ceffe8c3b73d85b589a1cadba0c9eb22e07bd3b1078d9127d5375b165bf3edcca57d98b2e5410c1963aecd12d013fafe59b366974d8607a7c55589f7711bd72071cc9da0557ba09a135a69441b3063e783bc8e99222ec5c059ec78335b80a2afb261bfa4fdc276113a4cc0e5149309094d93bba6676a9f6509befd4cf99c8d28b1fcf0fb31a7f0f5d9ba93fc0a36daa6c0ff308cbeb4a5ba20ab1bf685d7b9048e004f1f9499defcb28206204fcda1f6b4ea2f6228bd690e54615b809046df06b8b2eb61419c8089ecdf13e5b9435143ad7e8770058db72659e359d004e29c6f964560831f3b08d3a1bd4e59cdd4fb5448ab05b25ddd868ad79cddd9e4e72b0ac4ea095835c161f917504be8944fa0ff8d9082d8dd8c1fb269edc9f896530b2dd01493396f3d54b54d340faae8917c73d6400711853ceeebce184a59d5f1b90266b824cdec2515b4d0c2a88e813a62796bd15ce1b29250d897907339d821fc380383e3b9e39d5936b69fa13812291062d7c8b7191528b46b4d95adb87ef64d5390e25331175559b784226db02b5bb3b5633ad018d2a2b48680cb7d753d04145550c0ef395ab1bec3c18cbd5dbcf32d3f75b71b7e7dd3feb5a397361fbfcfde338303b82d1be635195f113e5cc948107c306f9756d3f824de7e881e34388603305e18356b9a4207044cfd5d9d657744cd5de9f52c9c3c34fa8bf096bfff08390479b6e1a2dfb6fc4fb9e7f40e78bab097975f174d67e57b9f434b9aaf57dae86de2d9c7873cf266a2c12eaa1bdb47c3f768abf55b7e1cc8fd404d316a65e7ccbba6780e0b37f7481373e13b50b8d7457a4a8596176affc95d3532d2d0d7c5a331795394131e3847da7a616b1303c444ddb4d735eb4675c52e6e11b6fd2c00f5b6df707b9d5b2242181a1aa87ecb78f5a606f67aa0b81ffd1e0c0d19decc027c258200da2594723dc7e0e90f98a5a1ec9811de5a11671f7118b039c018dd5ea2e0a0355c1840f3e53802637d4bb3c9d82cc73eaa1f97bb4c3fd85c5e38f95770c178216ac8fec3edfe981285286a122dc32f8fa5f4203ffc28b067f3e2741e7bd2cead088ac67b38e67c9110e68ca1feedefa919096048c450b11468855557c0684983c059e9e86f677e573153f3a91d96eb6a4acc14f418c0851bffaefd77b7593cc92f149787f069bb8ea7fe3e613b1566ab2b6be8bd8120af50bb1f38e3e10a6454ddccd8ccf8e0ae811b671f78c531c2fb2b719f3eeab1c8445a01670ef114f14810a5289b2a12637dbc9e8fa873cbf6e68200d9490d103165747d6f857b5c5e2ac466c5cdd3cee1b59c9b182f7ce7f6dee18db7e44bd4585323e8baa2daf01bf5983eafc15628b85171d241eec17aa9584e7241f55f32ceb01cfb41001c690e1a70c175f172d062450d8994ac0cd4fc493a3d6bb2496dc91587c32d7e677d841fc8ffa6de03beb46dc4afd6a25ef18ae92b865ec430db7db3b1d0b56bd582f1a8d634f096622362ef7132cd66d3f1d7e1da94510ec6edf09c8b69daf6da7cae21d6e40e1cf865bde2b864264145144332f5cc51cb827b59514da7077766b4cc474e0a21e40d3b08a45f33dae87a796a7ca245b1536b3c2c4831734108e6a70b8982686406e0ace0725f36492a055ac0e6a38fc1f0996a5f94e822855c631a4405f2b9f7215c80f16cb52c54b500c6e1f5412f658f2b0900b3867361bc60f53a8af200c6ffbfc536c36726acff7f8ec850e0dfb374efc43a6e4f9ed236", 0xffc, 0x5}], 0x0, &(0x7f0000001c80)=ANY=[]) [ 687.901790][T21183] loop0: detected capacity change from 0 to 256 12:59:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 12:59:05 executing program 4: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001c00)=[{&(0x7f0000000c00)="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", 0x401}], 0x0, 0x0) 12:59:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0xa, 0x3}, 0x14}}, 0x0) [ 687.964337][T21183] loop0: detected capacity change from 0 to 256 12:59:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) [ 688.160241][T21201] loop4: detected capacity change from 0 to 2 [ 688.305127][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.334025][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.352492][T21201] loop4: detected capacity change from 0 to 2 12:59:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:05 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001940)={0x0}) fanotify_mark(r0, 0x80, 0x0, r0, &(0x7f0000001980)='./file0\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8010) syz_genetlink_get_family_id$gtp(&(0x7f0000001b40), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8a4) syz_mount_image$afs(&(0x7f0000001dc0), &(0x7f0000001e00)='./file0\x00', 0x4, 0x4, &(0x7f0000002200)=[{&(0x7f0000001e40)="d0334a9cae70ff594ea7b34d9ba495b73f34b1685988b5a68e5cc01985c18c238666", 0x22, 0x7}, {&(0x7f0000001f40)="135ee106721374f2c15506f66c282c3e3c8f33de030a7e78aa7aa420d6c5b8d2a7c964284c22b49e91be32cec873b294b21759ef343088939e7e0a425e880192150313d02e161625dc9ba0ca8156a04148f27565f2cef7a1d16dbf483009db", 0x5f, 0x6}, {&(0x7f0000001fc0)}, {&(0x7f0000002100)="312a2db0c0639b0a796cf923160a4d728f1b415fa5e46b4d401a4a51ef4084ebf56bba533b199f866b5001c41d4924d0ac4b5af8724d7dcb97fc33240c0e55e48544f75d72ed9f2f1deca858b6280acd303ed3e38777f354cb4c54b9372a0e11398c743bc09a7e112b210d7fb1be3f03e7c53c6b8ce51f51053d0c9d757c5ff12c0bb5de04ab0ae03abfd5162e0bc2c4acd182e642f3b53c3a1243f3d6842e4aa342ecd81a9f7a06fa6b68a20ace207e988ea9fab71fc54e612dafda637d10aa09e9217d85fc276b3a55666b09397c005f0e41041c16", 0xd6}], 0x0, &(0x7f00000022c0)={[{@dyn}, {@source={'source', 0x3d, ',!}\\}[-*,'}}, {@flock_local}], [{@fsmagic={'fsmagic', 0x3d, 0xa}}]}) [ 688.467556][T21211] kAFS: unparsable volume name [ 688.536321][T21218] kAFS: unparsable volume name [ 688.744386][T12643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.765854][T12643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:59:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x800000015) 12:59:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000001940)) 12:59:07 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) 12:59:07 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 12:59:07 executing program 0: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) 12:59:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:08 executing program 0: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000043000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000080404000001007d40b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000008b28672ad3094c03000000bd007043d7332be142f7abeef17ffd831d659db5f16a2d56206374b9a087b299e6981cf9174900000000000000fd31adf7ebc88f5244715b77b0a8d05fb70600aededd0cd98308b29d00b5aae0c702cfa6f9f709000000450000000085e7fc0000000099f3e06b63a065f321aa40252b423d8d9cb56c000000006377bb37fc9b9704d6e658f870e4509994af464fc97f947b421163fbc313df3168a789ba5d2ed64527c2234cc45d6ffda9e64050561d81273d06003140a17cfa35ce4b3fcb9133f4b5d8a4621f0e81960cfb3c7c2861878f17f42fdba31c67eaa8a345dac00f7c01ee2c13c753ac128569929883105fe3ee44d504090000000000089b06000000000000000e39a5147627ff2da265f994aa96ed0f0200000000000016a57d7ea36c06044e8a8ed793e7b9dce510a67f203ceb590a6f2d2b43535e89b4b8c63a9ffa1b44706dc29e658ea9f9fb9ff9c560a8c42b4fa9013d22b0f5b55270ddc8e3943beebbba5f49aa69c441c21d4e72ee01fd6fa5122c21ac9f2f52fd3377607ceb7a2b2d7b8fa9e8a4461bb9bb2b8dbbfd012aca04415e0fcc840b6acc8b8154bad85584af7d04e89844b1e1779a04388573406524c759058967387d50700188af3984ec3aa17cf58d3e105b57afbcce04000000d7f605f88c720bdbfd71488a641b830b9ef4b5096d72cb9be71d231156ecb54e0a0a0a526eba88014ff9dbcdc0b3ca2d62b7286ae9664a174cc7572298363665bcdd1b406b732cacbdde919577a427e36cabb1a1145401033a1bab8625ebf705ae3724b0a3b538a277882477bfc4969b95a77803097a7d1c9c2dada6bfe014fbe6bb7a47d01ba2f4cd88e378a5bf24ead8000000000000000000000000efda6ecc1f31bfb8057a5e69cfa16db300b932ed06e6fcd6060033cae46ed87e76910733c591b85045982c37317dda43f0614b87200f5f4828d6ae514715e332f0d8d408491d94815e01d132f1a5f194c32ecb968ffcb4958820a402dfc7abd1399e7123bd64bdb189f9d69d0c54754b839e6ec70f6411784dc25a2eaa0400000100000040d2d5b0b200675750d224fe6592672697694b4c02219884cb6556ed78f6a80100fcf2f109157971edf63ad7abb77915f11f010000009183faf87b00d658b7517608cf2d95dbada31ab03745bdf113ad03ac500e0dad000000009fca31cbe3e50800000024e07d7fd0a12571fb15fc9d54c2760e61a300caf090910efbea134e4af4ee4f9839b90100000000000000aa5f4e86fe4c19ed4916a0bd39ebdc883300000000000000001425eb60b30158f9b1620a7086b61b6f8c1800822a20fb510ed5965adf5e879fd4ef611d09d482f1c5680469aed3903856539852b6a1b5e82684fef7e6a28fc03b1e4b9484fadb9cecbfe1dbeb5fa4d649ec20c4b85ffbfd3bee4d1532c01ef636f991e40953b5f8f4d2caeeb26135ec42e473e7a2fa283d21e8600d00000000000000004f7c9b10f97e2a3db7287834f545445a684b4ecdcaee2d2d2755e134620430d71cb5a9250462c79899c377d254763f2638133310f3de5ee598dff59c069952d0d20481f476713a9003000000cd181825d46b12ab128f34790ade456b545dcdf12590fd78342c3eee561712c7588c73b5a167617af78efbc012aa32dee9eb887fec20cf8aa378bcda53bde20f97a6c2ac7c3bfc1dfa9632423ff75b90b66f61ab7a5a71aa00cf79dc4b0a98f201e00bc6d34fa96f89629778d87ecfef71fc1fbd46797de72b0b9eb65b2e8a21a5cb04a6c9b9e72c91b781d33e38db7592abd472e18615cb3b5bf226d29daed4dc91d441100660452790222306ba3c4e5891a5f90cf1b8fcd2a21ceb6f733e8295d2e1650a665bfe4d94cd92dc10712f3f8d75f04c4f62c0e715ab5e09bc7a4cc5b903402a9e7769150fe3af178ecc17a750f522cc2c12c8cf4b2c7ce6e4296152a5f1148c6242cade1dc400cf94e0adb8722417992dfb2a6aea367cdefa64306a356adec4ced8298aa6b8e9a0221047ee70955ab06b5ab8ce10dfdbd201f4292ab982dda324a17091bd86551eeff2cdd52ff16f7cbecc6fd24fe6242c1fa8f7247807fd84a16e16a595f21622ea5aa66ead47e0e0d7950a9f40587b558741aa008478451668c66c23a129ab1572f5d007389f9224247c31877980715a22900bfd9caf3f3c12d08434f38708e6e644f86ce35d33cb7ebad601aba5c63a5bf3514d8e6032a121947a7dde9e9eb5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x1c) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x2, 0x4, 0x20, 0x8000000000000002, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) 12:59:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="100700000105010100000000000000000a000007540201"], 0x710}}, 0x0) 12:59:08 executing program 0: syz_open_dev$loop(&(0x7f0000000200), 0xffffffff, 0x224000) [ 690.973194][T21269] netlink: 1192 bytes leftover after parsing attributes in process `syz-executor.0'. 12:59:08 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c000000040a03"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x880) 12:59:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000004940)={0xa, 0x0, 0x0, @private0}, 0x20) 12:59:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x402c5839, 0x0) [ 691.104115][T21274] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 691.116879][T21275] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 691.278749][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.307313][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:59:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x800000015) 12:59:11 executing program 2: socketpair(0x15, 0x5, 0x4, &(0x7f0000000780)) 12:59:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000004140)=ANY=[@ANYBLOB="240000000a06010800000000000000000c000008100008"], 0x24}}, 0x0) 12:59:11 executing program 5: syz_open_procfs$namespace(0x0, 0x0) fork() syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') 12:59:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x40041271, 0x0) 12:59:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xca0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/182) 12:59:11 executing program 0: clock_gettime(0xb, &(0x7f0000000180)) 12:59:11 executing program 0: openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x1c7000, 0x0) 12:59:11 executing program 0: socketpair(0x0, 0xb, 0x0, &(0x7f0000000080)) 12:59:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x40, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x1}, 0x2000, 0x0, 0x447b7ea5, 0x1, 0xedf, 0x3, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0x9, 0x4, 0x1, 0x0, 0x3ff, 0x880, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x10800, 0x1, 0x6, 0x4, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x186c28b0}, r2, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xffffffffffffffb4, 0x212, &(0x7f0000000940)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='rxrpc_improper_term\x00'}, 0x10) 12:59:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000000580)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) [ 694.309423][T10322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.354005][T10322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:59:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x800000015) 12:59:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, &(0x7f0000000580)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 12:59:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000580)=""/4096, 0x5f5e0ff, 0x1000}, 0x20) 12:59:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(r0) 12:59:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}}, &(0x7f0000000580)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 12:59:14 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 12:59:14 executing program 0: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) 12:59:14 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000012c0)="d6", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1}, 0x0) 12:59:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002000)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000580)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 12:59:14 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') 12:59:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}}, &(0x7f0000000580)=""/4096, 0x32, 0x1000, 0x8}, 0x20) [ 697.365508][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.393597][T21356] BPF:[1] ARRAY (anon) [ 697.398451][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.448862][T21356] BPF:type_id=4 index_type_id=2 nr_elems=0 [ 697.507182][T21356] BPF: [ 697.531420][T21356] BPF:Invalid index [ 697.566622][T21356] BPF: [ 697.566622][T21356] [ 697.606110][T21356] BPF:[1] ARRAY (anon) [ 697.625114][T21356] BPF:type_id=4 index_type_id=2 nr_elems=0 [ 697.639992][T21356] BPF: [ 697.649716][T21356] BPF:Invalid index [ 697.663801][T21356] BPF: [ 697.663801][T21356] 12:59:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x800000015) 12:59:15 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) 12:59:15 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)}, 0x0) 12:59:15 executing program 5: pipe(&(0x7f0000001cc0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) 12:59:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:15 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 12:59:15 executing program 0: writev(0xffffffffffffffff, &(0x7f0000001040)=[{0x0}], 0x1) 12:59:15 executing program 0: linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) 12:59:15 executing program 0: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa640, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) getrusage(0x0, &(0x7f0000000180)) 12:59:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x0, 0x3, 0x0, 0xfffffff7, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 12:59:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={0x0, 0x0}, 0x20) 12:59:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x44040) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={0x0}}, 0x0) [ 698.298702][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.331084][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:59:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x800000015) 12:59:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x9dc, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1f}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ce37a9113bf9d641df20f6789793eb0bbd6b8d4282276d525cb95ce6b8371011"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3e0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x39c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "34162bf8977432c6fec3759e500bc4f4ab1721ee810879d4f4ed6fc130100d03"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, {0x32c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x304, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}]}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private0, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e44293b055416329c12f88f26030e7974ec9d056f5e188d81d4cc5df9b254eb9"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "270fdea46b9e4fe86092884a3bcdc52e1a62522f8409abf5421d22b746b1e861"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private2}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x4a4, 0x8, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, @WGPEER_A_FLAGS={0x8}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ff1e872a6fdc86e6c57bd425ceb45a8d21908f0c248f72f4f0c7b4b44614a5fb"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fe1d414b1c36cac640cfab1b7f1d22c8696c03d896142c5825aa8dea04b29b55"}]}, {0x100, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "32856338387f62442cd83bed457deb9106ad894f83447c4ac2af8d95474ddb22"}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8835660d783f55ea1399f4bfa6c776c3ca5493f6145de51a7ce0bb01a893bea0"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a9e0e530f9230009f7a657b18c15051799ba70126918ed60a4555a2dda16e92"}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x128, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}]}]}]}, 0xec4}}, 0x0) 12:59:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1, &(0x7f0000000880)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}], &(0x7f0000000900)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000940)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:59:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b00)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x108) 12:59:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 12:59:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', 0x0}) 12:59:16 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x10040, 0x0) 12:59:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x0, 0x3, 0x1, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 12:59:16 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10) 12:59:16 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x9b0000, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, '\x00', @p_u8=0x0}}) 12:59:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x9dc, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ce37a9113bf9d641df20f6789793eb0bbd6b8d4282276d525cb95ce6b8371011"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3e0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x39c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "34162bf8977432c6fec3759e500bc4f4ab1721ee810879d4f4ed6fc130100d03"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, {0x32c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x304, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x1}}]}]}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private0, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e44293b055416329c12f88f26030e7974ec9d056f5e188d81d4cc5df9b254eb9"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "270fdea46b9e4fe86092884a3bcdc52e1a62522f8409abf5421d22b746b1e861"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private2}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x4a4, 0x8, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x9, @private0, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xcd29, @ipv4={'\x00', '\xff\xff', @local}, 0xfff0}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ff1e872a6fdc86e6c57bd425ceb45a8d21908f0c248f72f4f0c7b4b44614a5fb"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fe1d414b1c36cac640cfab1b7f1d22c8696c03d896142c5825aa8dea04b29b55"}]}, {0x100, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "32856338387f62442cd83bed457deb9106ad894f83447c4ac2af8d95474ddb22"}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8835660d783f55ea1399f4bfa6c776c3ca5493f6145de51a7ce0bb01a893bea0"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a9e0e530f9230009f7a657b18c15051799ba70126918ed60a4555a2dda16e92"}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x80}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x128, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5c86, @loopback, 0x7}}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 12:59:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x0) 12:59:16 executing program 4: perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:59:16 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='y', 0x1, r0) keyctl$search(0xb, r1, &(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0) 12:59:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:16 executing program 2: r0 = socket(0x9, 0x2, 0xfff) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) socket$inet_sctp(0x2, 0x1, 0x84) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000880)) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000001280)={0xe0, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5262}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000084}, 0x4c841) 12:59:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b00)=@nat={'nat\x00', 0x19, 0x2, 0x0, [], 0x0, 0x0, 0x0}, 0xb24) 12:59:16 executing program 0: syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x10d700) 12:59:16 executing program 0: syz_mount_image$hfs(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x0, 0x4, &(0x7f0000002840)=[{&(0x7f0000001500)='/', 0x1, 0x100000001}, {&(0x7f0000001600)="cb", 0x1}, {&(0x7f0000001700)="18", 0x1, 0xfffffffffffffe00}, {&(0x7f0000001740)="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", 0x1000, 0x1}], 0x102008, &(0x7f0000002900)) [ 699.815513][T21454] loop0: detected capacity change from 0 to 264192 12:59:17 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x0) 12:59:17 executing program 5: syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) 12:59:17 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='Z', 0x1, r0) [ 699.886059][T21454] loop0: detected capacity change from 0 to 264192 12:59:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x40) 12:59:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x0) 12:59:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@generic="cc", @nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}]}, 0x24}}, 0x0) 12:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:17 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 700.145366][T21475] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 12:59:17 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x0) 12:59:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', 0x0, 0x0) 12:59:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x40) 12:59:17 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x9b0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 12:59:17 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='Z', 0x1, r1) keyctl$get_persistent(0x16, 0xee01, r2) 12:59:17 executing program 0: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='#\x00', 0xfffffffffffffffc) 12:59:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 12:59:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8a, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpid() ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf6934) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x0) 12:59:17 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100), 0x4) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private2, @empty, @private2, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x400200}) socket$nl_generic(0x10, 0x3, 0x10) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) 12:59:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x44040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) 12:59:17 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x0) 12:59:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}, 0x300}, 0x0) 12:59:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x78) 12:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x18}, 0x40) 12:59:18 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000200)) 12:59:18 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x200200, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) 12:59:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f00000000c0)=0x78) 12:59:18 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x0) 12:59:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd}, 0x0) 12:59:18 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'raw\x00', 0x2, [{}, {}]}, 0x48) 12:59:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0xec4, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x9dc, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1f}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ce37a9113bf9d641df20f6789793eb0bbd6b8d4282276d525cb95ce6b8371011"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3e0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x39c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "34162bf8977432c6fec3759e500bc4f4ab1721ee810879d4f4ed6fc130100d03"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, {0x32c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x304, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x1}}]}]}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private0, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e44293b055416329c12f88f26030e7974ec9d056f5e188d81d4cc5df9b254eb9"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "270fdea46b9e4fe86092884a3bcdc52e1a62522f8409abf5421d22b746b1e861"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x4a4, 0x8, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x9, @private0, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xcd29, @ipv4={'\x00', '\xff\xff', @local}, 0xfff0}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ff1e872a6fdc86e6c57bd425ceb45a8d21908f0c248f72f4f0c7b4b44614a5fb"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fe1d414b1c36cac640cfab1b7f1d22c8696c03d896142c5825aa8dea04b29b55"}]}, {0x100, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "32856338387f62442cd83bed457deb9106ad894f83447c4ac2af8d95474ddb22"}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8835660d783f55ea1399f4bfa6c776c3ca5493f6145de51a7ce0bb01a893bea0"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a9e0e530f9230009f7a657b18c15051799ba70126918ed60a4555a2dda16e92"}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x80}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6fd, @remote, 0xfffffffe}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9da}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}]}, {0x128, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5c86, @loopback, 0x7}}]}]}]}, 0xec4}}, 0x40) 12:59:18 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000043c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:59:18 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000100), 0x4) accept$phonet_pipe(r2, 0x0, &(0x7f0000000140)) r3 = accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000) r4 = accept4$phonet_pipe(r3, 0x0, &(0x7f0000000200), 0x80000) accept$phonet_pipe(r4, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, @can={0x1d, 0x0}, @in={0x2, 0x4e24, @local}, @qipcrtr={0x2a, 0x3, 0x3fff}, 0x5, 0x0, 0x0, 0x0, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x7, 0x3, 0x3}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff, 0xfffc, 0x8dd, 0x680, 0x7, 0x400200, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) accept$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x224, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x208, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xd3, 0x0, 0x96, 0x5}, {0x1, 0x6, 0x0, 0x1}, {0x4, 0x5, 0x7, 0x3ff}, {0x1, 0x7f, 0x6, 0x8}, {0xff80, 0x7, 0x0, 0x8}, {0x4, 0x8, 0x4, 0x4}, {0x37d0, 0x2, 0x6, 0x401}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000a00)={@initdev, @broadcast, 0x0}, &(0x7f0000000a40)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xa, &(0x7f0000000880)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb87}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000900)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000940)=""/183, 0x41000, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x10, 0x3, 0x80000001}, 0x10}, 0x78) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r10 = accept4$phonet_pipe(r0, &(0x7f0000000b80), &(0x7f0000000bc0)=0x10, 0x0) setsockopt$PNPIPE_INITSTATE(r10, 0x113, 0x4, &(0x7f0000000c00)=0x1, 0x4) 12:59:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 12:59:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 12:59:18 executing program 0: syz_mount_image$hfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002840), 0x0, 0x0) 12:59:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000dc0)) 12:59:18 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x0, 0x0, "0b6660ea4e2d6eb80406ecf99612644920d491f4d9d95ba34a4c9dc301beb310"}) 12:59:18 executing program 2: syz_mount_image$hfs(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002900)={[{}, {@dir_umask}], [{@subj_role={'subj_role', 0x3d, 'lo\x00'}}]}) 12:59:18 executing program 3: accept(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f00000001c0), 0x0) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000200), 0x80000) socket$nl_generic(0x10, 0x3, 0x10) 12:59:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) 12:59:18 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, &(0x7f00000001c0)=@id, &(0x7f0000000200)=0x10) 12:59:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x60}, 0x0) 12:59:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b00)=@nat={'nat\x00', 0x19, 0x2, 0x136, [0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x9, 0x0, 0x0, 'nr0\x00', 'veth1_to_bridge\x00', 'veth0_virt_wifi\x00', 'netdevsim0\x00', @remote, [], @random="c496ad664947", [], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1ae) 12:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @private=0xa010102}}) 12:59:19 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 12:59:19 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:59:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x4}]}, 0x2c}}, 0x0) 12:59:19 executing program 0: syz_open_dev$usbmon(&(0x7f0000006b00), 0x0, 0x1a5000) 12:59:19 executing program 5: socket(0x0, 0x800, 0x1f) syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x0) 12:59:19 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, 0x0, &(0x7f0000000100)) 12:59:19 executing program 3: socketpair(0x8, 0x0, 0x0, &(0x7f0000000b00)) 12:59:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000180)) 12:59:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x2}]}, 0x108) 12:59:19 executing program 3: socket(0x0, 0xed10a1d80ed9c50a, 0x0) 12:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x2, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES, @NFACCT_FILTER={0x0, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK, @NFACCT_FILTER_MASK]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0x27}]}, 0xffffffffffffff09}}, 0x0) 12:59:19 executing program 4: socketpair(0xa, 0x1, 0x0, &(0x7f0000000980)) 12:59:19 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) 12:59:19 executing program 5: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f00000000c0)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 12:59:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000600)={'wg2\x00'}) 12:59:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 12:59:19 executing program 3: syz_mount_image$hfs(0x0, &(0x7f00000014c0)='./file0\x00', 0x2, 0x5, &(0x7f0000002840)=[{&(0x7f0000001500)="2fd044f7b75460f910d4c9319e910fccbd18039a7fa37053028aded7c92e62b6adcb71ac49f1e179a7ecc4de5b38a866c027a37fb1c3cd0772f5e6d2821dccf551c17b843a8a0c6ff00cf9ec7dc000098ee41294752c818cedb6756bd6e5069987b60075bb8bb92a834a170cd767bb2086e7b8895abe2eb93a2c5306d85c185478a1d9498fbca664ee0de8bc5e82a645d720abadca488a0769d4d8848f4a2d74e2919b624f443cfbeb15019b13ffeda8ff34a01ab919c3c90d93334b8190b0a414cd5b1ac0eb612203189adf21dc96adcab7", 0xd2, 0x100000001}, {&(0x7f0000001700)="18e7f1bcaadea7456b95e8ecc8a965b3ef8585a5437a191b1fe78c178303b7d171ab32945c", 0x25, 0xfffffffffffffe00}, {&(0x7f0000001740)="9f802ba1661acd14400241c7fc1b94182c70cc5ddc1c05dee40f4fd1467501d5e114d89eb7fa9feffe59048c19c0bd97d6dbe5a08b7afbf24070c00031ce219dcf4cbbc1ee0935041f49db692f985dc5c3ea4398bb9c8d9dab263bdf06b9015536ee37c0efaaa787d6e909c3aed8d8e622eb3191fe23c99c49a4147ec443676c1905ac8f1b58cb21625ef0045ddeab12bb4bcae6394470e49d375d4cd70cdc8a3e3b43b685b3101e86d5e8c4e77efe332946ca668820faa8ed85b8a3ff1c9a88f3b72a745ee6bce85696eeacf4eafbacf3ab7f2d64c04289c877568f06f4d97908614d8a42b6949992f2efba595a5d2ad3c5479002782879d248f4cc5cc03330704e1af910a0db5affd3171452326800d92f30cfb53476e7d42b6463ca15b5733908067a27942b340efaafc6144012f29ed2e0e42d1f813752096b1ca8d12449849b08a26d79afa7d019efcdf79f62bfd38c3d3f078bf819b3fbeb9076c39f177d2b3fca14105a669b20ab7f25e173522ea0cfc30e92627d01a322e54de21aa94c48d343dbc1f0bf792f570b37f87916f4c59a7528b7dc973815140556ccd32d837ed7962edf3842bf842d4284fca438b2336dd559710956b7f68236bdf7d7bb02059823be781faddcf2a20f458ddb678c1c125a9b0098570b5282d671342329a9e4930222c423efdaa65e5772a5b555bbb5571c89ccc63d01caecb74322aebeee9fc6b18b35ab22794cc3c74fd8dc839ec42619fd6f9cb319f28dd6bcf74db667b21a4e38f66d309700444b5587bf941b7e749b63145cd599c1ea354cba848c0cbaf2c77044a384ef247b164e3d2d7476d5ab74dcacbf69fc1c5e8d02acf7013ffe2da35ad4a0391cf4c2e8ab0bdbcc874a881ce719ef3f75ebf1f1f427b65467073f86bdad8161d6062f3ba50b79f08531e95ebed7b33130393088d959954862af87897e5dbbfbe1147f449eb3919617c7179333bc7ce368fb6433fc8552db26e9f35c8001f8df40c0ba310f95def9a73497964687156952f0716652adf9f46c38ab2eb36621fab6fb57dfb41c47de7474cacd4693a8c12737f336634e2ff491ff6bdccf99eb4d13ea8ed4354256d805b9054fd185de99a732efc3e4ea60d03ac8388500ba57f34a079f82c1b8a34161e6e07e0f7b7f36a8ee8f4b3f2f01c8f56809b651f7adeec7887c448faae45752534bf54099be75cce4f1d7d6816d9dc291cebc14b806bf3c1430b0bf6bacd0316fcde3d7d0bc746480588dfd617f15d58ec4b0b0124efe3925b105320619552747eb6ca53fe5d36b4122d80dca54fe8c8dd356d76e7f844a200727273c1968d49fef8e1477776ef7cda4f6073dcb0ec257912ba38e231803147a89146fd8817bf6ad02eee27efa8362a50813293f2a417a78725836478e98a9fba85ecbc3edba07add4e68ffe5a10cb01adab8849ca5d4b0bf9ac7fd66845547a78320887e127fed4c54ed9f0a24495204ccc0cfe58dd9ddcc3c8f133ba8b49413550bf51eced4d23d38598126246ccde10b7e4e14d25f4e90342326b59dc064502f0f584bd7e4c8492831834afb9b340bf663d69d3f71904d62aebbb37c290ab40afb3050b61e8aacc2bb16c20b2caeaeda80d2114834bbe06d945015475a8ccad14bcf59a94492927c40de7e8bf245afec0b693260f1a0e5cb148c3d5f8e65771153b3ecbd33702b00297d77ba0a8ad0ad41e3d586602434a63b4b09463b9b55001e30952584a73794593cd9903f4066eb0cbc43f88bb7c6baf70435500b39e4b138d1ac45c2ad8364a0c6778c7c831d502f414269d41902c32a18bdf6e8f109f613c1f619174de3eb529623e64a98876fd85e4aecb1b5a55c646b93062ffc730e1aa06a58d7434234bdd5a85abfcb093e34ab4be25997cd63aa793c85e9dac932cfec256c2f0c12f96ebf39391d03da9511fe915bce929542c6e65489947887502bc156e8cfc68d65c09846369b253902b108440d4996dab8682a4b727514caba64c4e83fb63c9cd81597ba94204f40bdc1684ea029dff7b1e72fbaf713c68e9a8a40ee5795a0f4ef570be90b9e9bd2ef383d9015ca2f317680956148fd1586c7581ef6ec833e51b1b20291515bc46b2b180f8dfe01dfb248b939106beb5fa3875ca20eb86732722aa9444af97238bab16688ba6522f81b0a4c990b298cff059111b5ce8c68dd0a4a4aa1082ac138617dd2c4be1b8239f82ccd8416653de339ce5d6065fa4791d493745413c930807da5920d5472005e78c5a926bf22fa6a50f5fa6376ec5d26d62653801a4945f4a581b76c91fa1cde96eae6c5439e80b4870b2d801111391af772d1d10aadeba9354820014f20c68c030c78fc410adaae8a44f7dfd718ef76df34398e5ea8405610390879a7478e4670c00edb258b08807e40061d30237873082945321b463b1fcce26117705ff7e31393ab0a78121652a6de2f88f3aea076e1fc8d52909de7abe017a979572ba873abf601d749ebee16a5b6ea71b8c280a44c031737c512b18b4baef08f0300595d0d96b6e693c95ef94a1e755335fde54e083477c44315a45d9c4784f74c2eb0ad83458553f743b626487fbe77fa42c2c9ce4169971455a594de368aa168e1a20e4cdb97b9b42ef31531a6774e53272f83b3198c20b32bb617ba80373cdd5b056ffa004f0187034a4ffab953ad85b94800c9e9711abb8e2708146f59686cc2c6ee676bee64e73a9a5ea75ff88a6a167408c0b0e21156f0d5e3ecbee043b220a0acea89ad761438730988e0253dd5c643a14fef8f3804428ee325803ea7690ec60db5cf0fa9bbafceb27fe8a3c80040267548d43bf14113375f5557d663963d458b2f5a16c8c515a2a26644dc81b90d68455bc18dbc7b6a3b2ed4771f3921e29278663322d22ed8d94025c5ffdee6a8b14e4c5492aff2325531d8724c0568f02d26c488d9e90d402b3b24f4567bd3df6d025f454826a543082141608f3c660c227502878a8a030fb5591c2ae89959c0242438f61fd2a32657bdd6a82f31a3862f3a9e0fa2974a302abba8cc4605c936380faa34b1573c584babcdcd8e11c907f3303d877d977ff96150d671cfcf62b454ab71ebcff23e17bb07f4495d5d0c6a74ecce69e79144415b36d9d71267201f5786d33e19c7bf5a3d189b305cb737f294da8c36b4c2c694f715ee43004fb8a229cd8097a01a479758f40aafe9f2f8c6dc2981b1d07cfc1bc1b1944d27bd7c75b424bf68e86571056bc2eb6ece73d93753d9055a9cb34783faa96eea845f6caa65aaa1bb754e1869f8962286ed703ede8bc4e1e76f1ab20884fc0ff80b3fa409771f1341db7a76e4ec1b42de7dbd978c430908511c82029359bdd83bd247fee6a06e7829cf4f9cc48af1081cb9eb99b32d21caefecb39c022fa1cc4bfb653f98d4277f05d3f5bcee9dc7033db3922479e3bb453f88a89ae27e842b7c3578548bc1c181972e91ed258e4f97511328a114c2a17719957411213cfcbe7b87b0843bfe37f65a8aaaccfa5905c71113ffb2357f4187124f90daf9aa27d1eeedd26070035ec40d417040fd9d1b7537bb7d128f9081296f0c8744e1e5f054032a44196cdf9cea63d3276dd1ffbe607480e9de1d229eae6cdefcade41ef4b3009ca44a1cd893c88492a0f5c6672029ad81fd5e32b81b69a15520fde71c687ed65efdb05553d4991de8a02de967da53e66ba17cf98496692a1aa080299742602f5026caffc1aeda861d97fc3dc23e34f775042a915f16a1aafbfe287604a0b707eb90844b0169865d9fdee5e1340824184164655cbf98b058fed135d829c2bb59a99761917c33008d563deba303cff4baa89b748700d4590c113191927eaa7a7ffa7cf8d548fba796ec48aa78ef1394edbd3b36a3668c47a8e1c4dae7a601d20d16dd35fa45297648697bf9169567f55ff0b6ea63a030e64194c169b25e738d44f72e31773b126cf9613aaefff9ea39a16036ae9e499df6d2051778b918d98582ebb0f92593f5ccc8348e56eb0caa251fb7c4a6eef764da7d576945ecdc457339fd4aaf780038b309cbacc846eb271868d947b49c7ee586799ae4cbffaafc277b93d827212e440f519f8ba5fbfc72b13ea3395e1ed8d6f96739651be6d73118b946e1ae803c00c216e91458110c3737a4781a7f001fe350e57841e76aed34003f47f57ddc7bc2da9bc375c611f36c9129074123b4aa84941d0f68d14550ebfbd6f2a77224f588fe184bbe062c8386b7245b9420160703eb844a884aca2aab6f9052fcc40acae5921b9e9eb378aea93f959f4b4719a58a590ee1045e77aab0d42ac85532ac2521d814d381e6e801e5d4a07da832f418a22c026d826bebeca865c161e4629cc64fe8817cc201c1cedffaa9729df668672b181c590f87f112ee8912f22844aa3dbb722bfda866d2f8518d2ea71fda300929a7cf91008ebe473f2a42acf2b4842969496990f8b6cbae0b70b86561f549bfdcb0de4e4d7fb4e0bf834dd2ed5636b2916b9c183f2b7306f0deaab6a51456aba5a22747d6fb74898b0d9692386fc2e4b9013995963b4f45311a6bd0b4ff0272e4fce53c539f5d64639bf14fd240e553750ab1b50b96938395d370db2d48d13b9723ea1674240add4a8ea2c4efef218f8d617b5330797ec25ec3b104b85973937b3e80fcc476ed3b6a02d93d00dcc34ca617bf4cdca762379f7b8cc64cdc43807e3de956751465827c65cf1d668d8bffc039185b080b5aff819622fc9887d9290de8da5657b9b7c3a0dd0176a8883b81ed73718852262d69083e89c9dc8be4db23fd06ed576ab5568596844cd8870542762308fa3000789880e08a795b80fe22103b5e7119b1cf95339e5c695e97994f7c94e56ca5287c6f15df3b1279cc4dab9d1eb3055e1c07c88a2adbe5562d149f6ebf7dc4002dd69b91f3e6de56c4eea87b229c1e5185d64b6cbcbe3407e62d5672369c70e24f9bd015923f2aade119bc5cec4416c0e27dc49c4f2a5289ad84d20dbe1cfe7e85303204ff06bd33ffff14d062d9bd4aab56b2c28e1bb67294c5367e1701f6b2e67a59cc931a1a50b57747e0c327182e22084e33766e344861c1cc7e9689975c91a7ec3990c1534d8c848fdb448390a5d226066f21e91fb0a342bebb19877919c05850f3367c4cbdc23dc5eafc5485e6c9d0ee4d3306df0c88b116a348d098d44f6cab2b26043c8fdcafb76e88809b661bfd210e42427eebf8474e1aa1b81082db70af8fdd10fa6fc6fec45788fdf4e4a64b6ae828c16357240a091db90c6b6c31146945a8d1ebcf96264e372e407e42be6515c5e4a0d982eafe47f1d4c394d51d23e1bc151210394195fa074084e9e0a7205b5363651c70e4a3bb17f8f4734243f97ea33705cf76d0592a8424f5e3f9e31ecb4f9b814f2cf6d4a8261a086ff889e097dd2e6ed0a58507aa3353435596104adde5bde2ec5b3618ec42928822beb1a59e21a4418b7d29ad58f058acfdcb577ef27aec55a1326f1c01e15697c41a249474ca102691792436cdfd3c064beff70bc263dc638d29810ee3ddaa49312d59017059ca0953ab40092f449c9f55bd39c1e900ea437aba0bcc6ff086d39896b11b7eb7313eeaf6c5115536f4f80fca3aaf118c9143c9829b58ec37d911402b020f439961f29dff4bff3e06249663c62187a9ffc9f5ba62d4e89c614028807ecb56e5f6505dfc6a811d1e834055dd46a4b25770188e70a7c281128efcbd2a026d06362a9e75eee8ce8030d9dafe529f5a0c73a98f2c6bec9b6fb7e9f1e8f601d08eb0bf3679e8141b9", 0x1000, 0x1}, {&(0x7f0000002740)="ec55d448b6266b6d2db79e0cfc425a521f0606014e880dd74f275d896a949152c8641ed4c06cb38f20bbb170d571b72fb9983e171a999913183ec74bb03e26f70d76702d5d6a9263e6aa4d50f32c9326a40c8557df6b43290c8efb70", 0x5c, 0x9}, {&(0x7f00000027c0)="6b7fe41b57d1c77b5ce33fbf755260b79d24d81073e9b97a47427796abcb78aa0a040ef8e4983dc6ebe6e01d0229b9257f8de018bc05143d89c5ef819fbe05c86a0410f26a062a276e6bd6aa332c", 0x4e, 0x1}], 0x102008, &(0x7f0000002900)={[{}, {@codepage={'codepage', 0x3d, 'cp863'}}, {@dir_umask={'dir_umask', 0x3d, 0x6}}], [{@appraise}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'lo\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ip6erspan0\x00'}}, {@obj_user={'obj_user', 0x3d, '-{!!'}}]}) 12:59:19 executing program 0: syz_mount_image$hfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002840)=[{0x0, 0x0, 0x100000001}], 0x0, 0x0) [ 702.626952][T21664] loop3: detected capacity change from 0 to 264192 [ 702.706941][T21676] loop0: detected capacity change from 0 to 264192 [ 702.723823][T21664] loop3: detected capacity change from 0 to 264192 12:59:19 executing program 4: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 12:59:19 executing program 3: syz_usb_connect(0x0, 0x661, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xde, 0xf6, 0xf3, 0x20, 0xdb0, 0x3820, 0x80ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64f, 0x3, 0x3, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x5, 0xef, 0xeb, 0xbc, 0x8d, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "fe3956b74f1b"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8b7a, 0x40, 0xf8}, [@mdlm_detail={0x51, 0x24, 0x13, 0x20, "7fbec9c727b85e49338a526c76b89c48bb86294a5a268d06e7f088c15c47f2f274414fb984884ad2d5a02194add3b74b1f0a7a70c1c3fc08ae58745b46a2ab3867ea35b7a67f4970dc461a993a"}, @acm={0x4}]}], [{{0x9, 0x5, 0x80, 0x0, 0x200, 0xfc, 0x86, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xff, 0x5, 0x4d, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x5}, @generic={0x1d, 0xc, "28b37962664fc0311ddf26e3bd93f342b05f76746209f729f63dc1"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x9, 0x1, 0x7f, [@generic={0x2d, 0x3, "6d572582a54122b87be7f1a17cf6d419d1e67a63179520ea8ac9f999023ef4e338198e793ab766ed62247b"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x1, 0x0, 0x3f, [@generic={0xae, 0xd, "c4b6bba03ced7ded7e4e0801083ca093d132c7cacee1885c5b5f8a880376fdbacfa52cd3638027031fb8eced37393ba814b3a066d0345e3567a41755dfc04d604d463d9e62f8cbb11a40aedb468d0ed51f59e82d52cd114f1258a4ed4a8b75b94e121ca5c27ecb2119b84e949f0cb7be132d94fb7a50f9a68f9b7ecdd4121816f8af34c729eab8f59d60f525f5cc11968710588eaf2aa41a0ee39fca1b04b840136909bbfbcd19c3b011129c"}, @generic={0x92, 0x1, "88f277e8b1c0ee3837bec2563ae32543a07e4514114ffa21e05d48a3e8122c2354ab6b9cd46249006302c013f02b6317b6c7ed1fa2e70efb6f29e38a2b878772607694ff02621199a58fe70ba926283100bdff82d430717568ba9920a5359302bad6273ce853364b9e3c84dbef5e7a36e5d7910a3b58084a89686962cf42f5a5ecd88b72fbdad3918ff67e4d845de2e4"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x77, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x8}]}}]}}, {{0x9, 0x4, 0xbe, 0xfb, 0x6, 0xff, 0x1, 0x13, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x3, 0x2, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0x0, 0x7fff, 0x9, 0xff}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x0, 0x80, 'D'}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x5, 0x5, [0xa, 0x3, 0x5, 0x6, 0x0], 0x81}]}], [{{0x9, 0x5, 0x2, 0x7, 0x3ff, 0x3f, 0xbc, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0xfffb}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x0, 0x20, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x8, 0x97, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x142, 0x81, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x1, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x8}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xf3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x37, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x7, 0x4, 0x6, [@generic={0x35, 0x3, "1dde678825c86a21df79f10b41d4f1a1bba2a932e3a4f147031cdef6ac4663b0777eea87d52ccd8a16a9f4d8c00fb4a0051c63"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}]}}]}}, {{0x9, 0x4, 0xe3, 0x40, 0x6, 0x10, 0xe0, 0x27, 0x1, [], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x2, 0x5, 0x0, [@generic={0x91, 0x6, "1a1691117fc173374d295cdd89b063fc8fd2fc83d0be52eaa0cf3553e5d43c373b6f7d40060aea0fe6f3f6a86c4bb36606cb2fee7dc36471b0a72bd3a8a9f779c8b14067de00b2d4b5fc6de0b9fface83055caf57dc3629980386ffcb0d1326a650d1780de1939ee90f14a3c4b9eb27ac25ac2f6118d00587d8be337395fc206293819ae0d4fafae95ef32bb8c9b4e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x95}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x0, 0x27, 0x1, [@generic={0xae, 0xb, "affe82ee6ab5a4680ee668e919e62aa28f384ffc1a1875095e24f23775a99a3f09d6efd2cef1f2986dec19f851da5e6a9c31717631553f56deeccc14040b7dc6187f6d340fdc46932144b576ec93f3de0ae4c6bce23eed8b582b6d2d788880c42eb07c7076e067e2679a827bcfb92754edaa6db8f806efe236e6c45e028c0a24ccc35fcfd9833c4d90c4d4e75f5483e720063e945377be14baca219ac9573d452f86e3d8a676f522fba55860"}, @generic={0x43, 0x23, "6b9571698d592f411527ff8f8551c0dd53adb041f2fbac44a6906660af971bea58e47fa3f9ad24a42a3bf4345b0ce9c9a6183b4fce8850db7802fe077b3c51fa8c"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x3f, 0xff, 0x0, [@generic={0x24, 0x4, "f55aba1c434bdaf82efebc66506241d02e22f0feef8055d959a31dc02384960ed112"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xda, 0x6}, @generic={0xe1, 0x30, "3df28213615bfe7c9832cd864b421cfca5bf7cee456496f38c7050abeaf0154dcc51370b3588b06170d06a3a23257441e4781c0c3b988d902b04c21a1415f33529059067463fbb6ce19a02dd4d37c560e750bea0f2bd52d2382f4939a605ee171ff2ad81f9a3fd471aae44031baeae7520bc0fbd2563aaf1e52d3f542fb42fbc2de8c13e6c6a4d3b521aeeccbce73574439ab0a19512dd6733e49ac3cf930f5455223a11f6e59537bf521a554fd5c4265b0af9b0b9b1f1653dd194027ae727807400718d8d4d43fcb026e3ce42905eac03d1113f4c3008b98bb6783f3773f6"}]}}, {{0x9, 0x5, 0x7, 0x1d, 0x3ff, 0x1, 0x80, 0x8, [@generic={0x4d, 0x5, "d4edc0c69bae09a9ffdc8a98fae971d381f9c22aaf72f9a45f873183369182c8249e2866bb45378d4c7811b1cd6c52a69594bc5dbc41a87539fb7bf85ad0ab8160206e93a9174f52fbe33c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0xec7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x0, 0x0, 0x6, [@generic={0x2, 0x22}]}}]}}]}}]}}, 0x0) 12:59:20 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xbd8) [ 702.821384][T21676] loop0: detected capacity change from 0 to 264192 12:59:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:20 executing program 0: syz_open_dev$sg(&(0x7f0000000940), 0xa5, 0x0) 12:59:20 executing program 2: syz_mount_image$hfs(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002900)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'ip6erspan0\x00'}}]}) 12:59:20 executing program 0: add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='Z', 0x20000181, 0x0) 12:59:20 executing program 4: syz_mount_image$hfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002840)=[{&(0x7f0000001600)="cb", 0x1}, {&(0x7f0000002740)="ec", 0x1}], 0x0, 0x0) 12:59:20 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="e1", 0x1}, {&(0x7f0000000180)="1b", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40c0800) 12:59:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000055c0)={0xa, 0x4e24, 0x0, @mcast1, 0x1}, 0x1c) 12:59:20 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="e1", 0x1}, {&(0x7f0000000180)="1b", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000009c0)=[{0x1010, 0x0, 0x0, "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"}, {0x60, 0x0, 0x0, "97e0ef576f5a039e9b0a3f6d6d99636d74a1a87ea416412f62edf97afd3d61970f0bbbd94d534c5113ce65e1947ff5c7394bfc82f544da00f7abaf9704d802a8fbb313a2403469748f"}, {0x100, 0x0, 0x0, "6bb20df424be9e6bb2b5923670a24442a83c453627573bd95ca656cd54ea603b7dca0d25d753a9e5cdd3e556e95eda94762a85dd77093b56f564eb834b2de46bd1339675f20a106f63670f3aca48583c4a8e3da48019065d9f17cca904321634dd12aa4ed7578e45a48ec85366e3b15f9c849f6a13cf08bbdf81bc5722e85066f147ac60aea100829741c6f89abc129b9cd06373494a16ebaa71c36b5c9d1beb5cbb3d054f4a1f4130765066e229fa9b9e0cae493214aef02bb65f68e266a74eaf7259303b764fd4792ece2ea2c4fe7e1e3c42fa2a5f7392c376d8322d7d4b0e5941f7ddaf762d2dbf"}, {0xc8, 0x0, 0x0, "2a94f871e9081959f2f3135af53608f3684d585a722e35651db39f17900b4800bf1602ab57c1052abcc38f0d3fc3e8d586275bffe4d4b26eb12dde8da94c065192e3889f10cd37962257b721d31263ca43d872e57c436bc3347a9024d78afa63ecc4b3dccc3f574772db1429ec783462b77f9986de2708ae389b2775f97775c0e9fa9502ef52c62b8c10f6994753ef272804341160c7a2a89057f90134552ce0701588d5abea0917500d5f22441d68054c"}, {0xdd0, 0x0, 0x0, "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"}], 0x2008}, 0x40c0800) 12:59:20 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) [ 703.210040][ T8410] usb 4-1: new high-speed USB device number 8 using dummy_hcd 12:59:20 executing program 2: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000b40)) [ 703.469907][ T8410] usb 4-1: Using ep0 maxpacket: 32 [ 703.600740][ T8410] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 703.609478][ T8410] usb 4-1: config 3 has an invalid interface number: 190 but max is 2 [ 703.619742][ T8410] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 703.631196][ T8410] usb 4-1: config 3 has 2 interfaces, different from the descriptor's value: 3 [ 703.641824][ T8410] usb 4-1: config 3 has no interface number 1 [ 703.648343][ T8410] usb 4-1: config 3 interface 0 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 703.661539][ T8410] usb 4-1: config 3 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 703.673811][ T8410] usb 4-1: config 3 interface 0 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 703.686330][ T8410] usb 4-1: config 3 interface 0 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 703.698526][ T8410] usb 4-1: config 3 interface 190 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 703.713374][ T8410] usb 4-1: config 3 interface 0 has no altsetting 0 [ 703.721403][ T8410] usb 4-1: config 3 interface 190 has no altsetting 0 [ 703.890536][ T8410] usb 4-1: New USB device found, idVendor=0db0, idProduct=3820, bcdDevice=80.ec [ 703.899711][ T8410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.909664][ T8410] usb 4-1: Product: syz [ 703.915045][ T8410] usb 4-1: Manufacturer: syz [ 703.921028][ T8410] usb 4-1: SerialNumber: syz 12:59:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) 12:59:21 executing program 0: syz_mount_image$hfs(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002900)) 12:59:21 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x40) 12:59:21 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'mangle\x00'}, &(0x7f00000000c0)=0x54) 12:59:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:21 executing program 2: syz_mount_image$hfs(0x0, &(0x7f00000014c0)='./file0\x00', 0x0, 0x6, &(0x7f0000002840)=[{&(0x7f0000001500)="2fd044f7b75460f910d4c9319e910fccbd18039a7fa37053028aded7c92e62b6adcb71ac49f1e179a7ecc4de5b38a866c027a37fb1c3cd0772f5e6d2821dccf551c17b843a8a0c6ff00cf9ec7dc000098ee41294752c818cedb6756bd6e5069987b60075bb8bb92a834a170cd767bb2086e7b8895abe2eb93a2c5306d85c185478a1d9498fbca664ee0de8bc5e82a645d720abadca488a0769d4d8848f4a2d74e2919b624f443cfbeb15019b13ffeda8ff34a01ab919c3c90d93334b8190b0a414cd5b1ac0eb612203189adf21dc96adcab70f2e2f", 0xd5, 0x100000001}, {&(0x7f0000001600)="cb0b8e688798630a11171cb8648bedc42cbdcced35acded87e0df76d939d35bcf084469cefe4aedba2b40d9306b9b86755877b55bdd9fe74844345dbb951d86ae18c4da3b7d67acd39db893341d16526e7124ac3ccf6dce6b2f6b93335af88ab95c9999b83cc17b3b614526ef58170c38ccc48a5f3d1dbe6f5e53724975c28f43192a3ec56469870ac4df90f58bdcedb515858efffb233041c56a28dbecc03285b3027a1b19b23fcebe8c440382dfdf0e883f56063ad50dde700e29ec17b42acf6cefe8a10a96738fac888c85361c4cc0169fa3332faff797bd2827b1c506e53d8ff045efcd8bff2babea8a51b4e67d9eb", 0xf1, 0x9}, {&(0x7f0000001700)="18e7f1bcaadea7456b95e8ecc8a965b3ef8585a5437a191b1fe78c178303b7d171ab32945c4f2d50106b3a", 0x2b, 0xfffffffffffffe00}, {&(0x7f0000001740)="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", 0xfdf, 0x1}, {&(0x7f0000002740)="ec55d448b6266b6d2db79e0cfc425a521f0606014e880dd74f275d896a949152c8641ed4c06cb38f20bbb170d571b72fb9983e171a999913183ec74bb03e26f70d76702d5d6a9263e6aa4d50f32c9326a40c8557df6b43290c8efb70", 0x5c, 0x9}, {&(0x7f00000027c0)="6b7fe41b57d1c77b5ce33fbf755260b79d24d81073e9b97a47427796abcb78aa0a040ef8e4983dc6ebe6e01d0229b9257f8de018bc05143d89c5ef819fbe05c86a0410f26a062a276e6bd6aa33", 0x4d}], 0x102008, &(0x7f0000002900)={[{}, {@codepage={'codepage', 0x3d, 'cp863'}}, {@dir_umask={'dir_umask', 0x3d, 0x6}}], [{@appraise}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'lo\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ip6erspan0\x00'}}, {@obj_user={'obj_user', 0x3d, '-{!!'}}]}) 12:59:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180016000300000000000020ffffffff85000000", @ANYRES32, @ANYBLOB="000000000600000064"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 704.260950][T21751] hfs: can't find a HFS filesystem on dev loop0 [ 704.293478][ T8410] usb 4-1: USB disconnect, device number 8 [ 704.334723][T21751] hfs: can't find a HFS filesystem on dev loop0 12:59:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:59:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x5}, 0x40) 12:59:21 executing program 3: socket(0x18, 0x0, 0xffffffc1) 12:59:21 executing program 5: perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:59:21 executing program 4: syz_mount_image$hfs(0x0, &(0x7f00000014c0)='./file0\x00', 0x0, 0x6, &(0x7f0000002840)=[{&(0x7f0000001500)="2fd044f7b75460f910d4c9319e910fccbd18039a7fa37053028aded7c92e62b6adcb71ac49f1e179a7ecc4de5b38a866c027a37fb1c3cd0772f5e6d2821dccf551c17b843a8a0c6ff00cf9ec7dc000098ee41294752c818cedb6756bd6e5069987b60075bb8bb92a834a170cd767bb2086e7b8895abe2eb93a2c5306d85c185478a1d9498fbca664ee0de8bc5e82a645d720abadca488a0769d4d8848f4a2d74", 0xa0, 0x100000001}, {&(0x7f0000001600)="cb0b8e688798630a11171cb8648bedc42cbdcced35acded87e0df76d939d35bcf084469cefe4aedba2b40d9306b9b86755877b55bdd9fe74844345dbb951d86ae18c4da3b7d67acd39db893341d16526e7124ac3ccf6dce6b2f6b93335af88ab95c9999b83cc17b3b614526ef58170c38ccc48a5f3d1dbe6f5e53724975c28f43192a3ec56469870ac4df90f58bdcedb515858efffb233041c56a28dbecc03285b3027a1b19b23fcebe8c440382dfdf0e883f56063ad50dde700e29ec17b42acf6cefe8a10a96738fac888c85361c4cc0169fa3332faff797bd2827b1c506e53d8ff045efcd8bff2babea8a51b4e67d9eb", 0xf1, 0x9}, {&(0x7f0000001700)="18e7f1bcaadea7456b95e8ecc8a965b3ef8585a5437a191b1fe78c178303b7d171ab32945c4f2d50106b3a", 0x2b, 0xfffffffffffffe00}, {&(0x7f0000001740)="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", 0x1000, 0x1}, {&(0x7f0000002740)="ec55d448b6266b6d2db79e0cfc425a521f0606014e880dd74f275d896a949152c8641ed4c06cb38f20bbb170d571b72fb9983e171a999913183ec74bb03e26f70d76702d5d6a9263e6aa4d50f32c9326a40c8557df6b43290c8efb70", 0x5c, 0x9}, {&(0x7f00000027c0)="6b7fe41b57d1c77b5ce33fbf755260b79d24d81073e9b97a47427796abcb78aa0a040ef8e4983dc6ebe6e01d0229b9257f8de018bc05143d89c5ef819fbe05c86a0410f26a062a276e6bd6aa33", 0x4d, 0x1}], 0x102008, &(0x7f0000002900)={[{}, {@codepage={'codepage', 0x3d, 'cp863'}}, {@dir_umask={'dir_umask', 0x3d, 0x6}}], [{@appraise}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'lo\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ip6erspan0\x00'}}, {@obj_user={'obj_user', 0x3d, '-{!!'}}]}) 12:59:21 executing program 0: socketpair(0x1d, 0x0, 0xf3e, &(0x7f0000000200)) 12:59:21 executing program 3: socketpair(0x10, 0x2, 0x1, &(0x7f0000000040)) 12:59:21 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='Z', 0x1, r0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, r1) 12:59:21 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x6, r1, 0x0) 12:59:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:22 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x40, 0x0) [ 704.812496][T21796] loop4: detected capacity change from 0 to 264192 12:59:22 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000040)) 12:59:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 12:59:22 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 12:59:22 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000000c0)) 12:59:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @private}}}, 0xa0) [ 704.990520][T21796] loop4: detected capacity change from 0 to 264192 12:59:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0xf}, 0x14}}, 0x0) 12:59:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="af", 0x1, r0) keyctl$unlink(0x9, r1, r0) 12:59:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, @private2, @empty}}) 12:59:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x819}, 0x0) 12:59:22 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100), 0x4) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r2 = accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000) r3 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000200), 0x80000) accept$phonet_pipe(r3, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @can={0x1d, 0x0}, @in={0x2, 0x4e24, @local}, @qipcrtr={0x2a, 0x3, 0x3fff}, 0x5, 0x0, 0x0, 0x0, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x7, 0x3, 0x3}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff, 0xfffc, 0x8dd, 0x680, 0x7, 0x400200, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x1e4, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x1c8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xd3, 0x0, 0x96, 0x5}, {0x1, 0x6, 0x0, 0x1}, {0x4, 0x5, 0x7, 0x3ff}, {0x1, 0x7f, 0x6, 0x8}, {0xff80, 0x7, 0x0, 0x8}, {0x4, 0x8, 0x4, 0x4}, {0x37d0, 0x2, 0x6, 0x401}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000a00)={@initdev, @broadcast, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xa, &(0x7f0000000880)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb87}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000900)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000940)=""/183, 0x41000, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x10, 0x3, 0x80000001}, 0x10}, 0x78) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) accept4$phonet_pipe(r0, &(0x7f0000000b80), &(0x7f0000000bc0)=0x10, 0x0) 12:59:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:22 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001c00), 0xf0040, 0x0) 12:59:22 executing program 5: add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)='keyring\x00', 0x0) 12:59:22 executing program 2: keyctl$search(0x2, 0x0, 0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0) 12:59:22 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x200200, 0x0) 12:59:22 executing program 0: syz_open_dev$vim2m(&(0x7f00000003c0), 0x0, 0x2) 12:59:22 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x1d, r0, 0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0) 12:59:22 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:59:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x1, &(0x7f0000000880)=@raw=[@func], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:59:22 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 12:59:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000840)={&(0x7f0000000400), 0xc, &(0x7f0000000800)={0x0}}, 0x0) 12:59:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4040041) 12:59:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x2, 0x7, 0x101}, 0x14}}, 0x0) 12:59:23 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) 12:59:23 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x400, 0x12b) 12:59:23 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0xc00, 0x1aa) 12:59:23 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x40004) 12:59:23 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 12:59:23 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) getdents(r0, 0x0, 0x0) 12:59:23 executing program 0: shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) 12:59:23 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x101840, 0x0) 12:59:23 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/class/power_supply', 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 12:59:23 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x103) lremovexattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)=@random={'security.', '-^-\x00'}) 12:59:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:23 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_rm_watch(r0, r1) 12:59:23 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) futimesat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}) 12:59:23 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000100)={0x14}, 0xffffffffffffff05) 12:59:23 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000480)='.log\x00', 0x42841, 0x8c) 12:59:23 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 12:59:23 executing program 4: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 12:59:23 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0) 12:59:23 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000100)) 12:59:23 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 12:59:23 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x0, 0x0) 12:59:23 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 12:59:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:24 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 12:59:24 executing program 0: get_mempolicy(0x0, &(0x7f00000001c0), 0x7, &(0x7f0000ffe000/0x2000)=nil, 0x2) 12:59:24 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') 12:59:24 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, &(0x7f0000000040), 0x0) 12:59:24 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) 12:59:24 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x80240, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x204840, 0x28) 12:59:24 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x240, 0x8) 12:59:24 executing program 0: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x3) 12:59:24 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 12:59:24 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 12:59:24 executing program 2: shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) 12:59:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:24 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80240, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) 12:59:24 executing program 3: pselect6(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f0000000300)={0x0}) 12:59:24 executing program 5: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0) 12:59:24 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000005080)='/sys/devices/system', 0x8000, 0x111) 12:59:24 executing program 4: socket$unix(0x1, 0x1, 0x0) select(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x1}, 0x0, 0x0) 12:59:24 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000900)='./file0\x00', 0x105100, 0x0) 12:59:24 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 12:59:24 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 12:59:24 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 12:59:24 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) setpriority(0x1, r1, 0x0) 12:59:24 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 12:59:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:25 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x2, 0x0) 12:59:25 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4) 12:59:25 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) open$dir(&(0x7f0000000000)='./file0\x00', 0x2c4100, 0x0) 12:59:25 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000640), 0x4) 12:59:25 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 12:59:25 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x0) 12:59:25 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 12:59:25 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80240, 0x0) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/229, 0xe5) 12:59:25 executing program 0: faccessat(0xffffffffffffffff, 0x0, 0x40fadc015e5d19e1) 12:59:25 executing program 4: lremovexattr(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)=@known='security.apparmor\x00') 12:59:25 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 12:59:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:25 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00') 12:59:25 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r0, 0x0, 0x0) 12:59:25 executing program 5: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 12:59:25 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) 12:59:25 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 12:59:25 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x66) 12:59:25 executing program 4: name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 12:59:25 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), 0x4) 12:59:25 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20000200) 12:59:25 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) renameat2(r1, &(0x7f0000000180)='.\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) 12:59:26 executing program 0: open$dir(&(0x7f0000000140)='./file0\x00', 0x80640, 0x0) 12:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:26 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 12:59:26 executing program 4: renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 12:59:26 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x41, 0x10) 12:59:26 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000017c0), &(0x7f0000005a80)=0x8) 12:59:26 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 12:59:26 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 12:59:26 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003ec0)={0x0, 0x989680}) 12:59:26 executing program 3: pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)={0x0}) 12:59:26 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x80240, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'U+'}, 0x16, 0x1) 12:59:26 executing program 4: faccessat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 12:59:26 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x240, 0x0) 12:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:26 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) execveat(r0, &(0x7f0000000bc0)='./file0\x00', 0x0, 0x0, 0x0) 12:59:26 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, &(0x7f0000000040)) 12:59:26 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000201) 12:59:26 executing program 4: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=ANY=[]) 12:59:26 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) 12:59:26 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x8f) 12:59:26 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000002040)='/sys/devices/system', 0x2000, 0x107) 12:59:26 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e) 12:59:26 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, 0x0) 12:59:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 12:59:27 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) open$dir(&(0x7f0000000000)='./file0\x00', 0x80880, 0x40) 12:59:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:27 executing program 5: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 12:59:27 executing program 3: getresuid(0x0, 0x0, 0xfffffffffffffffe) 12:59:27 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) 12:59:27 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) futimesat(r0, 0x0, 0x0) 12:59:27 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x103) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 12:59:27 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 12:59:27 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0x0, 0x0) sendmsg(r0, 0x0, 0x0) 12:59:27 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 12:59:27 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0xc0400) 12:59:27 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3a0cff4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) 12:59:27 executing program 5: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 12:59:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:27 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 12:59:27 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 12:59:27 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 12:59:27 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x1, 0x0) 12:59:27 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 12:59:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x8, r2}) 12:59:27 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) open$dir(&(0x7f0000000000)='./file0\x00', 0x221000, 0x100) 12:59:28 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/class/power_supply', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 12:59:28 executing program 2: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80240, 0x0) symlinkat(&(0x7f00000001c0)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00') 12:59:28 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x80240, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 12:59:28 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x108) 12:59:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:28 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 12:59:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newrule={0x30, 0x11, 0x400, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_DST={0x14, 0x1, @remote}]}, 0x30}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000026c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x0, 0x0, 0x48, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast1, 0x20, 0x7, 0x7, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x29, 0x0, 0xb5, 0x2, 0x29, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, 0x8000, 0x20, 0x3, 0x2}}) 12:59:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f0000000800)={'syztnl0\x00', 0x0}) 12:59:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) 12:59:28 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 12:59:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8992, &(0x7f0000000140)={'tunl0\x00', 0x0}) 12:59:28 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 12:59:28 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c000, 0x0) 12:59:28 executing program 0: syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[], [{@measure}]}) 12:59:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x40) 12:59:28 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c00)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, &(0x7f0000000300)) 12:59:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x0, 0x0, 0xfffffffffffffffd) 12:59:28 executing program 2: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x2, &(0x7f00000018c0)=[{&(0x7f0000000740)="e0", 0x1}, {&(0x7f00000007c0)="78dfb46a890cef37d4a0e9eddc9cd6438a16aee880aa60476bad866101875db41201a7c0a0cf10b828287cfbf7613010209950f92d38f8648b173349d4ed2b82319c2f2aa940e95792d9bb831a0f921fc7b29a601a5e0db6057a103ff51054fc2cd89b0661eead1952a5d61f6e5e166d8b01f3d008fabb", 0x77, 0x2}], 0x0, 0x0) 12:59:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8915, &(0x7f0000000800)={'syztnl0\x00', 0x0}) 12:59:28 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$XDP_RX_RING(r0, 0x29, 0x5, 0x0, 0x8) 12:59:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$XDP_RX_RING(r0, 0x29, 0x35, 0x0, 0x8) 12:59:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$XDP_RX_RING(r0, 0x29, 0x2a, 0x0, 0x8) 12:59:29 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) 12:59:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 12:59:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$XDP_RX_RING(r0, 0x29, 0x17, 0x0, 0x3) 12:59:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 12:59:29 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@abs={0x0, 0x2}, 0x6e) 12:59:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x5caf, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x401, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000626bd7000bedbdf25880000000c009900040000000d0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000f863", @ANYRES32=r6, @ANYBLOB="00000000f3ffff000000000008000b00f7ff0000080001006a7066f334672f0004000200"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x420401, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c091) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x4, 0x80, 0xb0, 0x0, 0x4, 0x48264, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_config_ext={0xf36f, 0x9}, 0x2001, 0x9, 0x0, 0x2, 0xeb, 0x81, 0x81, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 12:59:29 executing program 3: r0 = socket(0xf, 0x3, 0x2) sendmsg$xdp(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000000c0)="eece83dd0e0060bf576deca6243dbe1d", 0x200000d0}], 0x1}, 0x0) 12:59:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a3, &(0x7f0000000000)={'batadv_slave_1\x00'}) 12:59:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x43, 0x0, &(0x7f00000001c0)) 12:59:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$XDP_RX_RING(r0, 0x29, 0x38, 0x0, 0x8) 12:59:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891f, &(0x7f0000000800)={'syztnl0\x00', 0x0}) 12:59:29 executing program 3: r0 = socket(0x2, 0x3, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@abs, 0x6e) 12:59:29 executing program 0: r0 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) [ 712.388353][T22238] ================================================================== [ 712.397003][T22238] BUG: KASAN: slab-out-of-bounds in add_del_if+0x13a/0x140 [ 712.404310][T22238] Read of size 8 at addr ffff88808ccaac88 by task syz-executor.2/22238 [ 712.412554][T22238] [ 712.414880][T22238] CPU: 0 PID: 22238 Comm: syz-executor.2 Not tainted 5.14.0-rc3-next-20210730-syzkaller #0 [ 712.424879][T22238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.434939][T22238] Call Trace: [ 712.438205][T22238] dump_stack_lvl+0xcd/0x134 [ 712.442845][T22238] print_address_description.constprop.0.cold+0x6c/0x309 [ 712.449882][T22238] ? add_del_if+0x13a/0x140 [ 712.454389][T22238] ? add_del_if+0x13a/0x140 [ 712.458880][T22238] kasan_report.cold+0x83/0xdf [ 712.463652][T22238] ? add_del_if+0x13a/0x140 [ 712.468146][T22238] add_del_if+0x13a/0x140 [ 712.472468][T22238] br_ioctl_stub+0x1c6/0x7f0 [ 712.477044][T22238] ? mutex_lock_io_nested+0x1160/0x1160 [ 712.482642][T22238] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 712.488274][T22238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.494506][T22238] ? full_name_hash+0xb5/0xf0 [ 712.499215][T22238] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 712.504830][T22238] br_ioctl_call+0x5e/0xa0 [ 712.509265][T22238] dev_ifsioc+0xc1f/0xf60 [ 712.513619][T22238] ? dev_load+0x79/0x200 [ 712.517867][T22238] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 712.523847][T22238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.530078][T22238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.536305][T22238] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 712.542315][T22238] dev_ioctl+0x1b9/0xee0 [ 712.546543][T22238] sock_do_ioctl+0x18b/0x210 [ 712.551119][T22238] ? put_user_ifreq+0x140/0x140 [ 712.555977][T22238] sock_ioctl+0x2f1/0x640 [ 712.560293][T22238] ? br_ioctl_call+0xa0/0xa0 [ 712.564868][T22238] ? __fget_files+0x23d/0x3e0 [ 712.569575][T22238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.575805][T22238] ? br_ioctl_call+0xa0/0xa0 [ 712.580384][T22238] __x64_sys_ioctl+0x193/0x200 [ 712.585138][T22238] do_syscall_64+0x35/0xb0 [ 712.589555][T22238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 712.595448][T22238] RIP: 0033:0x4665e9 [ 712.599331][T22238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 712.618934][T22238] RSP: 002b:00007efc893ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.627334][T22238] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 712.635322][T22238] RDX: 0000000020000000 RSI: 00000000000089a3 RDI: 0000000000000003 [ 712.643285][T22238] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 712.651250][T22238] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 712.659208][T22238] R13: 00007ffc3311886f R14: 00007efc893ec300 R15: 0000000000022000 [ 712.667189][T22238] [ 712.669496][T22238] Allocated by task 6583: [ 712.673802][T22238] kasan_save_stack+0x1b/0x40 [ 712.678530][T22238] __kasan_kmalloc+0x9b/0xd0 [ 712.683102][T22238] kvmalloc_node+0x61/0xf0 [ 712.687501][T22238] alloc_netdev_mqs+0x98/0xe80 [ 712.692248][T22238] rtnl_create_link+0x95a/0xb80 [ 712.697116][T22238] __rtnl_newlink+0xf7e/0x1760 [ 712.701860][T22238] rtnl_newlink+0x64/0xa0 [ 712.706172][T22238] rtnetlink_rcv_msg+0x413/0xb80 [ 712.711091][T22238] netlink_rcv_skb+0x153/0x420 [ 712.715880][T22238] netlink_unicast+0x533/0x7d0 [ 712.720635][T22238] netlink_sendmsg+0x86d/0xdb0 [ 712.725380][T22238] sock_sendmsg+0xcf/0x120 [ 712.729776][T22238] __sys_sendto+0x21c/0x320 [ 712.734262][T22238] __x64_sys_sendto+0xdd/0x1b0 [ 712.739009][T22238] do_syscall_64+0x35/0xb0 [ 712.743409][T22238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 712.749300][T22238] [ 712.751604][T22238] The buggy address belongs to the object at ffff88808ccaa000 [ 712.751604][T22238] which belongs to the cache kmalloc-cg-4k of size 4096 [ 712.765896][T22238] The buggy address is located 3208 bytes inside of [ 712.765896][T22238] 4096-byte region [ffff88808ccaa000, ffff88808ccab000) [ 712.779333][T22238] The buggy address belongs to the page: [ 712.784947][T22238] page:ffffea0002332a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8cca8 [ 712.795086][T22238] head:ffffea0002332a00 order:3 compound_mapcount:0 compound_pincount:0 [ 712.803400][T22238] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 712.811405][T22238] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801084c280 [ 712.819976][T22238] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 712.828538][T22238] page dumped because: kasan: bad access detected [ 712.834931][T22238] page_owner tracks the page as allocated [ 712.840629][T22238] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6607, ts 280729002919, free_ts 0 [ 712.860671][T22238] get_page_from_freelist+0xa72/0x2f80 [ 712.866152][T22238] __alloc_pages+0x1b2/0x500 [ 712.870727][T22238] alloc_pages+0x1a3/0x2d0 [ 712.875172][T22238] allocate_slab+0x32e/0x4b0 [ 712.879749][T22238] ___slab_alloc+0x4ba/0x820 [ 712.884321][T22238] __slab_alloc.constprop.0+0xa7/0xf0 [ 712.889680][T22238] __kmalloc_node+0x2df/0x380 [ 712.894342][T22238] kvmalloc_node+0x61/0xf0 [ 712.898745][T22238] alloc_netdev_mqs+0x98/0xe80 [ 712.903497][T22238] rtnl_create_link+0x95a/0xb80 [ 712.908340][T22238] __rtnl_newlink+0xf7e/0x1760 [ 712.913094][T22238] rtnl_newlink+0x64/0xa0 [ 712.917407][T22238] rtnetlink_rcv_msg+0x413/0xb80 [ 712.922328][T22238] netlink_rcv_skb+0x153/0x420 [ 712.927083][T22238] netlink_unicast+0x533/0x7d0 [ 712.931908][T22238] netlink_sendmsg+0x86d/0xdb0 [ 712.936672][T22238] page_owner free stack trace missing [ 712.942021][T22238] [ 712.944329][T22238] Memory state around the buggy address: [ 712.949938][T22238] ffff88808ccaab80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 712.957982][T22238] ffff88808ccaac00: 00 00 00 00 00 00 00 00 07 fc fc fc fc fc fc fc [ 712.966029][T22238] >ffff88808ccaac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 712.974070][T22238] ^ [ 712.978398][T22238] ffff88808ccaad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 12:59:29 executing program 3: mknod$loop(&(0x7f0000000100)='./file0\x00', 0xc000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x0, 0x0) [ 712.986453][T22238] ffff88808ccaad80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 712.994499][T22238] ================================================================== [ 713.002541][T22238] Disabling lock debugging due to kernel taint 12:59:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000000)="fe", 0x1, 0x4004000, 0x0, 0x0) 12:59:30 executing program 0: select(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) 12:59:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$XDP_RX_RING(r0, 0x29, 0x43, 0x0, 0x3) [ 713.946677][T22238] Kernel panic - not syncing: panic_on_warn set ... [ 713.953275][T22238] CPU: 0 PID: 22238 Comm: syz-executor.2 Tainted: G B 5.14.0-rc3-next-20210730-syzkaller #0 [ 713.964622][T22238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.974659][T22238] Call Trace: [ 713.977922][T22238] dump_stack_lvl+0xcd/0x134 [ 713.982500][T22238] panic+0x2b0/0x6dd [ 713.986423][T22238] ? __warn_printk+0xf3/0xf3 [ 713.991000][T22238] ? preempt_schedule_common+0x59/0xc0 [ 713.996442][T22238] ? add_del_if+0x13a/0x140 [ 714.000928][T22238] ? preempt_schedule_thunk+0x16/0x18 [ 714.006307][T22238] ? trace_hardirqs_on+0x38/0x1c0 [ 714.011378][T22238] ? trace_hardirqs_on+0x51/0x1c0 [ 714.016394][T22238] ? add_del_if+0x13a/0x140 [ 714.020882][T22238] ? add_del_if+0x13a/0x140 [ 714.025371][T22238] end_report.cold+0x63/0x6f [ 714.029948][T22238] kasan_report.cold+0x71/0xdf [ 714.034735][T22238] ? add_del_if+0x13a/0x140 [ 714.039229][T22238] add_del_if+0x13a/0x140 [ 714.043539][T22238] br_ioctl_stub+0x1c6/0x7f0 [ 714.048110][T22238] ? mutex_lock_io_nested+0x1160/0x1160 [ 714.053637][T22238] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 714.059253][T22238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.065476][T22238] ? full_name_hash+0xb5/0xf0 [ 714.070147][T22238] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 714.075763][T22238] br_ioctl_call+0x5e/0xa0 [ 714.080164][T22238] dev_ifsioc+0xc1f/0xf60 [ 714.084477][T22238] ? dev_load+0x79/0x200 [ 714.088702][T22238] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 714.094660][T22238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.100882][T22238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.107106][T22238] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 714.113071][T22238] dev_ioctl+0x1b9/0xee0 [ 714.117294][T22238] sock_do_ioctl+0x18b/0x210 [ 714.121877][T22238] ? put_user_ifreq+0x140/0x140 [ 714.126711][T22238] sock_ioctl+0x2f1/0x640 [ 714.131022][T22238] ? br_ioctl_call+0xa0/0xa0 [ 714.135590][T22238] ? __fget_files+0x23d/0x3e0 [ 714.140253][T22238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.146473][T22238] ? br_ioctl_call+0xa0/0xa0 [ 714.151044][T22238] __x64_sys_ioctl+0x193/0x200 [ 714.155793][T22238] do_syscall_64+0x35/0xb0 [ 714.160204][T22238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 714.166092][T22238] RIP: 0033:0x4665e9 [ 714.169967][T22238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 714.189554][T22238] RSP: 002b:00007efc893ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.197946][T22238] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 714.205900][T22238] RDX: 0000000020000000 RSI: 00000000000089a3 RDI: 0000000000000003 [ 714.213851][T22238] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 714.221801][T22238] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 714.229750][T22238] R13: 00007ffc3311886f R14: 00007efc893ec300 R15: 0000000000022000 [ 714.237788][T22238] Kernel Offset: disabled [ 714.242096][T22238] Rebooting in 86400 seconds..